# Flog Txt Version 1 # Analyzer Version: 4.6.0 # Analyzer Build Date: Jul 8 2022 06:26:21 # Log Creation Date: 05.08.2022 14:22:32.795 Process: id = "1" image_name = "f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" page_root = "0x27203000" os_pid = "0x1358" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7b4" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 117 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 118 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 119 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 120 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 121 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 122 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 123 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 124 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 125 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 126 start_va = 0x400000 end_va = 0x4ebfff monitored = 1 entry_point = 0x4e7e6e region_type = mapped_file name = "f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe") Region: id = 127 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 128 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 129 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 130 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 131 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 132 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 271 start_va = 0x4f0000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 272 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 273 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 274 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 275 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 276 start_va = 0x630000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 277 start_va = 0x6f850000 end_va = 0x6f8a8fff monitored = 1 entry_point = 0x6f860780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 278 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 279 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 280 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 281 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 282 start_va = 0x4f0000 end_va = 0x5adfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 283 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 284 start_va = 0x880000 end_va = 0x9effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 285 start_va = 0x73e50000 end_va = 0x73ee1fff monitored = 0 entry_point = 0x73e90380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 286 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 287 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 288 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 289 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 290 start_va = 0x5b0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 291 start_va = 0x630000 end_va = 0x72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 292 start_va = 0x780000 end_va = 0x87ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 293 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 294 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 295 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 296 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 297 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 298 start_va = 0x9f0000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009f0000" filename = "" Region: id = 299 start_va = 0x6f7d0000 end_va = 0x6f84cfff monitored = 1 entry_point = 0x6f7e0db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 300 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 301 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 302 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 303 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 304 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 305 start_va = 0x9f0000 end_va = 0xb77fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 306 start_va = 0xb90000 end_va = 0xb9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 307 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 308 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 309 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 310 start_va = 0xba0000 end_va = 0xd20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ba0000" filename = "" Region: id = 311 start_va = 0xd30000 end_va = 0x212ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d30000" filename = "" Region: id = 312 start_va = 0x880000 end_va = 0x967fff monitored = 1 entry_point = 0x967e6e region_type = mapped_file name = "f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe") Region: id = 313 start_va = 0x9e0000 end_va = 0x9effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009e0000" filename = "" Region: id = 314 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 315 start_va = 0x6f7c0000 end_va = 0x6f7c7fff monitored = 0 entry_point = 0x6f7c17b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 316 start_va = 0x6f0d0000 end_va = 0x6f7b0fff monitored = 1 entry_point = 0x6f0fcd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 317 start_va = 0x6efd0000 end_va = 0x6f0c4fff monitored = 0 entry_point = 0x6f024160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 318 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 319 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 320 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 321 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 322 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 323 start_va = 0x730000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000730000" filename = "" Region: id = 324 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 325 start_va = 0x750000 end_va = 0x750fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 326 start_va = 0x760000 end_va = 0x760fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 327 start_va = 0x880000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 328 start_va = 0x880000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 329 start_va = 0x960000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 330 start_va = 0x880000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 331 start_va = 0x950000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 332 start_va = 0x2130000 end_va = 0x222ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 333 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 334 start_va = 0x2230000 end_va = 0x422ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002230000" filename = "" Region: id = 335 start_va = 0x4230000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004230000" filename = "" Region: id = 336 start_va = 0x8c0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 337 start_va = 0x42d0000 end_va = 0x43cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042d0000" filename = "" Region: id = 338 start_va = 0x43d0000 end_va = 0x4706fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 339 start_va = 0x6ceb0000 end_va = 0x6e161fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 340 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 341 start_va = 0x4710000 end_va = 0x47a0fff monitored = 0 entry_point = 0x4748cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 342 start_va = 0x72cb0000 end_va = 0x72d24fff monitored = 0 entry_point = 0x72ce9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 343 start_va = 0x4710000 end_va = 0x483ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004710000" filename = "" Region: id = 344 start_va = 0x770000 end_va = 0x77ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 345 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 346 start_va = 0x6ce30000 end_va = 0x6ceaffff monitored = 1 entry_point = 0x6ce31180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 347 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 348 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 349 start_va = 0x6c460000 end_va = 0x6ce2bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\1be7a15b1f33bf22e4f53aaf45518c77\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\1be7a15b1f33bf22e4f53aaf45518c77\\system.ni.dll") Region: id = 350 start_va = 0x6bd30000 end_va = 0x6c450fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\eb4cca4f06a15158c3f7e2c56516729b\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\eb4cca4f06a15158c3f7e2c56516729b\\system.core.ni.dll") Region: id = 351 start_va = 0x6bba0000 end_va = 0x6bd2efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\system.drawing.ni.dll") Region: id = 352 start_va = 0x6af30000 end_va = 0x6bb96fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\system.windows.forms.ni.dll") Region: id = 353 start_va = 0x920000 end_va = 0x920fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 354 start_va = 0x920000 end_va = 0x921fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 355 start_va = 0x930000 end_va = 0x93ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 356 start_va = 0x940000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 357 start_va = 0x4710000 end_va = 0x479efff monitored = 0 entry_point = 0x471dd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 358 start_va = 0x4830000 end_va = 0x483ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004830000" filename = "" Region: id = 359 start_va = 0x6ae90000 end_va = 0x6af21fff monitored = 0 entry_point = 0x6ae9dd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 360 start_va = 0x4710000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004710000" filename = "" Region: id = 361 start_va = 0x940000 end_va = 0x940fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 362 start_va = 0x4710000 end_va = 0x47cbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004710000" filename = "" Region: id = 363 start_va = 0x47e0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 364 start_va = 0x940000 end_va = 0x943fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000940000" filename = "" Region: id = 365 start_va = 0x970000 end_va = 0x973fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 366 start_va = 0x4840000 end_va = 0x4a4afff monitored = 0 entry_point = 0x48eb0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 367 start_va = 0x72dd0000 end_va = 0x72fdefff monitored = 0 entry_point = 0x72e7b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 368 start_va = 0x980000 end_va = 0x980fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 369 start_va = 0x990000 end_va = 0x991fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 370 start_va = 0x4840000 end_va = 0x496ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 371 start_va = 0x713a0000 end_va = 0x713bcfff monitored = 0 entry_point = 0x713a3b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 372 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 373 start_va = 0x9a0000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 374 start_va = 0x9b0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009b0000" filename = "" Region: id = 375 start_va = 0x9c0000 end_va = 0x9cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 376 start_va = 0x9d0000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 377 start_va = 0xb80000 end_va = 0xb8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 378 start_va = 0x47d0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 379 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 380 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 381 start_va = 0x4810000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004810000" filename = "" Region: id = 382 start_va = 0x4820000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 383 start_va = 0x4840000 end_va = 0x484ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 384 start_va = 0x4960000 end_va = 0x496ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004960000" filename = "" Region: id = 385 start_va = 0x4850000 end_va = 0x485ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004850000" filename = "" Region: id = 386 start_va = 0x4860000 end_va = 0x486ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 387 start_va = 0x4870000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 388 start_va = 0x4880000 end_va = 0x488ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 389 start_va = 0x4890000 end_va = 0x489ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004890000" filename = "" Region: id = 390 start_va = 0x48a0000 end_va = 0x48affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048a0000" filename = "" Region: id = 391 start_va = 0x48b0000 end_va = 0x48bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 392 start_va = 0x48c0000 end_va = 0x48cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048c0000" filename = "" Region: id = 393 start_va = 0x48d0000 end_va = 0x48dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048d0000" filename = "" Region: id = 394 start_va = 0x6ee60000 end_va = 0x6efcafff monitored = 0 entry_point = 0x6eece360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 395 start_va = 0x4840000 end_va = 0x48effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 396 start_va = 0x9a0000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 397 start_va = 0x4970000 end_va = 0x4a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 398 start_va = 0x70b70000 end_va = 0x70d60fff monitored = 0 entry_point = 0x70c53cd0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 399 start_va = 0x764e0000 end_va = 0x765fefff monitored = 0 entry_point = 0x76525980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 400 start_va = 0x4840000 end_va = 0x4888fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 401 start_va = 0x48e0000 end_va = 0x48effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048e0000" filename = "" Region: id = 402 start_va = 0x980000 end_va = 0x983fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 403 start_va = 0x4a70000 end_va = 0x5a6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 404 start_va = 0xb80000 end_va = 0xb83fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 405 start_va = 0x5a70000 end_va = 0x5b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a70000" filename = "" Region: id = 406 start_va = 0x5b70000 end_va = 0x5c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b70000" filename = "" Region: id = 407 start_va = 0x5c70000 end_va = 0x6161fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005c70000" filename = "" Region: id = 408 start_va = 0x6170000 end_va = 0x622cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 409 start_va = 0x6230000 end_va = 0x662ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006230000" filename = "" Region: id = 410 start_va = 0x6630000 end_va = 0x766ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 411 start_va = 0x47d0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 412 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 413 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 414 start_va = 0x48f0000 end_va = 0x4951fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 415 start_va = 0x47d0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 416 start_va = 0x7670000 end_va = 0x76effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007670000" filename = "" Region: id = 417 start_va = 0x6ece0000 end_va = 0x6ee52fff monitored = 0 entry_point = 0x6ed8d220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 418 start_va = 0x47f0000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 419 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000047f0000" filename = "" Region: id = 420 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004800000" filename = "" Region: id = 421 start_va = 0x4810000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004810000" filename = "" Region: id = 422 start_va = 0x4820000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 423 start_va = 0x4820000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 424 start_va = 0x4820000 end_va = 0x4820fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 425 start_va = 0x6ebe0000 end_va = 0x6ecd0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\fe4b221b4109f0c78f57a792500699b5\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\fe4b221b4109f0c78f57a792500699b5\\system.configuration.ni.dll") Region: id = 426 start_va = 0x6e4c0000 end_va = 0x6ebddfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\4fbda26d781323081b45526da6e87b35\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\4fbda26d781323081b45526da6e87b35\\system.xml.ni.dll") Region: id = 427 start_va = 0x4890000 end_va = 0x489ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004890000" filename = "" Region: id = 428 start_va = 0x6e430000 end_va = 0x6e4b0fff monitored = 0 entry_point = 0x6e436310 region_type = mapped_file name = "riched20.dll" filename = "\\Windows\\SysWOW64\\riched20.dll" (normalized: "c:\\windows\\syswow64\\riched20.dll") Region: id = 429 start_va = 0x6e3f0000 end_va = 0x6e405fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 430 start_va = 0x6e3b0000 end_va = 0x6e3e0fff monitored = 0 entry_point = 0x6e3c22d0 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\SysWOW64\\msls31.dll" (normalized: "c:\\windows\\syswow64\\msls31.dll") Region: id = 431 start_va = 0x48a0000 end_va = 0x48a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\SysWOW64\\winnlsres.dll" (normalized: "c:\\windows\\syswow64\\winnlsres.dll") Region: id = 432 start_va = 0x48b0000 end_va = 0x48bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\winnlsres.dll.mui") Region: id = 433 start_va = 0x48c0000 end_va = 0x48c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000048c0000" filename = "" Region: id = 434 start_va = 0x74340000 end_va = 0x743c3fff monitored = 0 entry_point = 0x74366220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 435 start_va = 0x48d0000 end_va = 0x48d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000048d0000" filename = "" Region: id = 436 start_va = 0x72fe0000 end_va = 0x73b78fff monitored = 0 entry_point = 0x731b6970 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 437 start_va = 0x74520000 end_va = 0x745acfff monitored = 0 entry_point = 0x74569b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 438 start_va = 0x74eb0000 end_va = 0x762aefff monitored = 0 entry_point = 0x7506b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 439 start_va = 0x76800000 end_va = 0x76836fff monitored = 0 entry_point = 0x76803b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 440 start_va = 0x745b0000 end_va = 0x74aa8fff monitored = 0 entry_point = 0x747b7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 441 start_va = 0x76470000 end_va = 0x764b3fff monitored = 0 entry_point = 0x76477410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 442 start_va = 0x73f20000 end_va = 0x73f2efff monitored = 0 entry_point = 0x73f22e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 443 start_va = 0x73b80000 end_va = 0x73e4afff monitored = 0 entry_point = 0x73dbc4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 444 start_va = 0x76f0000 end_va = 0x76f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000076f0000" filename = "" Region: id = 445 start_va = 0x6e320000 end_va = 0x6e3a0fff monitored = 0 entry_point = 0x6e33b260 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\SysWOW64\\sxs.dll" (normalized: "c:\\windows\\syswow64\\sxs.dll") Region: id = 446 start_va = 0x7700000 end_va = 0x7710fff monitored = 0 entry_point = 0x78d6970 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\SysWOW64\\ieframe.dll" (normalized: "c:\\windows\\syswow64\\ieframe.dll") Region: id = 447 start_va = 0x7720000 end_va = 0x77fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 448 start_va = 0x7800000 end_va = 0x783ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007800000" filename = "" Region: id = 449 start_va = 0x7840000 end_va = 0x793ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007840000" filename = "" Region: id = 450 start_va = 0x7940000 end_va = 0x797ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007940000" filename = "" Region: id = 451 start_va = 0x7980000 end_va = 0x7a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007980000" filename = "" Region: id = 452 start_va = 0x7a80000 end_va = 0x7abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007a80000" filename = "" Region: id = 453 start_va = 0x7ac0000 end_va = 0x7bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ac0000" filename = "" Region: id = 454 start_va = 0x70a00000 end_va = 0x70a40fff monitored = 0 entry_point = 0x70a07fe0 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\SysWOW64\\DataExchange.dll" (normalized: "c:\\windows\\syswow64\\dataexchange.dll") Region: id = 455 start_va = 0x707e0000 end_va = 0x709f9fff monitored = 0 entry_point = 0x70875550 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\SysWOW64\\d3d11.dll" (normalized: "c:\\windows\\syswow64\\d3d11.dll") Region: id = 456 start_va = 0x70730000 end_va = 0x707d6fff monitored = 0 entry_point = 0x70766240 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\SysWOW64\\dcomp.dll" (normalized: "c:\\windows\\syswow64\\dcomp.dll") Region: id = 457 start_va = 0x70ae0000 end_va = 0x70b62fff monitored = 0 entry_point = 0x70b037c0 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\SysWOW64\\dxgi.dll" (normalized: "c:\\windows\\syswow64\\dxgi.dll") Region: id = 458 start_va = 0x7bc0000 end_va = 0x7bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007bc0000" filename = "" Region: id = 459 start_va = 0x7c00000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c00000" filename = "" Region: id = 460 start_va = 0x70660000 end_va = 0x7072cfff monitored = 0 entry_point = 0x706b29c0 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\SysWOW64\\twinapi.appcore.dll" (normalized: "c:\\windows\\syswow64\\twinapi.appcore.dll") Region: id = 461 start_va = 0x71560000 end_va = 0x7157afff monitored = 0 entry_point = 0x71569050 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 462 start_va = 0x7d00000 end_va = 0x7d0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007d00000" filename = "" Region: id = 463 start_va = 0x7d00000 end_va = 0x7d0ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007d00000" filename = "" Region: id = 464 start_va = 0x7d00000 end_va = 0x7d00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007d00000" filename = "" Region: id = 465 start_va = 0x71200000 end_va = 0x71212fff monitored = 0 entry_point = 0x71209950 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 466 start_va = 0x70230000 end_va = 0x7025efff monitored = 0 entry_point = 0x702495e0 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 467 start_va = 0x5e430000 end_va = 0x5e4cbfff monitored = 1 entry_point = 0x5e4be9a6 region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 468 start_va = 0x7d10000 end_va = 0x7dabfff monitored = 1 entry_point = 0x7d9e9a6 region_type = mapped_file name = "microsoft.visualbasic.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\Microsoft.VisualBasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\Microsoft.VisualBasic.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\microsoft.visualbasic\\v4.0_10.0.0.0__b03f5f7f11d50a3a\\microsoft.visualbasic.dll") Region: id = 469 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 470 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 471 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 472 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 473 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 474 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 475 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 476 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 477 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 478 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 479 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 480 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 481 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 482 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 483 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 484 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 485 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 486 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 487 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 488 start_va = 0x7dd0000 end_va = 0x7ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dd0000" filename = "" Region: id = 489 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 490 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 491 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 492 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 493 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 494 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 495 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 496 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 497 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 498 start_va = 0x7e10000 end_va = 0x7e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 499 start_va = 0x7e10000 end_va = 0x7e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 500 start_va = 0x7e20000 end_va = 0x7e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e20000" filename = "" Region: id = 501 start_va = 0x7e30000 end_va = 0x7e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e30000" filename = "" Region: id = 502 start_va = 0x7e40000 end_va = 0x7e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e40000" filename = "" Region: id = 503 start_va = 0x7e50000 end_va = 0x7e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e50000" filename = "" Region: id = 504 start_va = 0x7e60000 end_va = 0x7e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e60000" filename = "" Region: id = 505 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 506 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 507 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 508 start_va = 0x7db0000 end_va = 0x7dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007db0000" filename = "" Region: id = 509 start_va = 0x7db0000 end_va = 0x7dbefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007db0000" filename = "" Region: id = 510 start_va = 0x7dc0000 end_va = 0x7dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007dc0000" filename = "" Region: id = 511 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 512 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 513 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 514 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 515 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 516 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 517 start_va = 0x7de0000 end_va = 0x7e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 518 start_va = 0x7e20000 end_va = 0x7f1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e20000" filename = "" Region: id = 519 start_va = 0x7f20000 end_va = 0x8f1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f20000" filename = "" Region: id = 520 start_va = 0x8f20000 end_va = 0x910ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008f20000" filename = "" Region: id = 521 start_va = 0x9110000 end_va = 0xa10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009110000" filename = "" Region: id = 522 start_va = 0xa110000 end_va = 0xa4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a110000" filename = "" Region: id = 523 start_va = 0xa4f0000 end_va = 0xa4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4f0000" filename = "" Region: id = 524 start_va = 0xa4f0000 end_va = 0xa4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4f0000" filename = "" Region: id = 525 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 526 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 527 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 528 start_va = 0x630000 end_va = 0x72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 529 start_va = 0x5b0000 end_va = 0x5b2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 530 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 531 start_va = 0x7bc0000 end_va = 0x7c26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007bc0000" filename = "" Region: id = 532 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 533 start_va = 0x4230000 end_va = 0x4295fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004230000" filename = "" Region: id = 534 start_va = 0x5c0000 end_va = 0x5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 535 start_va = 0x5d0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 536 start_va = 0x5e0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 537 start_va = 0x42a0000 end_va = 0x42affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 538 start_va = 0x42b0000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 539 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 540 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 541 start_va = 0x7c40000 end_va = 0x7c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 542 start_va = 0x7c50000 end_va = 0x7c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 543 start_va = 0x7c60000 end_va = 0x7c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 544 start_va = 0x7c70000 end_va = 0x7c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c70000" filename = "" Region: id = 545 start_va = 0x7c80000 end_va = 0x7c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c80000" filename = "" Region: id = 546 start_va = 0x7c90000 end_va = 0x7c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c90000" filename = "" Region: id = 547 start_va = 0x7ca0000 end_va = 0x7caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ca0000" filename = "" Region: id = 548 start_va = 0x7cb0000 end_va = 0x7cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cb0000" filename = "" Region: id = 549 start_va = 0x7cc0000 end_va = 0x7ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cc0000" filename = "" Region: id = 550 start_va = 0x7cd0000 end_va = 0x7cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cd0000" filename = "" Region: id = 551 start_va = 0x7ce0000 end_va = 0x7ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ce0000" filename = "" Region: id = 552 start_va = 0x7cf0000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cf0000" filename = "" Region: id = 553 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 554 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 555 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 556 start_va = 0x7e10000 end_va = 0x7e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 557 start_va = 0x42b0000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 558 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 559 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 560 start_va = 0x42b0000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 561 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 562 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 563 start_va = 0x42b0000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 564 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 565 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 566 start_va = 0x7c40000 end_va = 0x7c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 567 start_va = 0x7c50000 end_va = 0x7c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 568 start_va = 0x7c60000 end_va = 0x7c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 569 start_va = 0x7c70000 end_va = 0x7c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c70000" filename = "" Region: id = 570 start_va = 0x7c80000 end_va = 0x7c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c80000" filename = "" Region: id = 571 start_va = 0x7c90000 end_va = 0x7c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c90000" filename = "" Region: id = 572 start_va = 0x7ca0000 end_va = 0x7caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ca0000" filename = "" Region: id = 573 start_va = 0x7cb0000 end_va = 0x7cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cb0000" filename = "" Region: id = 574 start_va = 0x7cc0000 end_va = 0x7ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cc0000" filename = "" Region: id = 575 start_va = 0x7cd0000 end_va = 0x7cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cd0000" filename = "" Region: id = 576 start_va = 0x7ce0000 end_va = 0x7ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ce0000" filename = "" Region: id = 577 start_va = 0x7cf0000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cf0000" filename = "" Region: id = 578 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 579 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 580 start_va = 0x7e00000 end_va = 0x7e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 581 start_va = 0x42b0000 end_va = 0x42bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 582 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 583 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 584 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 585 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 586 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 587 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 588 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 589 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 590 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 591 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 592 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 593 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 594 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 595 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 596 start_va = 0x42c0000 end_va = 0x42cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 597 start_va = 0x6e200000 end_va = 0x6e31cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\98d3949f9ba1a384939805aa5e47e933\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\98d3949f9ba1a384939805aa5e47e933\\system.management.ni.dll") Region: id = 598 start_va = 0x7c30000 end_va = 0x7c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c30000" filename = "" Region: id = 599 start_va = 0x7c40000 end_va = 0x7c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 600 start_va = 0x7c50000 end_va = 0x7c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 601 start_va = 0x7c60000 end_va = 0x7c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 602 start_va = 0x7c70000 end_va = 0x7c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c70000" filename = "" Region: id = 603 start_va = 0x7c80000 end_va = 0x7c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c80000" filename = "" Region: id = 604 start_va = 0x7c90000 end_va = 0x7c9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c90000" filename = "" Region: id = 605 start_va = 0x7ca0000 end_va = 0x7caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ca0000" filename = "" Region: id = 606 start_va = 0x7cb0000 end_va = 0x7cbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cb0000" filename = "" Region: id = 607 start_va = 0x7cc0000 end_va = 0x7ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cc0000" filename = "" Region: id = 608 start_va = 0x7cd0000 end_va = 0x7cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cd0000" filename = "" Region: id = 609 start_va = 0x7ce0000 end_va = 0x7ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007ce0000" filename = "" Region: id = 610 start_va = 0x7cf0000 end_va = 0x7cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007cf0000" filename = "" Region: id = 611 start_va = 0x7de0000 end_va = 0x7deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007de0000" filename = "" Region: id = 612 start_va = 0x7df0000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007df0000" filename = "" Region: id = 613 start_va = 0x7e10000 end_va = 0x7e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e10000" filename = "" Region: id = 614 start_va = 0x7e20000 end_va = 0x7e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e20000" filename = "" Region: id = 615 start_va = 0x7e30000 end_va = 0x7e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e30000" filename = "" Region: id = 616 start_va = 0x7e40000 end_va = 0x7e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e40000" filename = "" Region: id = 617 start_va = 0x7e50000 end_va = 0x7e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e50000" filename = "" Region: id = 618 start_va = 0x7e60000 end_va = 0x7e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e60000" filename = "" Region: id = 619 start_va = 0x7c30000 end_va = 0x7c4bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007c30000" filename = "" Region: id = 620 start_va = 0x7c50000 end_va = 0x7c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 621 start_va = 0x7c50000 end_va = 0x7c5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 622 start_va = 0x7c60000 end_va = 0x7c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c60000" filename = "" Region: id = 623 start_va = 0x7c70000 end_va = 0x7c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c70000" filename = "" Region: id = 624 start_va = 0x7c80000 end_va = 0x7c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c80000" filename = "" Region: id = 669 start_va = 0x7c50000 end_va = 0x7c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 670 start_va = 0xa4f0000 end_va = 0xa5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a4f0000" filename = "" Thread: id = 1 os_tid = 0x135c [0087.774] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0088.698] RoInitialize () returned 0x1 [0088.699] RoUninitialize () returned 0x0 [0091.931] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19de48 | out: phkResult=0x19de48*=0x0) returned 0x2 [0091.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x19eec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0091.957] IsAppThemed () returned 0x1 [0091.966] CoTaskMemAlloc (cb=0xf0) returned 0x7dea60 [0091.966] CreateActCtxA (pActCtx=0x19f404) returned 0x7dec54 [0092.175] CoTaskMemFree (pv=0x7dea60) [0092.194] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc1e2 [0092.195] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1e3 [0092.616] GetSystemMetrics (nIndex=75) returned 1 [0092.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0093.463] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6ae90000 [0093.554] AdjustWindowRectEx (in: lpRect=0x19f36c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19f36c) returned 1 [0093.557] GetCurrentProcess () returned 0xffffffff [0093.557] GetCurrentThread () returned 0xfffffffe [0093.557] GetCurrentProcess () returned 0xffffffff [0093.558] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19f284, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19f284*=0x278) returned 1 [0093.564] GetCurrentThreadId () returned 0x135c [0093.581] GetCurrentActCtx (in: lphActCtx=0x19f1e4 | out: lphActCtx=0x19f1e4*=0x0) returned 1 [0093.581] ActivateActCtx (in: hActCtx=0x7dec54, lpCookie=0x19f1f4 | out: hActCtx=0x7dec54, lpCookie=0x19f1f4) returned 1 [0093.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0094.706] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x72dd0000 [0094.728] GetModuleHandleW (lpModuleName="user32.dll") returned 0x743d0000 [0094.728] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x19f0a8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcW\x13k=$\x96¼(ú\rohö\x19", lpUsedDefaultChar=0x0) returned 14 [0094.728] GetProcAddress (hModule=0x743d0000, lpProcName="DefWindowProcW") returned 0x73e807e0 [0094.729] GetStockObject (i=5) returned 0x1900015 [0094.737] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0094.741] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0094.741] RegisterClassW (lpWndClass=0x19f098) returned 0xc1de [0094.742] CoTaskMemFree (pv=0x7d08c0) [0094.742] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0094.743] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x7039e [0094.745] SetWindowLongW (hWnd=0x7039e, nIndex=-4, dwNewLong=1944586208) returned 76940734 [0094.747] GetWindowLongW (hWnd=0x7039e, nIndex=-4) returned 1944586208 [0094.842] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e8fc | out: phkResult=0x19e8fc*=0x294) returned 0x0 [0094.843] RegQueryValueExW (in: hKey=0x294, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x19e91c, lpData=0x0, lpcbData=0x19e918*=0x0 | out: lpType=0x19e91c*=0x0, lpData=0x0, lpcbData=0x19e918*=0x0) returned 0x2 [0094.843] RegQueryValueExW (in: hKey=0x294, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x19e91c, lpData=0x0, lpcbData=0x19e918*=0x0 | out: lpType=0x19e91c*=0x0, lpData=0x0, lpcbData=0x19e918*=0x0) returned 0x2 [0094.843] RegCloseKey (hKey=0x294) returned 0x0 [0094.850] SetWindowLongW (hWnd=0x7039e, nIndex=-4, dwNewLong=76940774) returned 1944586208 [0094.850] GetWindowLongW (hWnd=0x7039e, nIndex=-4) returned 76940774 [0094.850] GetWindowLongW (hWnd=0x7039e, nIndex=-16) returned 113311744 [0094.851] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc14b [0094.852] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x7039e, Msg=0x24, wParam=0x0, lParam=0x19ec14) returned 0x0 [0094.852] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc1dc [0094.853] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x7039e, Msg=0x81, wParam=0x0, lParam=0x19ec08) returned 0x1 [0094.854] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x7039e, Msg=0x83, wParam=0x0, lParam=0x19ebf4) returned 0x0 [0095.122] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x7039e, Msg=0x1, wParam=0x0, lParam=0x19ec08) returned 0x0 [0095.123] GetClientRect (in: hWnd=0x7039e, lpRect=0x19e934 | out: lpRect=0x19e934) returned 1 [0095.123] GetWindowRect (in: hWnd=0x7039e, lpRect=0x19e934 | out: lpRect=0x19e934) returned 1 [0095.125] GetParent (hWnd=0x7039e) returned 0x0 [0095.125] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14ef0001) returned 1 [0096.082] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0096.083] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.084] AdjustWindowRectEx (in: lpRect=0x19ecd0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ecd0) returned 1 [0096.094] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.094] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0096.169] EtwEventRegister (in: ProviderId=0x22424ac, EnableCallback=0x496060e, CallbackContext=0x0, RegHandle=0x2242488 | out: RegHandle=0x2242488) returned 0x0 [0096.172] EtwEventSetInformation (RegHandle=0x7c73a8, InformationClass=0x28, EventInformation=0x2, InformationLength=0x224241c) returned 0x0 [0096.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.306] AdjustWindowRectEx (in: lpRect=0x19eca8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eca8) returned 1 [0096.308] OleInitialize (pvReserved=0x0) returned 0x0 [0096.310] RegisterClipboardFormatW (lpszFormat="WindowsForms12_subclassCheck") returned 0xc1db [0096.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.398] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0096.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.444] AdjustWindowRectEx (in: lpRect=0x19ecbc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecbc) returned 1 [0096.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0096.453] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0096.462] GetSystemDefaultLCID () returned 0x409 [0096.462] GetStockObject (i=17) returned 0x10a0047 [0096.464] GetObjectW (in: h=0x10a0047, c=92, pv=0x19ea18 | out: pv=0x19ea18) returned 92 [0096.465] GetDC (hWnd=0x0) returned 0x15010807 [0097.190] GdiplusStartup (in: token=0x616eb0, input=0x19dfd0, output=0x19e020 | out: token=0x616eb0, output=0x19e020) returned 0x0 [0097.197] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0097.199] GdipCreateFontFromLogfontW (hdc=0x15010807, logfont=0x7d08c0, font=0x19eae0) returned 0x0 [0098.416] CoTaskMemFree (pv=0x7d08c0) [0098.418] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0098.418] CoTaskMemFree (pv=0x7d08c0) [0098.418] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0098.418] CoTaskMemFree (pv=0x7d08c0) [0098.419] GdipGetFontUnit (font=0x48e1f08, unit=0x19eaac) returned 0x0 [0098.419] GdipGetFontSize (font=0x48e1f08, size=0x19eab0) returned 0x0 [0098.419] GdipGetFontStyle (font=0x48e1f08, style=0x19eaa8) returned 0x0 [0098.419] GdipGetFamily (font=0x48e1f08, family=0x19eaa4) returned 0x0 [0098.420] GdipGetFontSize (font=0x48e1f08, size=0x224d8e0) returned 0x0 [0098.420] ReleaseDC (hWnd=0x0, hDC=0x15010807) returned 1 [0098.421] GetDC (hWnd=0x0) returned 0xc0100ae [0098.421] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19eac8) returned 0x0 [0098.454] GdipGetDpiY (graphics=0x5b7f268, dpi=0x224d9e8) returned 0x0 [0098.454] GdipGetFontHeight (font=0x48e1f08, graphics=0x5b7f268, height=0x19eac0) returned 0x0 [0098.454] GdipGetEmHeight (family=0x5b751f8, style=0, EmHeight=0x19eac8) returned 0x0 [0098.454] GdipGetLineSpacing (family=0x5b751f8, style=0, LineSpacing=0x19eac8) returned 0x0 [0098.455] GdipDeleteGraphics (graphics=0x5b7f268) returned 0x0 [0098.456] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0098.456] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=0, unit=0x3, font=0x224d9a8) returned 0x0 [0098.456] GdipGetFontSize (font=0x48eefc0, size=0x224d9ac) returned 0x0 [0098.456] GdipDeleteFont (font=0x48e1f08) returned 0x0 [0098.457] GetDC (hWnd=0x0) returned 0xc0100ae [0098.457] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19eb14) returned 0x0 [0098.457] GdipGetFontHeight (font=0x48eefc0, graphics=0x5b7f268, height=0x19eb0c) returned 0x0 [0098.457] GdipDeleteGraphics (graphics=0x5b7f268) returned 0x0 [0098.457] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0098.466] GdipGetFamilyName (in: family=0x5b751f8, name=0x19ea20, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0098.468] CreateCompatibleDC (hdc=0x0) returned 0x230106af [0098.469] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0098.469] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0098.469] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0098.469] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x18a0048 [0098.470] SaveDC (hdc=0x230106af) returned 1 [0098.470] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0098.471] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0098.471] CreateFontIndirectW (lplf=0x7d08c0) returned 0x1f0a096d [0098.471] CoTaskMemFree (pv=0x7d08c0) [0098.471] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e9e4 | out: pv=0x19e9e4) returned 92 [0098.472] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x18a0048 [0098.472] GetObjectW (in: h=0x18a0048, c=92, pv=0x19e944 | out: pv=0x19e944) returned 92 [0098.472] SelectObject (hdc=0x230106af, h=0x1f0a096d) returned 0x18a0048 [0098.472] GetMapMode (hdc=0x230106af) returned 1 [0098.473] GetTextMetricsW (in: hdc=0x230106af, lptm=0x19ea0c | out: lptm=0x19ea0c) returned 1 [0098.474] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb18, format=0x420, lpdtp=0x224dfc0 | out: lpchText="j^", lprc=0x19eb18) returned 13 [0098.509] GetSystemMetrics (nIndex=5) returned 1 [0098.509] GetSystemMetrics (nIndex=6) returned 1 [0098.510] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.511] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb10, format=0x420, lpdtp=0x224e0f8 | out: lpchText="j^", lprc=0x19eb10) returned 13 [0098.511] GetSystemMetrics (nIndex=5) returned 1 [0098.511] GetSystemMetrics (nIndex=6) returned 1 [0098.511] AdjustWindowRectEx (in: lpRect=0x19ecd4, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecd4) returned 1 [0098.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.569] AdjustWindowRectEx (in: lpRect=0x19ec9c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec9c) returned 1 [0098.589] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.590] AdjustWindowRectEx (in: lpRect=0x19ec88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec88) returned 1 [0098.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.646] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0098.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.649] AdjustWindowRectEx (in: lpRect=0x19eb34, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb34) returned 1 [0098.651] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0098.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.652] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0098.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.652] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0098.658] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.658] AdjustWindowRectEx (in: lpRect=0x19eb1c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb1c) returned 1 [0098.666] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.666] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0098.694] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0098.695] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x224f778) returned 0x0 [0098.695] GdipGetFontSize (font=0x48e1f08, size=0x224f77c) returned 0x0 [0098.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.705] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0098.715] GetProcessWindowStation () returned 0xf0 [0098.720] GetUserObjectInformationA (in: hObj=0xf0, nIndex=1, pvInfo=0x224fecc, nLength=0xc, lpnLengthNeeded=0x19e964 | out: pvInfo=0x224fecc, lpnLengthNeeded=0x19e964) returned 1 [0098.728] SetConsoleCtrlHandler (HandlerRoutine=0x4960636, Add=1) returned 1 [0098.729] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0098.729] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0098.731] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x224ff30 | out: lpWndClass=0x224ff30) returned 0 [0098.734] CoTaskMemAlloc (cb=0x58) returned 0x7d33f0 [0098.734] RegisterClassW (lpWndClass=0x19e8b4) returned 0xc1e5 [0098.734] CoTaskMemFree (pv=0x7d33f0) [0098.735] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40386 [0098.740] NtdllDefWindowProc_W (hWnd=0x40386, Msg=0x81, wParam=0x0, lParam=0x19e3f0) returned 0x1 [0098.746] NtdllDefWindowProc_W (hWnd=0x40386, Msg=0x83, wParam=0x0, lParam=0x19e3dc) returned 0x0 [0098.746] NtdllDefWindowProc_W (hWnd=0x40386, Msg=0x1, wParam=0x0, lParam=0x19e3f0) returned 0x0 [0098.747] NtdllDefWindowProc_W (hWnd=0x40386, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0098.747] NtdllDefWindowProc_W (hWnd=0x40386, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0098.751] GetSysColor (nIndex=10) returned 0xb4b4b4 [0098.751] GetSysColor (nIndex=2) returned 0xd1b499 [0098.751] GetSysColor (nIndex=9) returned 0x0 [0098.751] GetSysColor (nIndex=12) returned 0xababab [0098.751] GetSysColor (nIndex=15) returned 0xf0f0f0 [0098.751] GetSysColor (nIndex=20) returned 0xffffff [0098.751] GetSysColor (nIndex=16) returned 0xa0a0a0 [0098.751] GetSysColor (nIndex=15) returned 0xf0f0f0 [0098.751] GetSysColor (nIndex=16) returned 0xa0a0a0 [0098.751] GetSysColor (nIndex=21) returned 0x696969 [0098.751] GetSysColor (nIndex=22) returned 0xe3e3e3 [0098.751] GetSysColor (nIndex=20) returned 0xffffff [0098.751] GetSysColor (nIndex=18) returned 0x0 [0098.751] GetSysColor (nIndex=1) returned 0x0 [0098.752] GetSysColor (nIndex=27) returned 0xead1b9 [0098.752] GetSysColor (nIndex=28) returned 0xf2e4d7 [0098.752] GetSysColor (nIndex=17) returned 0x6d6d6d [0098.752] GetSysColor (nIndex=13) returned 0xff9933 [0098.752] GetSysColor (nIndex=14) returned 0xffffff [0098.752] GetSysColor (nIndex=26) returned 0xcc6600 [0098.752] GetSysColor (nIndex=11) returned 0xfcf7f4 [0098.752] GetSysColor (nIndex=3) returned 0xdbcdbf [0098.752] GetSysColor (nIndex=19) returned 0x0 [0098.752] GetSysColor (nIndex=24) returned 0xe1ffff [0098.752] GetSysColor (nIndex=23) returned 0x0 [0098.752] GetSysColor (nIndex=4) returned 0xf0f0f0 [0098.752] GetSysColor (nIndex=30) returned 0xf0f0f0 [0098.752] GetSysColor (nIndex=29) returned 0xff9933 [0098.752] GetSysColor (nIndex=7) returned 0x0 [0098.752] GetSysColor (nIndex=0) returned 0xc8c8c8 [0098.752] GetSysColor (nIndex=5) returned 0xffffff [0098.753] GetSysColor (nIndex=6) returned 0x646464 [0098.753] GetSysColor (nIndex=8) returned 0x0 [0098.759] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0098.759] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0098.773] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", nBufferLength=0x105, lpBuffer=0x19e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", lpFilePart=0x0) returned 0x69 [0098.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e880) returned 1 [0098.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e8fc | out: lpFileInformation=0x19e8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0098.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e87c) returned 1 [0099.186] GdipLoadImageFromStream (stream=0x47d0030, image=0x19e580) returned 0x0 [0099.522] GdipImageForceValidation (image=0x5b7f268) returned 0x0 [0099.526] GdipGetImageType (image=0x5b7f268, type=0x19e57c) returned 0x0 [0099.527] GdipGetImageRawFormat (image=0x5b7f268, format=0x19e4f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0099.540] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.540] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0099.541] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.541] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0099.643] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.643] AdjustWindowRectEx (in: lpRect=0x19ea84, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea84) returned 1 [0099.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.644] AdjustWindowRectEx (in: lpRect=0x19ea84, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea84) returned 1 [0099.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.644] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0099.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.649] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0099.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.649] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0099.651] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.651] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0099.651] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0099.651] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2267d40) returned 0x0 [0099.651] GdipGetFontSize (font=0x5b7b038, size=0x2267d44) returned 0x0 [0099.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.652] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0099.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.652] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0099.652] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0099.652] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2267ef0) returned 0x0 [0099.652] GdipGetFontSize (font=0x5b7b060, size=0x2267ef4) returned 0x0 [0099.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.655] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0099.655] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.655] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0099.670] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0099.670] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x226824c) returned 0x0 [0099.670] GdipGetFontSize (font=0x5b83e48, size=0x2268250) returned 0x0 [0099.670] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.670] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0099.670] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.671] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0099.690] GetCurrentThreadId () returned 0x135c [0099.690] GetCurrentThreadId () returned 0x135c [0099.691] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.691] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0099.692] GdipGetFamilyName (in: family=0x5b751f8, name=0x19e7e8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0099.692] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0099.693] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0099.693] CreateFontIndirectW (lplf=0x7d08c0) returned 0x850a0958 [0099.693] CoTaskMemFree (pv=0x7d08c0) [0099.693] GetObjectW (in: h=0x850a0958, c=92, pv=0x19e7ac | out: pv=0x19e7ac) returned 92 [0099.695] SelectObject (hdc=0x230106af, h=0x850a0958) returned 0x1f0a096d [0099.695] GetMapMode (hdc=0x230106af) returned 1 [0099.695] GetTextMetricsW (in: hdc=0x230106af, lptm=0x19e7d4 | out: lptm=0x19e7d4) returned 1 [0099.697] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e8e0, format=0x2400, lpdtp=0x226870c | out: lpchText="Seen: ", lprc=0x19e8e0) returned 13 [0099.713] GetCurrentThreadId () returned 0x135c [0099.713] GetCurrentThreadId () returned 0x135c [0099.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.713] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0099.714] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e8e0, format=0x2400, lpdtp=0x2268aa8 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e8e0) returned 13 [0099.715] GetCurrentThreadId () returned 0x135c [0099.715] GetCurrentThreadId () returned 0x135c [0099.715] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.715] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0099.715] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e8e0, format=0x2400, lpdtp=0x2268b84 | out: lpchText="Solo", lprc=0x19e8e0) returned 13 [0099.715] GetCurrentThreadId () returned 0x135c [0099.715] GetCurrentThreadId () returned 0x135c [0099.726] GetCurrentThreadId () returned 0x135c [0099.726] GetCurrentThreadId () returned 0x135c [0099.727] GdipImageGetFrameDimensionsCount (image=0x5b7f268, count=0x19e9d0) returned 0x0 [0099.727] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5c80 [0099.727] GdipImageGetFrameDimensionsList (image=0x5b7f268, dimensionIDs=0x7e5c80*(Data1=0x6f11a484, Data2=0x6208, Data3=0x7d, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0099.730] LocalFree (hMem=0x7e5c80) returned 0x0 [0099.732] GetCurrentThreadId () returned 0x135c [0099.732] GetCurrentThreadId () returned 0x135c [0099.732] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.732] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0099.732] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e8e0, format=0x2400, lpdtp=0x2268f78 | out: lpchText="Level: ", lprc=0x19e8e0) returned 13 [0099.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.737] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eab4) returned 1 [0099.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.795] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0099.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.796] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.797] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0099.797] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0099.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.797] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.797] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.798] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0099.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.798] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.798] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0099.798] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x226a3c8) returned 0x0 [0099.799] GdipGetFontSize (font=0x5b83e70, size=0x226a3cc) returned 0x0 [0099.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.799] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.799] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.873] GdipLoadImageFromStream (stream=0x47d0010, image=0x19e4a0) returned 0x0 [0099.874] GdipImageForceValidation (image=0x5b83e98) returned 0x0 [0099.876] GdipGetImageType (image=0x5b83e98, type=0x19e49c) returned 0x0 [0099.876] GdipGetImageRawFormat (image=0x5b83e98, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0099.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.877] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0099.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.877] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0099.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.877] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0099.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.878] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0099.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.878] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0099.878] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.889] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0099.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.890] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0099.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.890] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0099.890] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0099.890] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2271540) returned 0x0 [0099.890] GdipGetFontSize (font=0x5b884a0, size=0x2271544) returned 0x0 [0099.890] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.891] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.891] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.891] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0099.891] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22716f0) returned 0x0 [0099.891] GdipGetFontSize (font=0x5b884c8, size=0x22716f4) returned 0x0 [0099.891] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.892] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0099.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.892] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0099.892] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0099.892] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2271990) returned 0x0 [0099.892] GdipGetFontSize (font=0x5b884f0, size=0x2271994) returned 0x0 [0099.892] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.892] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.893] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.893] GetCurrentThreadId () returned 0x135c [0099.893] GetCurrentThreadId () returned 0x135c [0099.893] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.893] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0099.893] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x2271c24 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0099.893] GetCurrentThreadId () returned 0x135c [0099.894] GetCurrentThreadId () returned 0x135c [0099.894] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.894] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0099.894] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x2271fc0 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0099.895] GetCurrentThreadId () returned 0x135c [0099.895] GetCurrentThreadId () returned 0x135c [0099.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.896] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0099.896] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x227209c | out: lpchText="Solo", lprc=0x19e800) returned 13 [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GdipImageGetFrameDimensionsCount (image=0x5b83e98, count=0x19e8f0) returned 0x0 [0099.896] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5e00 [0099.896] GdipImageGetFrameDimensionsList (image=0x5b83e98, dimensionIDs=0x7e5e00*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0099.896] LocalFree (hMem=0x7e5e00) returned 0x0 [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GetCurrentThreadId () returned 0x135c [0099.896] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.897] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0099.897] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22722dc | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0099.897] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.897] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0099.906] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.906] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0099.918] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.918] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0099.920] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.920] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0099.930] GetCurrentThreadId () returned 0x135c [0099.930] GetCurrentThreadId () returned 0x135c [0099.931] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.931] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0099.932] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.932] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.932] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.932] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0099.932] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0099.933] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.933] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.933] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.933] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.933] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.933] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0099.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.934] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0099.934] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0099.934] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2273a00) returned 0x0 [0099.934] GdipGetFontSize (font=0x5b88518, size=0x2273a04) returned 0x0 [0099.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.934] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0099.935] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0099.935] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.023] GdipLoadImageFromStream (stream=0x47dfff0, image=0x19e4a0) returned 0x0 [0100.024] GdipImageForceValidation (image=0x5b88540) returned 0x0 [0100.025] GdipGetImageType (image=0x5b88540, type=0x19e49c) returned 0x0 [0100.025] GdipGetImageRawFormat (image=0x5b88540, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0100.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.026] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.027] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.027] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.027] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.028] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.028] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.028] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.028] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.029] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.030] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.030] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.030] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x227ab78) returned 0x0 [0100.030] GdipGetFontSize (font=0x5b8cb48, size=0x227ab7c) returned 0x0 [0100.030] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.030] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.031] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.031] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.031] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x227ad28) returned 0x0 [0100.031] GdipGetFontSize (font=0x5b8cb70, size=0x227ad2c) returned 0x0 [0100.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.031] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.032] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.032] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.032] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x227afc8) returned 0x0 [0100.032] GdipGetFontSize (font=0x5b8cb98, size=0x227afcc) returned 0x0 [0100.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.032] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.033] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.033] GetCurrentThreadId () returned 0x135c [0100.033] GetCurrentThreadId () returned 0x135c [0100.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.033] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.033] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x227b25c | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0100.034] GetCurrentThreadId () returned 0x135c [0100.034] GetCurrentThreadId () returned 0x135c [0100.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.034] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.034] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x227b5f8 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0100.034] GetCurrentThreadId () returned 0x135c [0100.034] GetCurrentThreadId () returned 0x135c [0100.035] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.035] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.035] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x227b6d4 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0100.035] GetCurrentThreadId () returned 0x135c [0100.035] GetCurrentThreadId () returned 0x135c [0100.035] GetCurrentThreadId () returned 0x135c [0100.035] GetCurrentThreadId () returned 0x135c [0100.035] GdipImageGetFrameDimensionsCount (image=0x5b88540, count=0x19e8f0) returned 0x0 [0100.035] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5e30 [0100.036] GdipImageGetFrameDimensionsList (image=0x5b88540, dimensionIDs=0x7e5e30*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x3a)), count=0x1) returned 0x0 [0100.036] LocalFree (hMem=0x7e5e30) returned 0x0 [0100.036] GetCurrentThreadId () returned 0x135c [0100.036] GetCurrentThreadId () returned 0x135c [0100.036] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.036] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.036] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x227b914 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0100.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.037] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0100.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.037] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0100.037] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.037] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0100.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.038] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0100.038] GetCurrentThreadId () returned 0x135c [0100.038] GetCurrentThreadId () returned 0x135c [0100.038] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.038] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0100.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.039] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.039] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.039] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0100.039] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0100.040] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.040] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.040] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.040] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.040] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.040] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0100.041] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.041] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.041] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.041] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x227cf90) returned 0x0 [0100.041] GdipGetFontSize (font=0x5b8cbc0, size=0x227cf94) returned 0x0 [0100.041] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.041] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.042] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.121] GdipLoadImageFromStream (stream=0x47dffd0, image=0x19e4a0) returned 0x0 [0100.123] GdipImageForceValidation (image=0x5b8cbe8) returned 0x0 [0100.142] GdipGetImageType (image=0x5b8cbe8, type=0x19e49c) returned 0x0 [0100.142] GdipGetImageRawFormat (image=0x5b8cbe8, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0100.142] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.142] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.143] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.143] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.143] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.144] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.145] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.145] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.145] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.145] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.145] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2284108) returned 0x0 [0100.146] GdipGetFontSize (font=0x5b911f0, size=0x228410c) returned 0x0 [0100.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.146] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.146] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.146] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.146] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22842b8) returned 0x0 [0100.147] GdipGetFontSize (font=0x5b91218, size=0x22842bc) returned 0x0 [0100.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.147] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.147] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.147] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.147] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2284558) returned 0x0 [0100.147] GdipGetFontSize (font=0x5b915d8, size=0x228455c) returned 0x0 [0100.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.148] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.148] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.148] GetCurrentThreadId () returned 0x135c [0100.148] GetCurrentThreadId () returned 0x135c [0100.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.149] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.149] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22847ec | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0100.149] GetCurrentThreadId () returned 0x135c [0100.149] GetCurrentThreadId () returned 0x135c [0100.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.149] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.149] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x2284b88 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0100.149] GetCurrentThreadId () returned 0x135c [0100.149] GetCurrentThreadId () returned 0x135c [0100.150] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.150] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.150] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x2284c64 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GdipImageGetFrameDimensionsCount (image=0x5b8cbe8, count=0x19e8f0) returned 0x0 [0100.150] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5830 [0100.150] GdipImageGetFrameDimensionsList (image=0x5b8cbe8, dimensionIDs=0x7e5830*(Data1=0x6f63736d, Data2=0x6c72, Data3=0x869, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0100.150] LocalFree (hMem=0x7e5830) returned 0x0 [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GetCurrentThreadId () returned 0x135c [0100.150] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.151] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.151] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x2284ea4 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0100.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.151] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0100.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.151] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0100.151] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.151] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0100.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.152] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0100.152] GetCurrentThreadId () returned 0x135c [0100.152] GetCurrentThreadId () returned 0x135c [0100.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.152] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0100.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.153] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.153] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0100.153] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0100.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.153] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.153] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.154] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.154] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0100.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.154] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.154] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.154] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2286520) returned 0x0 [0100.154] GdipGetFontSize (font=0x5b91600, size=0x2286524) returned 0x0 [0100.154] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.154] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.155] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.155] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.254] GdipLoadImageFromStream (stream=0x47dffb0, image=0x19e4a0) returned 0x0 [0100.255] GdipImageForceValidation (image=0x5b91648) returned 0x0 [0100.256] GdipGetImageType (image=0x5b91648, type=0x19e49c) returned 0x0 [0100.256] GdipGetImageRawFormat (image=0x5b91648, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0100.256] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.256] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.257] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.257] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.257] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.257] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.258] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.258] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.258] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.258] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.258] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x228d698) returned 0x0 [0100.258] GdipGetFontSize (font=0x5b91510, size=0x228d69c) returned 0x0 [0100.258] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.258] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.259] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.259] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.259] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x228d848) returned 0x0 [0100.259] GdipGetFontSize (font=0x5b91588, size=0x228d84c) returned 0x0 [0100.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.259] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.259] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.259] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.260] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x228dae8) returned 0x0 [0100.260] GdipGetFontSize (font=0x5b91560, size=0x228daec) returned 0x0 [0100.260] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.260] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.260] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.260] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.260] GetCurrentThreadId () returned 0x135c [0100.260] GetCurrentThreadId () returned 0x135c [0100.260] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.260] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.261] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x228dd7c | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0100.261] GetCurrentThreadId () returned 0x135c [0100.261] GetCurrentThreadId () returned 0x135c [0100.261] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.261] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.261] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x228e118 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0100.261] GetCurrentThreadId () returned 0x135c [0100.261] GetCurrentThreadId () returned 0x135c [0100.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.262] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.262] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x228e1f4 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GdipImageGetFrameDimensionsCount (image=0x5b91648, count=0x19e8f0) returned 0x0 [0100.262] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e56b0 [0100.262] GdipImageGetFrameDimensionsList (image=0x5b91648, dimensionIDs=0x7e56b0*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0100.262] LocalFree (hMem=0x7e56b0) returned 0x0 [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GetCurrentThreadId () returned 0x135c [0100.262] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.262] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.263] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x228e434 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0100.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.263] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0100.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.263] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0100.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.263] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0100.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.264] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0100.264] GetCurrentThreadId () returned 0x135c [0100.264] GetCurrentThreadId () returned 0x135c [0100.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.264] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0100.264] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.265] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.265] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0100.265] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0100.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.265] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.265] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.266] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0100.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.266] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0100.266] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.266] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x228fab0) returned 0x0 [0100.266] GdipGetFontSize (font=0x5b91308, size=0x228fab4) returned 0x0 [0100.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.266] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.266] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.267] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.352] GdipLoadImageFromStream (stream=0x47dff90, image=0x19e4a0) returned 0x0 [0100.353] GdipImageForceValidation (image=0x5b95c50) returned 0x0 [0100.355] GdipGetImageType (image=0x5b95c50, type=0x19e49c) returned 0x0 [0100.355] GdipGetImageRawFormat (image=0x5b95c50, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0100.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.355] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.356] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.356] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.356] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0100.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.356] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.357] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.357] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.357] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0100.357] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.357] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2296c28) returned 0x0 [0100.357] GdipGetFontSize (font=0x5b914c0, size=0x2296c2c) returned 0x0 [0100.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.358] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.358] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.358] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.358] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2296dd8) returned 0x0 [0100.358] GdipGetFontSize (font=0x5b914e8, size=0x2296ddc) returned 0x0 [0100.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.358] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.359] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0100.359] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0100.359] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2297078) returned 0x0 [0100.359] GdipGetFontSize (font=0x5b91358, size=0x229707c) returned 0x0 [0100.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.359] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.359] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0100.359] GetCurrentThreadId () returned 0x135c [0100.359] GetCurrentThreadId () returned 0x135c [0100.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.360] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.360] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x229730c | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0100.360] GetCurrentThreadId () returned 0x135c [0100.360] GetCurrentThreadId () returned 0x135c [0100.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.360] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.360] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22976a8 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.361] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.361] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x2297784 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GetCurrentThreadId () returned 0x135c [0100.361] GdipImageGetFrameDimensionsCount (image=0x5b95c50, count=0x19e8f0) returned 0x0 [0100.361] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5788 [0100.361] GdipImageGetFrameDimensionsList (image=0x5b95c50, dimensionIDs=0x7e5788*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0100.361] LocalFree (hMem=0x7e5788) returned 0x0 [0100.361] GetCurrentThreadId () returned 0x135c [0100.362] GetCurrentThreadId () returned 0x135c [0100.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.362] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0100.362] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22979c4 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0100.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.362] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0100.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.362] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0100.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.363] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0100.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.363] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0100.363] GetCurrentThreadId () returned 0x135c [0100.363] GetCurrentThreadId () returned 0x135c [0100.367] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.367] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0100.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.384] AdjustWindowRectEx (in: lpRect=0x19ec48, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec48) returned 1 [0100.390] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ec10) returned 0x0 [0100.390] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x411c0000, style=1, unit=0x3, font=0x2298284) returned 0x0 [0100.390] GdipGetFontSize (font=0x5b91268, size=0x2298288) returned 0x0 [0100.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.392] AdjustWindowRectEx (in: lpRect=0x19eba0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eba0) returned 1 [0100.398] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.398] AdjustWindowRectEx (in: lpRect=0x19eba0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eba0) returned 1 [0100.407] GetCurrentThreadId () returned 0x135c [0100.407] GetCurrentThreadId () returned 0x135c [0100.408] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.408] AdjustWindowRectEx (in: lpRect=0x19ea10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea10) returned 1 [0100.408] GdipGetFamilyName (in: family=0x5b751f8, name=0x19e900, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0100.408] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0100.408] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0100.408] CreateFontIndirectW (lplf=0x7d08c0) returned 0x630a095a [0100.408] CoTaskMemFree (pv=0x7d08c0) [0100.408] GetObjectW (in: h=0x630a095a, c=92, pv=0x19e8c4 | out: pv=0x19e8c4) returned 92 [0100.409] SelectObject (hdc=0x230106af, h=0x630a095a) returned 0x850a0958 [0100.409] GetMapMode (hdc=0x230106af) returned 1 [0100.409] GetTextMetricsW (in: hdc=0x230106af, lptm=0x19e8ec | out: lptm=0x19e8ec) returned 1 [0100.409] DrawTextExW (in: hdc=0x230106af, lpchText="Team X", cchText=6, lprc=0x19e9f8, format=0x2400, lpdtp=0x2298bdc | out: lpchText="Team X", lprc=0x19e9f8) returned 16 [0100.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.432] AdjustWindowRectEx (in: lpRect=0x19ebcc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebcc) returned 1 [0100.434] CreateCompatibleDC (hdc=0x0) returned 0x1c010974 [0100.435] GetDC (hWnd=0x0) returned 0xc0100ae [0100.435] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19ea40) returned 0x0 [0100.436] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0100.436] GdipGetLogFontW (font=0x48eefc0, graphics=0x5b9a258, logfontW=0x7d08c0) returned 0x0 [0100.443] CoTaskMemFree (pv=0x7d08c0) [0100.443] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0100.443] CoTaskMemFree (pv=0x7d08c0) [0100.443] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0100.444] CoTaskMemFree (pv=0x7d08c0) [0100.444] GdipDeleteGraphics (graphics=0x5b9a258) returned 0x0 [0100.444] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0100.444] CoTaskMemAlloc (cb=0x5c) returned 0x7d08c0 [0100.444] CreateFontIndirectW (lplf=0x7d08c0) returned 0x320a0964 [0100.444] CoTaskMemFree (pv=0x7d08c0) [0100.444] SelectObject (hdc=0x1c010974, h=0x320a0964) returned 0x18a0048 [0100.445] GetTextMetricsW (in: hdc=0x1c010974, lptm=0x19eb4c | out: lptm=0x19eb4c) returned 1 [0100.445] GetTextExtentPoint32W (in: hdc=0x1c010974, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2298f50 | out: psizl=0x2298f50) returned 1 [0100.445] SelectObject (hdc=0x1c010974, h=0x18a0048) returned 0x320a0964 [0100.446] DeleteDC (hdc=0x1c010974) returned 1 [0100.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.447] AdjustWindowRectEx (in: lpRect=0x19eb04, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb04) returned 1 [0100.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.447] AdjustWindowRectEx (in: lpRect=0x19e968, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e968) returned 1 [0100.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.448] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0100.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.448] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0100.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.448] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.448] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.448] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.449] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.449] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.449] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0100.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.449] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.450] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.450] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.450] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.450] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.451] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.451] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.451] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.451] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.451] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.451] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.452] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0100.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.452] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0100.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.452] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.452] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.452] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.453] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.453] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.453] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0100.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.453] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.454] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.454] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.454] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.454] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.454] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.455] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.455] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.455] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.455] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.455] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0100.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.456] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0100.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.456] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.456] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.456] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.456] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.457] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.457] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.457] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0100.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.457] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.457] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.457] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.458] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.458] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.458] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.458] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.459] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.459] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.459] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.459] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.459] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.459] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0100.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.460] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0100.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.460] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.460] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.460] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.460] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.461] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.461] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0100.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.461] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.461] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.462] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.462] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.462] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.462] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.462] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.463] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.463] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.463] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.463] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0100.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.463] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0100.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.464] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.464] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.464] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.464] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.465] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.465] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0100.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.465] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.465] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.466] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.466] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.466] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.466] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.466] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.467] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0100.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.467] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0100.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.467] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0100.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.467] AdjustWindowRectEx (in: lpRect=0x19ead0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ead0) returned 1 [0100.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.467] AdjustWindowRectEx (in: lpRect=0x19e934, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e934) returned 1 [0100.468] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.468] AdjustWindowRectEx (in: lpRect=0x19e790, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e790) returned 1 [0100.475] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0100.477] SystemParametersInfoW (in: uiAction=0x1024, uiParam=0x0, pvParam=0x19ebbc, fWinIni=0x0 | out: pvParam=0x19ebbc) returned 1 [0100.477] AdjustWindowRectEx (in: lpRect=0x19ec70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec70) returned 1 [0100.609] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", nBufferLength=0x105, lpBuffer=0x19e624, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", lpFilePart=0x0) returned 0x69 [0101.165] GetCurrentProcess () returned 0xffffffff [0101.165] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e984 | out: TokenHandle=0x19e984*=0x2d4) returned 1 [0101.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19e41c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0101.171] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e97c | out: lpFileInformation=0x19e97c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0101.172] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0101.173] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x19e984 | out: lpFileInformation=0x19e984*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0101.173] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x19e384, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0101.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e8bc) returned 1 [0101.174] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2d8 [0101.174] GetFileType (hFile=0x2d8) returned 0x1 [0101.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e8b8) returned 1 [0101.174] GetFileType (hFile=0x2d8) returned 0x1 [0101.197] GetFileSize (in: hFile=0x2d8, lpFileSizeHigh=0x19e978 | out: lpFileSizeHigh=0x19e978*=0x0) returned 0x8c8f [0101.198] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e934, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e934*=0x1000, lpOverlapped=0x0) returned 1 [0101.247] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e7e4, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e7e4*=0x1000, lpOverlapped=0x0) returned 1 [0101.248] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e698, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e698*=0x1000, lpOverlapped=0x0) returned 1 [0101.248] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e698, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e698*=0x1000, lpOverlapped=0x0) returned 1 [0101.249] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e698, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e698*=0x1000, lpOverlapped=0x0) returned 1 [0101.249] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e5d0, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e5d0*=0x1000, lpOverlapped=0x0) returned 1 [0101.252] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e750, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e750*=0x1000, lpOverlapped=0x0) returned 1 [0101.253] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e660, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e660*=0x1000, lpOverlapped=0x0) returned 1 [0101.253] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e660, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e660*=0xc8f, lpOverlapped=0x0) returned 1 [0101.253] ReadFile (in: hFile=0x2d8, lpBuffer=0x229dcd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x19e720, lpOverlapped=0x0 | out: lpBuffer=0x229dcd4*, lpNumberOfBytesRead=0x19e720*=0x0, lpOverlapped=0x0) returned 1 [0101.254] CloseHandle (hObject=0x2d8) returned 1 [0101.254] GetCurrentProcess () returned 0xffffffff [0101.255] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac8 | out: TokenHandle=0x19eac8*=0x2d8) returned 1 [0101.255] GetCurrentProcess () returned 0xffffffff [0101.255] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac8 | out: TokenHandle=0x19eac8*=0x2dc) returned 1 [0101.256] GetCurrentProcess () returned 0xffffffff [0101.256] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e984 | out: TokenHandle=0x19e984*=0x2e0) returned 1 [0101.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e97c | out: lpFileInformation=0x19e97c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.256] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", nBufferLength=0x105, lpBuffer=0x19e3e8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config", lpFilePart=0x0) returned 0x69 [0101.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e984 | out: lpFileInformation=0x19e984*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0101.257] GetCurrentProcess () returned 0xffffffff [0101.257] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac8 | out: TokenHandle=0x19eac8*=0x2e4) returned 1 [0101.257] GetCurrentProcess () returned 0xffffffff [0101.257] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19eac8 | out: TokenHandle=0x19eac8*=0x2e8) returned 1 [0101.280] GetCurrentProcess () returned 0xffffffff [0101.280] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e928 | out: TokenHandle=0x19e928*=0x2ec) returned 1 [0101.285] GetCurrentProcess () returned 0xffffffff [0101.285] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x19e938 | out: TokenHandle=0x19e938*=0x2f0) returned 1 [0101.295] IsAppThemed () returned 0x1 [0101.295] GetThemeAppProperties () returned 0x3 [0101.295] GetThemeAppProperties () returned 0x3 [0101.295] OpenThemeData () returned 0x20002 [0101.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.301] AdjustWindowRectEx (in: lpRect=0x19ec9c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec9c) returned 1 [0101.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.301] AdjustWindowRectEx (in: lpRect=0x19ec88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec88) returned 1 [0101.302] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.302] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0101.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.303] AdjustWindowRectEx (in: lpRect=0x19eb34, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb34) returned 1 [0101.303] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.303] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0101.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.303] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0101.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.304] AdjustWindowRectEx (in: lpRect=0x19eb1c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb1c) returned 1 [0101.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.304] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0101.304] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0101.304] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22b8c10) returned 0x0 [0101.304] GdipGetFontSize (font=0x5b91380, size=0x22b8c14) returned 0x0 [0101.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.305] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.305] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.369] GdipLoadImageFromStream (stream=0x47dff70, image=0x19e580) returned 0x0 [0101.372] GdipImageForceValidation (image=0x5b9a258) returned 0x0 [0101.373] GdipGetImageType (image=0x5b9a258, type=0x19e57c) returned 0x0 [0101.373] GdipGetImageRawFormat (image=0x5b9a258, format=0x19e4f0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.374] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.374] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0101.374] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.374] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0101.374] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.374] AdjustWindowRectEx (in: lpRect=0x19ea84, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea84) returned 1 [0101.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.375] AdjustWindowRectEx (in: lpRect=0x19ea84, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea84) returned 1 [0101.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.375] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0101.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.375] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0101.375] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.375] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0101.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.376] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eab4) returned 1 [0101.376] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0101.376] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22bfd88) returned 0x0 [0101.376] GdipGetFontSize (font=0x5b915b0, size=0x22bfd8c) returned 0x0 [0101.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.376] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.377] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.377] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0101.377] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22bff38) returned 0x0 [0101.377] GdipGetFontSize (font=0x5b91330, size=0x22bff3c) returned 0x0 [0101.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.377] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0101.377] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.377] AdjustWindowRectEx (in: lpRect=0x19ea68, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea68) returned 1 [0101.378] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0101.378] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22c01d8) returned 0x0 [0101.378] GdipGetFontSize (font=0x5b91290, size=0x22c01dc) returned 0x0 [0101.378] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.378] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.378] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.378] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0101.378] GetCurrentThreadId () returned 0x135c [0101.378] GetCurrentThreadId () returned 0x135c [0101.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.379] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0101.379] SelectObject (hdc=0x230106af, h=0x850a0958) returned 0x630a095a [0101.379] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e8e0, format=0x2400, lpdtp=0x22c0488 | out: lpchText="Seen: ", lprc=0x19e8e0) returned 13 [0101.379] GetCurrentThreadId () returned 0x135c [0101.379] GetCurrentThreadId () returned 0x135c [0101.379] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.379] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0101.380] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e8e0, format=0x2400, lpdtp=0x22c0840 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e8e0) returned 13 [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.380] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0101.380] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e8e0, format=0x2400, lpdtp=0x22c091c | out: lpchText="Solo", lprc=0x19e8e0) returned 13 [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GetCurrentThreadId () returned 0x135c [0101.380] GdipImageGetFrameDimensionsCount (image=0x5b9a258, count=0x19e9d0) returned 0x0 [0101.380] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5e60 [0101.380] GdipImageGetFrameDimensionsList (image=0x5b9a258, dimensionIDs=0x7e5e60*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0101.380] LocalFree (hMem=0x7e5e60) returned 0x0 [0101.381] GetCurrentThreadId () returned 0x135c [0101.381] GetCurrentThreadId () returned 0x135c [0101.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.381] AdjustWindowRectEx (in: lpRect=0x19e8f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8f8) returned 1 [0101.381] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e8e0, format=0x2400, lpdtp=0x22c0b5c | out: lpchText="Level: ", lprc=0x19e8e0) returned 13 [0101.381] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.381] AdjustWindowRectEx (in: lpRect=0x19eab4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eab4) returned 1 [0101.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.382] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0101.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.382] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.382] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0101.382] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.383] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.383] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.383] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0101.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.383] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.383] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.384] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22c1fac) returned 0x0 [0101.384] GdipGetFontSize (font=0x5b913a8, size=0x22c1fb0) returned 0x0 [0101.384] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.384] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.385] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.457] GdipLoadImageFromStream (stream=0x47dff50, image=0x19e4a0) returned 0x0 [0101.458] GdipImageForceValidation (image=0x5b9e860) returned 0x0 [0101.459] GdipGetImageType (image=0x5b9e860, type=0x19e49c) returned 0x0 [0101.459] GdipGetImageRawFormat (image=0x5b9e860, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.460] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.460] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.460] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.460] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.460] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.461] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.461] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.461] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.461] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.461] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.461] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.462] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22c9124) returned 0x0 [0101.462] GdipGetFontSize (font=0x5b91538, size=0x22c9128) returned 0x0 [0101.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.462] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.462] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.462] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.462] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22c92d4) returned 0x0 [0101.462] GdipGetFontSize (font=0x5b91498, size=0x22c92d8) returned 0x0 [0101.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.463] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.463] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.463] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.463] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22c9574) returned 0x0 [0101.463] GdipGetFontSize (font=0x5b913d0, size=0x22c9578) returned 0x0 [0101.463] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.464] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.464] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.464] GetCurrentThreadId () returned 0x135c [0101.464] GetCurrentThreadId () returned 0x135c [0101.464] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.464] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.464] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22c9808 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0101.464] GetCurrentThreadId () returned 0x135c [0101.464] GetCurrentThreadId () returned 0x135c [0101.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.465] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.465] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22c9ba4 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0101.465] GetCurrentThreadId () returned 0x135c [0101.465] GetCurrentThreadId () returned 0x135c [0101.465] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.465] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.465] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x22c9c80 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0101.465] GetCurrentThreadId () returned 0x135c [0101.465] GetCurrentThreadId () returned 0x135c [0101.465] GetCurrentThreadId () returned 0x135c [0101.466] GetCurrentThreadId () returned 0x135c [0101.466] GdipImageGetFrameDimensionsCount (image=0x5b9e860, count=0x19e8f0) returned 0x0 [0101.466] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5cb0 [0101.466] GdipImageGetFrameDimensionsList (image=0x5b9e860, dimensionIDs=0x7e5cb0*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0101.466] LocalFree (hMem=0x7e5cb0) returned 0x0 [0101.466] GetCurrentThreadId () returned 0x135c [0101.466] GetCurrentThreadId () returned 0x135c [0101.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.466] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.466] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22c9ec0 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0101.466] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.466] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0101.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.467] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0101.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.467] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.467] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0101.468] GetCurrentThreadId () returned 0x135c [0101.468] GetCurrentThreadId () returned 0x135c [0101.468] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.468] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0101.468] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.469] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.469] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0101.469] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.469] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.469] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.469] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.470] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0101.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.470] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.470] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.470] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22cb5e4) returned 0x0 [0101.470] GdipGetFontSize (font=0x5b912b8, size=0x22cb5e8) returned 0x0 [0101.471] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.471] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.471] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.471] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.540] GdipLoadImageFromStream (stream=0x47dff30, image=0x19e4a0) returned 0x0 [0101.542] GdipImageForceValidation (image=0x5ba2e68) returned 0x0 [0101.543] GdipGetImageType (image=0x5ba2e68, type=0x19e49c) returned 0x0 [0101.543] GdipGetImageRawFormat (image=0x5ba2e68, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.543] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.544] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.544] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.544] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.544] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.544] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.545] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.545] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.545] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.545] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.545] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.546] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22d275c) returned 0x0 [0101.546] GdipGetFontSize (font=0x5b912e0, size=0x22d2760) returned 0x0 [0101.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.546] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.546] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.546] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.546] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22d290c) returned 0x0 [0101.546] GdipGetFontSize (font=0x5b913f8, size=0x22d2910) returned 0x0 [0101.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.547] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.547] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.547] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.547] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22d2bac) returned 0x0 [0101.547] GdipGetFontSize (font=0x5b91420, size=0x22d2bb0) returned 0x0 [0101.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.547] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.548] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.548] GetCurrentThreadId () returned 0x135c [0101.548] GetCurrentThreadId () returned 0x135c [0101.548] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.553] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.553] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22d2e40 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0101.553] GetCurrentThreadId () returned 0x135c [0101.553] GetCurrentThreadId () returned 0x135c [0101.553] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.554] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.554] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22d31dc | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.554] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.554] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x22d32b8 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GetCurrentThreadId () returned 0x135c [0101.554] GdipImageGetFrameDimensionsCount (image=0x5ba2e68, count=0x19e8f0) returned 0x0 [0101.554] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e58d8 [0101.555] GdipImageGetFrameDimensionsList (image=0x5ba2e68, dimensionIDs=0x7e58d8*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0101.555] LocalFree (hMem=0x7e58d8) returned 0x0 [0101.555] GetCurrentThreadId () returned 0x135c [0101.555] GetCurrentThreadId () returned 0x135c [0101.555] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.555] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.555] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22d34f8 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0101.555] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.556] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0101.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.556] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0101.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.556] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.556] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.556] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0101.557] GetCurrentThreadId () returned 0x135c [0101.557] GetCurrentThreadId () returned 0x135c [0101.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.557] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0101.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.558] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.558] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0101.558] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.558] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.558] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.559] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0101.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.559] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.559] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.559] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22d4b74) returned 0x0 [0101.559] GdipGetFontSize (font=0x5b91470, size=0x22d4b78) returned 0x0 [0101.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.559] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.560] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.618] GdipLoadImageFromStream (stream=0x47dff10, image=0x19e4a0) returned 0x0 [0101.619] GdipImageForceValidation (image=0x5ba7470) returned 0x0 [0101.620] GdipGetImageType (image=0x5ba7470, type=0x19e49c) returned 0x0 [0101.620] GdipGetImageRawFormat (image=0x5ba7470, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.621] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.621] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.621] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.621] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.622] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.622] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.622] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.622] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.622] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.622] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22dbcec) returned 0x0 [0101.623] GdipGetFontSize (font=0x5b91448, size=0x22dbcf0) returned 0x0 [0101.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.623] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.623] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.623] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.623] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22dbe9c) returned 0x0 [0101.623] GdipGetFontSize (font=0x5babb20, size=0x22dbea0) returned 0x0 [0101.623] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.624] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.624] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.624] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.624] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22dc13c) returned 0x0 [0101.624] GdipGetFontSize (font=0x5babdf0, size=0x22dc140) returned 0x0 [0101.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.624] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.625] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.625] GetCurrentThreadId () returned 0x135c [0101.625] GetCurrentThreadId () returned 0x135c [0101.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.625] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.625] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22dc3d0 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0101.625] GetCurrentThreadId () returned 0x135c [0101.625] GetCurrentThreadId () returned 0x135c [0101.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.625] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.625] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22dc76c | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0101.626] GetCurrentThreadId () returned 0x135c [0101.626] GetCurrentThreadId () returned 0x135c [0101.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.626] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.627] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x22dc848 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0101.627] GetCurrentThreadId () returned 0x135c [0101.627] GetCurrentThreadId () returned 0x135c [0101.627] GetCurrentThreadId () returned 0x135c [0101.628] GetCurrentThreadId () returned 0x135c [0101.628] GdipImageGetFrameDimensionsCount (image=0x5ba7470, count=0x19e8f0) returned 0x0 [0101.628] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5950 [0101.628] GdipImageGetFrameDimensionsList (image=0x5ba7470, dimensionIDs=0x7e5950*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0101.628] LocalFree (hMem=0x7e5950) returned 0x0 [0101.628] GetCurrentThreadId () returned 0x135c [0101.628] GetCurrentThreadId () returned 0x135c [0101.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.628] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.628] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22dca88 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0101.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.628] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0101.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.629] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0101.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.629] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.629] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0101.629] GetCurrentThreadId () returned 0x135c [0101.629] GetCurrentThreadId () returned 0x135c [0101.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.629] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0101.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.630] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.630] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0101.630] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.631] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.631] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.631] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0101.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.632] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.632] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.632] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22de104) returned 0x0 [0101.632] GdipGetFontSize (font=0x5babc60, size=0x22de108) returned 0x0 [0101.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.632] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.632] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.632] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.695] GdipLoadImageFromStream (stream=0x47dfef0, image=0x19e4a0) returned 0x0 [0101.696] GdipImageForceValidation (image=0x5bac280) returned 0x0 [0101.697] GdipGetImageType (image=0x5bac280, type=0x19e49c) returned 0x0 [0101.697] GdipGetImageRawFormat (image=0x5bac280, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.698] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.698] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.698] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.698] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.698] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.699] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.699] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.699] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.699] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.699] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22e527c) returned 0x0 [0101.699] GdipGetFontSize (font=0x5babe18, size=0x22e5280) returned 0x0 [0101.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.700] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.700] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.700] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.700] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22e542c) returned 0x0 [0101.700] GdipGetFontSize (font=0x5babf80, size=0x22e5430) returned 0x0 [0101.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.700] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.701] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.701] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.701] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22e56cc) returned 0x0 [0101.701] GdipGetFontSize (font=0x5babb70, size=0x22e56d0) returned 0x0 [0101.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.701] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.701] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.701] GetCurrentThreadId () returned 0x135c [0101.701] GetCurrentThreadId () returned 0x135c [0101.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.702] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.702] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22e5960 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0101.702] GetCurrentThreadId () returned 0x135c [0101.702] GetCurrentThreadId () returned 0x135c [0101.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.702] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.702] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22e5cfc | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0101.702] GetCurrentThreadId () returned 0x135c [0101.702] GetCurrentThreadId () returned 0x135c [0101.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.703] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.703] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x22e5dd8 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0101.703] GetCurrentThreadId () returned 0x135c [0101.703] GetCurrentThreadId () returned 0x135c [0101.703] GetCurrentThreadId () returned 0x135c [0101.703] GetCurrentThreadId () returned 0x135c [0101.703] GdipImageGetFrameDimensionsCount (image=0x5bac280, count=0x19e8f0) returned 0x0 [0101.703] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5cb0 [0101.703] GdipImageGetFrameDimensionsList (image=0x5bac280, dimensionIDs=0x7e5cb0*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x3a)), count=0x1) returned 0x0 [0101.703] LocalFree (hMem=0x7e5cb0) returned 0x0 [0101.703] GetCurrentThreadId () returned 0x135c [0101.703] GetCurrentThreadId () returned 0x135c [0101.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.704] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.704] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22e6018 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0101.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.704] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0101.704] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.705] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0101.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.705] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.705] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0101.705] GetCurrentThreadId () returned 0x135c [0101.705] GetCurrentThreadId () returned 0x135c [0101.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.705] AdjustWindowRectEx (in: lpRect=0x19eba8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eba8) returned 1 [0101.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.706] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.706] AdjustWindowRectEx (in: lpRect=0x19ea54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea54) returned 1 [0101.706] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0101.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.706] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.707] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.707] AdjustWindowRectEx (in: lpRect=0x19ea3c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea3c) returned 1 [0101.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.707] AdjustWindowRectEx (in: lpRect=0x19ea50, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea50) returned 1 [0101.707] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.707] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22e7694) returned 0x0 [0101.707] GdipGetFontSize (font=0x5babaa8, size=0x22e7698) returned 0x0 [0101.708] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.708] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.708] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.708] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.768] GdipLoadImageFromStream (stream=0x47dfed0, image=0x19e4a0) returned 0x0 [0101.769] GdipImageForceValidation (image=0x5bb0888) returned 0x0 [0101.771] GdipGetImageType (image=0x5bb0888, type=0x19e49c) returned 0x0 [0101.771] GdipGetImageRawFormat (image=0x5bb0888, format=0x19e410*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0101.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.771] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.771] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.772] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.772] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0101.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.772] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.772] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.772] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.773] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.773] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9d4) returned 1 [0101.773] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.773] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22ee80c) returned 0x0 [0101.773] GdipGetFontSize (font=0x5babcd8, size=0x22ee810) returned 0x0 [0101.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.774] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.774] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.774] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.774] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22ee9bc) returned 0x0 [0101.774] GdipGetFontSize (font=0x5babc88, size=0x22ee9c0) returned 0x0 [0101.774] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.775] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.775] AdjustWindowRectEx (in: lpRect=0x19e988, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e988) returned 1 [0101.775] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea18) returned 0x0 [0101.775] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22eec5c) returned 0x0 [0101.775] GdipGetFontSize (font=0x5babd50, size=0x22eec60) returned 0x0 [0101.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.775] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.775] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.776] AdjustWindowRectEx (in: lpRect=0x19e9a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a8) returned 1 [0101.776] GetCurrentThreadId () returned 0x135c [0101.776] GetCurrentThreadId () returned 0x135c [0101.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.776] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.776] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e800, format=0x2400, lpdtp=0x22eeef0 | out: lpchText="Seen: ", lprc=0x19e800) returned 13 [0101.776] GetCurrentThreadId () returned 0x135c [0101.776] GetCurrentThreadId () returned 0x135c [0101.776] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.776] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.776] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e800, format=0x2400, lpdtp=0x22ef28c | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e800) returned 13 [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.777] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.777] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e800, format=0x2400, lpdtp=0x22ef368 | out: lpchText="Solo", lprc=0x19e800) returned 13 [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GdipImageGetFrameDimensionsCount (image=0x5bb0888, count=0x19e8f0) returned 0x0 [0101.777] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x7e5950 [0101.777] GdipImageGetFrameDimensionsList (image=0x5bb0888, dimensionIDs=0x7e5950*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0101.777] LocalFree (hMem=0x7e5950) returned 0x0 [0101.777] GetCurrentThreadId () returned 0x135c [0101.777] GetCurrentThreadId () returned 0x135c [0101.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.778] AdjustWindowRectEx (in: lpRect=0x19e818, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e818) returned 1 [0101.778] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e800, format=0x2400, lpdtp=0x22ef5a8 | out: lpchText="Level: ", lprc=0x19e800) returned 13 [0101.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.778] AdjustWindowRectEx (in: lpRect=0x19e9d4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9d4) returned 1 [0101.778] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.778] AdjustWindowRectEx (in: lpRect=0x19eb6c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb6c) returned 1 [0101.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.779] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.779] AdjustWindowRectEx (in: lpRect=0x19e914, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e914) returned 1 [0101.779] GetCurrentThreadId () returned 0x135c [0101.779] GetCurrentThreadId () returned 0x135c [0101.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.779] AdjustWindowRectEx (in: lpRect=0x19eb74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb74) returned 1 [0101.779] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.779] AdjustWindowRectEx (in: lpRect=0x19ec48, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec48) returned 1 [0101.780] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ec10) returned 0x0 [0101.780] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x411c0000, style=1, unit=0x3, font=0x22efe28) returned 0x0 [0101.780] GdipGetFontSize (font=0x5babd78, size=0x22efe2c) returned 0x0 [0101.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.780] AdjustWindowRectEx (in: lpRect=0x19eba0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eba0) returned 1 [0101.780] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.780] AdjustWindowRectEx (in: lpRect=0x19eba0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eba0) returned 1 [0101.781] GetCurrentThreadId () returned 0x135c [0101.781] GetCurrentThreadId () returned 0x135c [0101.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.781] AdjustWindowRectEx (in: lpRect=0x19ea10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea10) returned 1 [0101.781] SelectObject (hdc=0x230106af, h=0x630a095a) returned 0x850a0958 [0101.781] DrawTextExW (in: hdc=0x230106af, lpchText="Team X", cchText=6, lprc=0x19e9f8, format=0x2400, lpdtp=0x22f05d8 | out: lpchText="Team X", lprc=0x19e9f8) returned 16 [0101.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.782] AdjustWindowRectEx (in: lpRect=0x19ebcc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebcc) returned 1 [0101.782] CreateCompatibleDC (hdc=0x0) returned 0x22010974 [0101.782] SelectObject (hdc=0x22010974, h=0x320a0964) returned 0x18a0048 [0101.782] GetTextMetricsW (in: hdc=0x22010974, lptm=0x19eb4c | out: lptm=0x19eb4c) returned 1 [0101.782] GetTextExtentPoint32W (in: hdc=0x22010974, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x22f0754 | out: psizl=0x22f0754) returned 1 [0101.782] SelectObject (hdc=0x22010974, h=0x18a0048) returned 0x320a0964 [0101.782] DeleteDC (hdc=0x22010974) returned 1 [0101.782] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.786] AdjustWindowRectEx (in: lpRect=0x19eb04, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb04) returned 1 [0101.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.787] AdjustWindowRectEx (in: lpRect=0x19e968, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e968) returned 1 [0101.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.787] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0101.787] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.787] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0101.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.788] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.788] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.788] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.789] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.789] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.789] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0101.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.789] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.790] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.790] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.790] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.790] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.790] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.790] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.791] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.791] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.791] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.791] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.791] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0101.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.792] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0101.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.792] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.792] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.792] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.792] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.793] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.793] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.793] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0101.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.793] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.793] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.793] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.794] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.794] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.794] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.794] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.794] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.794] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.795] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.795] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.795] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.795] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0101.795] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.796] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0101.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.796] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.796] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.796] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.796] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.796] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.797] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.797] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0101.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.797] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.797] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.797] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.798] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.798] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.798] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.798] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.799] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.799] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.799] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.799] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.799] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.799] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0101.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.800] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0101.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.800] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.800] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.800] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.801] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.801] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.801] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0101.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.801] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.801] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.801] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.802] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.802] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.802] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.802] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.802] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.802] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.803] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.803] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.803] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.803] AdjustWindowRectEx (in: lpRect=0x19ea78, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea78) returned 1 [0101.803] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.804] AdjustWindowRectEx (in: lpRect=0x19e8dc, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8dc) returned 1 [0101.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.804] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.804] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.804] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.804] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.804] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.805] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.805] AdjustWindowRectEx (in: lpRect=0x19e6e4, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e6e4) returned 1 [0101.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.805] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.805] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.805] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.806] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.806] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.806] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.806] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.807] AdjustWindowRectEx (in: lpRect=0x19ea44, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea44) returned 1 [0101.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.807] AdjustWindowRectEx (in: lpRect=0x19e8a8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e8a8) returned 1 [0101.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.807] AdjustWindowRectEx (in: lpRect=0x19e704, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e704) returned 1 [0101.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.807] AdjustWindowRectEx (in: lpRect=0x19ead0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ead0) returned 1 [0101.807] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.807] AdjustWindowRectEx (in: lpRect=0x19e934, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e934) returned 1 [0101.808] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.808] AdjustWindowRectEx (in: lpRect=0x19e790, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e790) returned 1 [0101.808] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.808] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0101.812] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.812] AdjustWindowRectEx (in: lpRect=0x19ecd8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecd8) returned 1 [0101.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.816] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.816] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.816] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.816] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.818] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.819] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.819] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.819] AdjustWindowRectEx (in: lpRect=0x19ecd8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecd8) returned 1 [0101.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.819] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.819] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.820] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.820] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.820] AdjustWindowRectEx (in: lpRect=0x19ecd8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecd8) returned 1 [0101.820] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.820] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.820] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.820] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.820] GetDC (hWnd=0x0) returned 0xc0100ae [0101.820] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19eb14) returned 0x0 [0101.821] GdipGetFontHeight (font=0x48eefc0, graphics=0x5bb4e90, height=0x19eb0c) returned 0x0 [0101.821] GdipDeleteGraphics (graphics=0x5bb4e90) returned 0x0 [0101.821] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0101.821] SelectObject (hdc=0x230106af, h=0x1f0a096d) returned 0x630a095a [0101.821] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb18, format=0x420, lpdtp=0x22f31cc | out: lpchText="j^", lprc=0x19eb18) returned 13 [0101.822] GetSystemMetrics (nIndex=5) returned 1 [0101.822] GetSystemMetrics (nIndex=6) returned 1 [0101.822] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.822] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb10, format=0x420, lpdtp=0x22f3268 | out: lpchText="j^", lprc=0x19eb10) returned 13 [0101.822] GetSystemMetrics (nIndex=5) returned 1 [0101.822] GetSystemMetrics (nIndex=6) returned 1 [0101.822] AdjustWindowRectEx (in: lpRect=0x19ecd4, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecd4) returned 1 [0101.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.824] AdjustWindowRectEx (in: lpRect=0x19ecbc, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ecbc) returned 1 [0101.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.824] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0101.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.825] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0101.832] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.832] AdjustWindowRectEx (in: lpRect=0x19ecd8, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecd8) returned 1 [0101.833] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0101.833] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0101.836] LoadLibraryW (lpLibFileName="RichEd20.DLL") returned 0x6e430000 [0102.466] CoTaskMemAlloc (cb=0x20c) returned 0x80c868 [0102.466] GetModuleFileNameW (in: hModule=0x6e430000, lpFilename=0x80c868, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\syswow64\\riched20.dll")) returned 0x20 [0102.467] CoTaskMemFree (pv=0x80c868) [0102.467] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x19e618, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0102.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL", nBufferLength=0x105, lpBuffer=0x19e644, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpFilePart=0x0) returned 0x20 [0102.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19eaec) returned 1 [0102.470] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SYSTEM32\\RichEd20.DLL" (normalized: "c:\\windows\\syswow64\\riched20.dll"), fInfoLevelId=0x0, lpFileInformation=0x19eb68 | out: lpFileInformation=0x19eb68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33301b8d, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x33301b8d, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x33301b8d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00)) returned 1 [0102.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19eae8) returned 1 [0102.472] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", lpdwHandle=0x19ebdc | out: lpdwHandle=0x19ebdc) returned 0x72c [0102.473] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SYSTEM32\\RichEd20.DLL", dwHandle=0x0, dwLen=0x72c, lpData=0x22f4620 | out: lpData=0x22f4620) returned 1 [0102.477] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19ebb0, puLen=0x19ebac | out: lplpBuffer=0x19ebb0*=0x22f49b0, puLen=0x19ebac) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f471c, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f4770, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f47cc, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f4808, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f4840, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f48b8, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f48f4, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f4968, puLen=0x19eb2c) returned 1 [0102.479] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x22f46d0, puLen=0x19eb2c) returned 1 [0102.480] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x0, puLen=0x19eb2c) returned 0 [0102.480] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x0, puLen=0x19eb2c) returned 0 [0102.480] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x19eb30, puLen=0x19eb2c | out: lplpBuffer=0x19eb30*=0x0, puLen=0x19eb2c) returned 0 [0102.480] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x19eb24, puLen=0x19eb20 | out: lplpBuffer=0x19eb24*=0x22f49b0, puLen=0x19eb20) returned 1 [0102.480] VerLanguageNameW (in: wLang=0x0, szLang=0x19e8b4, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0102.520] VerQueryValueW (in: pBlock=0x22f4620, lpSubBlock="\\", lplpBuffer=0x19eb34, puLen=0x19eb30 | out: lplpBuffer=0x19eb34*=0x22f4648, puLen=0x19eb30) returned 1 [0102.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.522] AdjustWindowRectEx (in: lpRect=0x19ecc4, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecc4) returned 1 [0102.524] GetDC (hWnd=0x0) returned 0xc0100ae [0102.524] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19ec04) returned 0x0 [0102.525] GdipGetFontHeight (font=0x48eefc0, graphics=0x5bb4e90, height=0x19ebfc) returned 0x0 [0102.525] GdipDeleteGraphics (graphics=0x5bb4e90) returned 0x0 [0102.525] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0102.526] GetSystemMetrics (nIndex=5) returned 1 [0102.526] GetSystemMetrics (nIndex=6) returned 1 [0102.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.526] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0102.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.531] AdjustWindowRectEx (in: lpRect=0x19eca0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eca0) returned 1 [0102.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.532] AdjustWindowRectEx (in: lpRect=0x19ec98, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec98) returned 1 [0102.532] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.532] AdjustWindowRectEx (in: lpRect=0x19ec98, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec98) returned 1 [0102.532] GetCurrentThreadId () returned 0x135c [0102.532] GetCurrentThreadId () returned 0x135c [0102.533] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.533] AdjustWindowRectEx (in: lpRect=0x19eac8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eac8) returned 1 [0102.534] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.534] AdjustWindowRectEx (in: lpRect=0x19eab8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eab8) returned 1 [0102.534] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.534] AdjustWindowRectEx (in: lpRect=0x19eab8, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eab8) returned 1 [0102.535] GetCurrentThreadId () returned 0x135c [0102.535] GetCurrentThreadId () returned 0x135c [0102.552] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.552] AdjustWindowRectEx (in: lpRect=0x19ecbc, dwStyle=0x560100cc, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecbc) returned 1 [0102.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.559] AdjustWindowRectEx (in: lpRect=0x19ec70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec70) returned 1 [0102.559] IsAppThemed () returned 0x1 [0102.559] GetThemeAppProperties () returned 0x3 [0102.559] GetThemeAppProperties () returned 0x3 [0102.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.563] AdjustWindowRectEx (in: lpRect=0x19ecd4, dwStyle=0x56012020, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecd4) returned 1 [0102.585] GetCurrentThreadId () returned 0x135c [0102.585] GetCurrentThreadId () returned 0x135c [0102.585] IsAppThemed () returned 0x1 [0102.585] GetThemeAppProperties () returned 0x3 [0102.585] GetThemeAppProperties () returned 0x3 [0102.585] IsAppThemed () returned 0x1 [0102.585] GetThemeAppProperties () returned 0x3 [0102.585] GetThemeAppProperties () returned 0x3 [0102.586] GetCurrentThreadId () returned 0x135c [0102.586] GetCurrentThreadId () returned 0x135c [0102.586] IsAppThemed () returned 0x1 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] IsAppThemed () returned 0x1 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] GetCurrentThreadId () returned 0x135c [0102.586] GetCurrentThreadId () returned 0x135c [0102.586] IsAppThemed () returned 0x1 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] GetThemeAppProperties () returned 0x3 [0102.586] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] GetCurrentThreadId () returned 0x135c [0102.587] IsAppThemed () returned 0x1 [0102.587] GetThemeAppProperties () returned 0x3 [0102.587] GetThemeAppProperties () returned 0x3 [0102.588] IsAppThemed () returned 0x1 [0102.588] GetThemeAppProperties () returned 0x3 [0102.588] GetThemeAppProperties () returned 0x3 [0102.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.601] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0102.605] GetCurrentThreadId () returned 0x135c [0102.605] GetCurrentThreadId () returned 0x135c [0102.605] IsAppThemed () returned 0x1 [0102.606] GetThemeAppProperties () returned 0x3 [0102.606] GetThemeAppProperties () returned 0x3 [0102.615] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.615] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0102.615] IsAppThemed () returned 0x1 [0102.615] GetThemeAppProperties () returned 0x3 [0102.615] GetThemeAppProperties () returned 0x3 [0102.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.637] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0102.653] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0102.655] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0102.667] CoCreateInstance (in: rclsid=0x2239eec*(Data1=0x8856f961, Data2=0x340a, Data3=0x11d0, Data4=([0]=0xa9, [1]=0x6b, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd7, [6]=0x5, [7]=0xa2)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x22f8a6c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x19ec74 | out: ppv=0x19ec74*=0x80e938) returned 0x0 [0112.330] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f10de2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e72c | out: ppvObject=0x19e72c*=0x80e938) returned 0x0 [0112.331] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f279c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e6e8 | out: ppvObject=0x19e6e8*=0x0) returned 0x80004002 [0112.332] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f279bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e504 | out: ppvObject=0x19e504*=0x80e9e0) returned 0x0 [0112.332] WebBrowser:IProvideClassInfo:GetClassInfo (in: This=0x80e9e0, ppTI=0x19e50c | out: ppTI=0x19e50c*=0x83b01c) returned 0x0 [0112.882] ITypeInfo:RemoteGetTypeAttr (in: This=0x83b01c, ppTypeAttr=0x19e500, pDummy=0xbd4c69a8 | out: ppTypeAttr=0x19e500, pDummy=0xbd4c69a8) returned 0x0 [0112.995] ITypeInfo:LocalReleaseTypeAttr (This=0x83b01c) returned 0x0 [0112.995] WebBrowser:IUnknown:Release (This=0x80e9e0) returned 0x2 [0112.995] WebBrowser:IUnknown:Release (This=0x83b01c) returned 0x1 [0112.995] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f279c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e2dc | out: ppvObject=0x19e2dc*=0x0) returned 0x80004002 [0112.995] WebBrowser:IUnknown:AddRef (This=0x80e938) returned 0x3 [0112.995] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f2798cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19e03c | out: ppvObject=0x19e03c*=0x0) returned 0x80004002 [0112.995] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f279820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19dfec | out: ppvObject=0x19dfec*=0x0) returned 0x80004002 [0112.995] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f11a540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19dff8 | out: ppvObject=0x19dff8*=0x0) returned 0x80004002 [0112.995] CoGetContextToken (in: pToken=0x19e058 | out: pToken=0x19e058) returned 0x0 [0112.995] CObjectContext::QueryInterface () returned 0x0 [0112.995] CObjectContext::GetCurrentApartmentType () returned 0x0 [0112.995] Release () returned 0x0 [0112.996] CoGetObjectContext (in: riid=0x6f10de2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x835944 | out: ppv=0x835944*=0x7ca118) returned 0x0 [0113.026] CoGetContextToken (in: pToken=0x19e460 | out: pToken=0x19e460) returned 0x0 [0113.026] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x6f279b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e4ec | out: ppvObject=0x19e4ec*=0x0) returned 0x80004002 [0113.026] WebBrowser:IUnknown:Release (This=0x80e938) returned 0x2 [0113.026] WebBrowser:IUnknown:Release (This=0x80e938) returned 0x1 [0113.026] CoGetContextToken (in: pToken=0x19eac8 | out: pToken=0x19eac8) returned 0x0 [0113.026] CoGetContextToken (in: pToken=0x19ea28 | out: pToken=0x19ea28) returned 0x0 [0113.026] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19eaf8*(Data1=0x112, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaf4 | out: ppvObject=0x19eaf4*=0x80e91c) returned 0x0 [0113.027] WebBrowser:IUnknown:AddRef (This=0x80e91c) returned 0x3 [0113.027] WebBrowser:IUnknown:Release (This=0x80e91c) returned 0x2 [0113.027] CoGetContextToken (in: pToken=0x19eac8 | out: pToken=0x19eac8) returned 0x0 [0113.027] CoGetContextToken (in: pToken=0x19ea28 | out: pToken=0x19ea28) returned 0x0 [0113.027] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19eaf8*(Data1=0x113, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaf4 | out: ppvObject=0x19eaf4*=0x80e928) returned 0x0 [0113.027] WebBrowser:IUnknown:AddRef (This=0x80e928) returned 0x4 [0113.027] WebBrowser:IUnknown:Release (This=0x80e928) returned 0x3 [0113.027] CoGetContextToken (in: pToken=0x19eac8 | out: pToken=0x19eac8) returned 0x0 [0113.027] CoGetContextToken (in: pToken=0x19ea28 | out: pToken=0x19ea28) returned 0x0 [0113.027] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19eaf8*(Data1=0x117, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19eaf4 | out: ppvObject=0x19eaf4*=0x80e92c) returned 0x0 [0113.027] WebBrowser:IUnknown:AddRef (This=0x80e92c) returned 0x5 [0113.027] WebBrowser:IUnknown:Release (This=0x80e92c) returned 0x4 [0113.028] CoGetContextToken (in: pToken=0x19eac8 | out: pToken=0x19eac8) returned 0x0 [0113.028] CoGetContextToken (in: pToken=0x19ea28 | out: pToken=0x19ea28) returned 0x0 [0113.028] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19eaf8*(Data1=0xb196b288, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19eaf4 | out: ppvObject=0x19eaf4*=0x80e9d8) returned 0x0 [0113.028] WebBrowser:IUnknown:AddRef (This=0x80e9d8) returned 0x6 [0113.028] WebBrowser:IUnknown:Release (This=0x80e9d8) returned 0x5 [0113.028] CoGetContextToken (in: pToken=0x19eac0 | out: pToken=0x19eac0) returned 0x0 [0113.028] CoGetContextToken (in: pToken=0x19ea20 | out: pToken=0x19ea20) returned 0x0 [0113.028] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19eaf0*(Data1=0xd30c1661, Data2=0xcdaf, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x3e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xc9, [6]=0xe2, [7]=0x6e)), ppvObject=0x19eaec | out: ppvObject=0x19eaec*=0x80ea78) returned 0x0 [0113.029] WebBrowser:IUnknown:AddRef (This=0x80ea78) returned 0x7 [0113.029] WebBrowser:IUnknown:Release (This=0x80ea78) returned 0x6 [0113.038] WebBrowser:IOleObject:GetMiscStatus (in: This=0x80e91c, dwAspect=0x1, pdwStatus=0x19ecb0 | out: pdwStatus=0x19ecb0*=0x20191) returned 0x0 [0113.051] WebBrowser:IOleObject:SetClientSite (This=0x80e91c, pClientSite=0x47dfeb4) returned 0x0 [0113.096] GetCurrentActCtx (in: lphActCtx=0x19ea14 | out: lphActCtx=0x19ea14*=0x0) returned 1 [0113.096] ActivateActCtx (in: hActCtx=0x7dec54, lpCookie=0x19ea24 | out: hActCtx=0x7dec54, lpCookie=0x19ea24) returned 1 [0113.097] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x72dd0000 [0113.099] GetCurrentActCtx (in: lphActCtx=0x19e99c | out: lphActCtx=0x19e99c*=0x7dec54) returned 1 [0113.100] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x72dd0000 [0113.100] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0113.100] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName="WindowsFormsParkingWindow", dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x402b0 [0113.101] SetWindowLongW (hWnd=0x402b0, nIndex=-4, dwNewLong=1944586208) returned 76940734 [0113.101] GetWindowLongW (hWnd=0x402b0, nIndex=-4) returned 1944586208 [0113.102] SetWindowLongW (hWnd=0x402b0, nIndex=-4, dwNewLong=76944710) returned 1944586208 [0113.102] GetWindowLongW (hWnd=0x402b0, nIndex=-4) returned 76944710 [0113.102] GetWindowLongW (hWnd=0x402b0, nIndex=-16) returned 113311744 [0113.102] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0x24, wParam=0x0, lParam=0x19e3cc) returned 0x0 [0113.102] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0x81, wParam=0x0, lParam=0x19e3c0) returned 0x1 [0113.103] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0x83, wParam=0x0, lParam=0x19e3ac) returned 0x0 [0113.103] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0x1, wParam=0x0, lParam=0x19e3c0) returned 0x0 [0113.103] GetClientRect (in: hWnd=0x402b0, lpRect=0x19e0c8 | out: lpRect=0x19e0c8) returned 1 [0113.103] GetWindowRect (in: hWnd=0x402b0, lpRect=0x19e0c8 | out: lpRect=0x19e0c8) returned 1 [0113.104] SetWindowTextW (hWnd=0x402b0, lpString="WindowsFormsParkingWindow") returned 1 [0113.104] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0xc, wParam=0x0, lParam=0x22f8cd4) returned 0x1 [0113.105] GetParent (hWnd=0x402b0) returned 0x0 [0113.105] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0113.105] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x56010000, X=3, Y=3, nWidth=250, nHeight=250, hWndParent=0x402b0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2027c [0113.106] SetWindowLongW (hWnd=0x2027c, nIndex=-4, dwNewLong=1944586208) returned 76940734 [0113.106] GetWindowLongW (hWnd=0x2027c, nIndex=-4) returned 1944586208 [0113.106] SetWindowLongW (hWnd=0x2027c, nIndex=-4, dwNewLong=76944750) returned 1944586208 [0113.106] GetWindowLongW (hWnd=0x2027c, nIndex=-4) returned 76944750 [0113.107] GetWindowLongW (hWnd=0x2027c, nIndex=-16) returned 1174470656 [0113.107] GetWindowLongW (hWnd=0x2027c, nIndex=-12) returned 0 [0113.107] SetWindowLongW (hWnd=0x2027c, nIndex=-12, dwNewLong=131708) returned 0 [0113.107] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x81, wParam=0x0, lParam=0x19e438) returned 0x1 [0113.107] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x83, wParam=0x0, lParam=0x19e424) returned 0x0 [0113.107] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x1, wParam=0x0, lParam=0x19e438) returned 0x0 [0113.107] GetClientRect (in: hWnd=0x2027c, lpRect=0x19e124 | out: lpRect=0x19e124) returned 1 [0113.107] GetWindowRect (in: hWnd=0x2027c, lpRect=0x19e124 | out: lpRect=0x19e124) returned 1 [0113.107] GetParent (hWnd=0x2027c) returned 0x402b0 [0113.108] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e124, cPoints=0x2 | out: lpPoints=0x19e124) returned -1638403 [0113.108] SendMessageW (hWnd=0x2027c, Msg=0x30, wParam=0x320a0964, lParam=0x0) returned 0x0 [0113.108] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x30, wParam=0x320a0964, lParam=0x0) returned 0x0 [0113.109] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x5, wParam=0x0, lParam=0xfa00fa) returned 0x0 [0113.109] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x3, wParam=0x0, lParam=0x30003) returned 0x0 [0113.109] GetClientRect (in: hWnd=0x2027c, lpRect=0x19e17c | out: lpRect=0x19e17c) returned 1 [0113.109] GetWindowRect (in: hWnd=0x2027c, lpRect=0x19e17c | out: lpRect=0x19e17c) returned 1 [0113.109] GetParent (hWnd=0x2027c) returned 0x402b0 [0113.109] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e17c, cPoints=0x2 | out: lpPoints=0x19e17c) returned -1638403 [0113.109] SendMessageW (hWnd=0x2027c, Msg=0x2210, wParam=0x27c0001, lParam=0x2027c) returned 0x0 [0113.109] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x2210, wParam=0x27c0001, lParam=0x2027c) returned 0x0 [0113.109] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0113.109] GetParent (hWnd=0x2027c) returned 0x402b0 [0113.109] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14ef0005) returned 1 [0113.109] GetParent (hWnd=0x2027c) returned 0x402b0 [0113.134] GetParent (hWnd=0x2027c) returned 0x402b0 [0115.491] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x402b0, Msg=0x210, wParam=0x1, lParam=0x202ae) returned 0x0 [0115.510] CoGetContextToken (in: pToken=0x19ea40 | out: pToken=0x19ea40) returned 0x0 [0115.511] CoGetContextToken (in: pToken=0x19e9a0 | out: pToken=0x19e9a0) returned 0x0 [0115.511] WebBrowser:IUnknown:QueryInterface (in: This=0x80e938, riid=0x19ea70*(Data1=0xb196b284, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19ea6c | out: ppvObject=0x19ea6c*=0x80e9e4) returned 0x0 [0115.511] WebBrowser:IUnknown:AddRef (This=0x80e9e4) returned 0xf [0115.511] WebBrowser:IUnknown:Release (This=0x80e9e4) returned 0xe [0115.532] WebBrowser:IConnectionPointContainer:FindConnectionPoint (in: This=0x80e9e4, riid=0x19ec44*(Data1=0x34a715a0, Data2=0x6587, Data3=0x11d0, Data4=([0]=0x92, [1]=0x4a, [2]=0x0, [3]=0x20, [4]=0xaf, [5]=0xc7, [6]=0xac, [7]=0x4d)), ppCP=0x19ebe0 | out: ppCP=0x19ebe0*=0x80ea10) returned 0x0 [0115.573] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f10de2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e698 | out: ppvObject=0x19e698*=0x80ea10) returned 0x0 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f279c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e654 | out: ppvObject=0x19e654*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f279bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e474 | out: ppvObject=0x19e474*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f279c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e24c | out: ppvObject=0x19e24c*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:AddRef (This=0x80ea10) returned 0x11 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f2798cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19dfac | out: ppvObject=0x19dfac*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f279820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19df5c | out: ppvObject=0x19df5c*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f11a540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19df68 | out: ppvObject=0x19df68*=0x0) returned 0x80004002 [0115.582] CoGetContextToken (in: pToken=0x19dfc8 | out: pToken=0x19dfc8) returned 0x0 [0115.582] CoGetContextToken (in: pToken=0x19e3d0 | out: pToken=0x19e3d0) returned 0x0 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x6f279b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e45c | out: ppvObject=0x19e45c*=0x0) returned 0x80004002 [0115.582] WebBrowser:IUnknown:Release (This=0x80ea10) returned 0x10 [0115.582] CoGetContextToken (in: pToken=0x19e9a8 | out: pToken=0x19e9a8) returned 0x0 [0115.582] CoGetContextToken (in: pToken=0x19e908 | out: pToken=0x19e908) returned 0x0 [0115.582] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea10, riid=0x19e9d8*(Data1=0xb196b286, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9d4 | out: ppvObject=0x19e9d4*=0x80ea10) returned 0x0 [0115.583] WebBrowser:IUnknown:AddRef (This=0x80ea10) returned 0x12 [0115.583] WebBrowser:IUnknown:Release (This=0x80ea10) returned 0x11 [0115.583] WebBrowser:IUnknown:Release (This=0x80ea10) returned 0x10 [0115.683] IConnectionPoint:Advise (in: This=0x80ea10, pUnkSink=0x47dfe4c, pdwCookie=0x22f9078 | out: pdwCookie=0x22f9078*=0x1) returned 0x0 [0115.684] CoGetContextToken (in: pToken=0x19ea30 | out: pToken=0x19ea30) returned 0x0 [0115.684] WebBrowser:IUnknown:AddRef (This=0x80e9e4) returned 0x11 [0115.685] WebBrowser:IUnknown:Release (This=0x80e9e4) returned 0x10 [0115.685] WebBrowser:IConnectionPointContainer:FindConnectionPoint (in: This=0x80e9e4, riid=0x19ec34*(Data1=0x9bfbbc02, Data2=0xeff1, Data3=0x101a, Data4=([0]=0x84, [1]=0xed, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppCP=0x19ebd0 | out: ppCP=0x19ebd0*=0x80ea44) returned 0x0 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f10de2c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e688 | out: ppvObject=0x19e688*=0x80ea44) returned 0x0 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f279c98*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x19e644 | out: ppvObject=0x19e644*=0x0) returned 0x80004002 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f279bb4*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e464 | out: ppvObject=0x19e464*=0x0) returned 0x80004002 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f279c88*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x19e23c | out: ppvObject=0x19e23c*=0x0) returned 0x80004002 [0115.685] WebBrowser:IUnknown:AddRef (This=0x80ea44) returned 0x13 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f2798cc*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x19df9c | out: ppvObject=0x19df9c*=0x0) returned 0x80004002 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f279820*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x19df4c | out: ppvObject=0x19df4c*=0x0) returned 0x80004002 [0115.685] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f11a540*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19df58 | out: ppvObject=0x19df58*=0x0) returned 0x80004002 [0115.686] CoGetContextToken (in: pToken=0x19dfb8 | out: pToken=0x19dfb8) returned 0x0 [0115.686] CoGetContextToken (in: pToken=0x19e3c0 | out: pToken=0x19e3c0) returned 0x0 [0115.686] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x6f279b0c*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19e44c | out: ppvObject=0x19e44c*=0x0) returned 0x80004002 [0115.686] WebBrowser:IUnknown:Release (This=0x80ea44) returned 0x12 [0115.686] CoGetContextToken (in: pToken=0x19e998 | out: pToken=0x19e998) returned 0x0 [0115.686] CoGetContextToken (in: pToken=0x19e8f8 | out: pToken=0x19e8f8) returned 0x0 [0115.686] WebBrowser:IUnknown:QueryInterface (in: This=0x80ea44, riid=0x19e9c8*(Data1=0xb196b286, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x19e9c4 | out: ppvObject=0x19e9c4*=0x80ea44) returned 0x0 [0115.686] WebBrowser:IUnknown:AddRef (This=0x80ea44) returned 0x14 [0115.686] WebBrowser:IUnknown:Release (This=0x80ea44) returned 0x13 [0115.686] WebBrowser:IUnknown:Release (This=0x80ea44) returned 0x12 [0115.687] IConnectionPoint:Advise (in: This=0x80ea44, pUnkSink=0x47dfeac, pdwCookie=0x22f90b8 | out: pdwCookie=0x22f90b8*=0x1) returned 0x0 [0115.688] WebBrowser:IOleObject:DoVerb (This=0x80e91c, iVerb=-5, lpmsg=0x0, pActiveSite=0x47dfeb4, lindex=0, hwndParent=0x2027c, lprcPosRect=0x22f90f4) returned 0x0 [0115.883] GetParent (hWnd=0x2027c) returned 0x402b0 [0115.949] WebBrowser:IOleInPlaceObject:SetObjectRects (This=0x80e928, lprcPosRect=0x22f9124, lprcClipRect=0x22f913c) returned 0x0 [0115.955] GetCurrentActCtx (in: lphActCtx=0x19e8d8 | out: lphActCtx=0x19e8d8*=0x0) returned 1 [0115.955] ActivateActCtx (in: hActCtx=0x7dec54, lpCookie=0x19e8e8 | out: hActCtx=0x7dec54, lpCookie=0x19e8e8) returned 1 [0115.955] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x72dd0000 [0115.957] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0115.957] CreateWindowExW (dwExStyle=0x10000, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName="News", dwStyle=0x46000000, X=4, Y=22, nWidth=1156, nHeight=842, hWndParent=0x402b0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2029a [0115.958] SetWindowLongW (hWnd=0x2029a, nIndex=-4, dwNewLong=1944586208) returned 76940734 [0115.958] GetWindowLongW (hWnd=0x2029a, nIndex=-4) returned 1944586208 [0115.958] SetWindowLongW (hWnd=0x2029a, nIndex=-4, dwNewLong=76949550) returned 1944586208 [0115.958] GetWindowLongW (hWnd=0x2029a, nIndex=-4) returned 76949550 [0115.958] GetWindowLongW (hWnd=0x2029a, nIndex=-16) returned 1174405120 [0115.958] GetWindowLongW (hWnd=0x2029a, nIndex=-12) returned 0 [0115.958] SetWindowLongW (hWnd=0x2029a, nIndex=-12, dwNewLong=131738) returned 0 [0115.959] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x81, wParam=0x0, lParam=0x19e2f8) returned 0x1 [0115.959] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x83, wParam=0x0, lParam=0x19e2e4) returned 0x0 [0115.959] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x1, wParam=0x0, lParam=0x19e2f8) returned 0x0 [0115.959] GetClientRect (in: hWnd=0x2029a, lpRect=0x19e018 | out: lpRect=0x19e018) returned 1 [0115.959] GetWindowRect (in: hWnd=0x2029a, lpRect=0x19e018 | out: lpRect=0x19e018) returned 1 [0115.959] GetParent (hWnd=0x2029a) returned 0x402b0 [0115.960] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e018, cPoints=0x2 | out: lpPoints=0x19e018) returned -1638403 [0115.960] SetWindowTextW (hWnd=0x2029a, lpString="News") returned 1 [0115.960] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0xc, wParam=0x0, lParam=0x22396a0) returned 0x1 [0115.961] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x5, wParam=0x0, lParam=0x34a0484) returned 0x0 [0115.961] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x3, wParam=0x0, lParam=0x160004) returned 0x0 [0115.961] GetClientRect (in: hWnd=0x2029a, lpRect=0x19e070 | out: lpRect=0x19e070) returned 1 [0115.961] GetWindowRect (in: hWnd=0x2029a, lpRect=0x19e070 | out: lpRect=0x19e070) returned 1 [0115.961] GetParent (hWnd=0x2029a) returned 0x402b0 [0115.961] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e070, cPoints=0x2 | out: lpPoints=0x19e070) returned -1638403 [0115.961] SendMessageW (hWnd=0x2029a, Msg=0x2210, wParam=0x29a0001, lParam=0x2029a) returned 0x0 [0115.961] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2029a, Msg=0x2210, wParam=0x29a0001, lParam=0x2029a) returned 0x0 [0115.962] GetParent (hWnd=0x2029a) returned 0x402b0 [0115.962] DeactivateActCtx (dwFlags=0x0, ulCookie=0x14ef0006) returned 1 [0115.973] WebBrowser:IOleWindow:GetWindow (in: This=0x80e928, phwnd=0x19e9cc | out: phwnd=0x19e9cc) returned 0x0 [0115.974] SetParent (hWndChild=0x202ae, hWndNewParent=0x2027c) returned 0x402b0 [0115.977] GetWindowLongW (hWnd=0x202ae, nIndex=-4) returned 1930096336 [0115.977] SetWindowLongW (hWnd=0x202ae, nIndex=-4, dwNewLong=76949590) returned 1930096336 [0115.978] GetWindowLongW (hWnd=0x202ae, nIndex=-4) returned 76949590 [0115.978] GetWindow (hWnd=0x2027c, uCmd=0x3) returned 0x0 [0115.978] GetClientRect (in: hWnd=0x2027c, lpRect=0x19e978 | out: lpRect=0x19e978) returned 1 [0115.978] GetWindowRect (in: hWnd=0x2027c, lpRect=0x19e978 | out: lpRect=0x19e978) returned 1 [0115.978] GetParent (hWnd=0x2027c) returned 0x402b0 [0115.978] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e978, cPoints=0x2 | out: lpPoints=0x19e978) returned -1638403 [0115.979] GetDC (hWnd=0x0) returned 0xc0100ae [0115.979] GetDeviceCaps (hdc=0xc0100ae, index=88) returned 96 [0115.980] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0115.980] GetDC (hWnd=0x0) returned 0xc0100ae [0115.980] GetDeviceCaps (hdc=0xc0100ae, index=90) returned 96 [0115.980] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0116.048] WebBrowser:IOleObject:SetExtent (This=0x80e91c, dwDrawAspect=0x1, psizel=0x22f9330) returned 0x0 [0116.048] WebBrowser:IOleObject:GetExtent (in: This=0x80e91c, dwDrawAspect=0x1, psizel=0x22f9360 | out: psizel=0x22f9360) returned 0x0 [0116.048] WebBrowser:IOleInPlaceObject:SetObjectRects (This=0x80e928, lprcPosRect=0x22f93a8, lprcClipRect=0x22f93c0) returned 0x0 [0116.049] CallWindowProcW (lpPrevWndFunc=0x730aeed0, hWnd=0x202ae, Msg=0x47, wParam=0x0, lParam=0x19e8bc) returned 0x0 [0116.050] CallWindowProcW (lpPrevWndFunc=0x730aeed0, hWnd=0x202ae, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0116.125] WebBrowser:IWebBrowser2:get_Silent (in: This=0x80ea78, pbSilent=0x19ecc8 | out: pbSilent=0x19ecc8*=0x0) returned 0x0 [0116.125] WebBrowser:IWebBrowser2:put_Silent (This=0x80ea78, Silent=1) returned 0x0 [0116.193] WebBrowser:IOleInPlaceObject:SetObjectRects (This=0x80e928, lprcPosRect=0x22f93d8, lprcClipRect=0x22f93f0) returned 0x0 [0116.193] CallWindowProcW (lpPrevWndFunc=0x730aeed0, hWnd=0x202ae, Msg=0x83, wParam=0x1, lParam=0x19eb34) returned 0x0 [0116.195] CallWindowProcW (lpPrevWndFunc=0x730aeed0, hWnd=0x202ae, Msg=0x47, wParam=0x0, lParam=0x19eb5c) returned 0x0 [0116.195] CallWindowProcW (lpPrevWndFunc=0x730aeed0, hWnd=0x202ae, Msg=0x5, wParam=0x0, lParam=0x344047e) returned 0x0 [0116.195] SetWindowPos (hWnd=0x2027c, hWndInsertAfter=0x0, X=3, Y=3, cx=1150, cy=836, uFlags=0x16) returned 1 [0116.195] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x46, wParam=0x0, lParam=0x19ebe4) returned 0x0 [0116.196] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x83, wParam=0x1, lParam=0x19ebbc) returned 0x0 [0116.197] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x47, wParam=0x0, lParam=0x19ebe4) returned 0x0 [0116.197] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0x5, wParam=0x0, lParam=0x344047e) returned 0x0 [0116.197] GetClientRect (in: hWnd=0x2027c, lpRect=0x19e8e4 | out: lpRect=0x19e8e4) returned 1 [0116.197] GetWindowRect (in: hWnd=0x2027c, lpRect=0x19e8e4 | out: lpRect=0x19e8e4) returned 1 [0116.197] GetParent (hWnd=0x2027c) returned 0x402b0 [0116.197] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x402b0, lpPoints=0x19e8e4, cPoints=0x2 | out: lpPoints=0x19e8e4) returned -1638403 [0116.198] GetWindowTextLengthW (hWnd=0x2027c) returned 0 [0116.198] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0116.198] GetSystemMetrics (nIndex=42) returned 0 [0116.198] GetWindowTextW (in: hWnd=0x2027c, lpString=0x19e774, nMaxCount=1 | out: lpString="") returned 0 [0116.199] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xd, wParam=0x1, lParam=0x19e774) returned 0x0 [0116.199] GetParent (hWnd=0x2027c) returned 0x402b0 [0116.203] SystemParametersInfoW (in: uiAction=0x26, uiParam=0x0, pvParam=0x19ecfc, fWinIni=0x0 | out: pvParam=0x19ecfc) returned 1 [0116.203] GetCurrentThreadId () returned 0x135c [0116.203] GetCurrentThreadId () returned 0x135c [0116.204] IsAppThemed () returned 0x1 [0116.204] GetThemeAppProperties () returned 0x3 [0116.204] GetThemeAppProperties () returned 0x3 [0116.204] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.204] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0116.204] IsAppThemed () returned 0x1 [0116.205] GetThemeAppProperties () returned 0x3 [0116.205] GetThemeAppProperties () returned 0x3 [0116.205] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.205] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] IsAppThemed () returned 0x1 [0116.208] GetThemeAppProperties () returned 0x3 [0116.208] GetThemeAppProperties () returned 0x3 [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.208] GetCurrentThreadId () returned 0x135c [0116.209] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.209] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0116.209] IsAppThemed () returned 0x1 [0116.209] GetThemeAppProperties () returned 0x3 [0116.209] GetThemeAppProperties () returned 0x3 [0116.209] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.209] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0116.210] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.210] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0116.210] IsAppThemed () returned 0x1 [0116.210] GetThemeAppProperties () returned 0x3 [0116.210] GetThemeAppProperties () returned 0x3 [0116.482] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb18, format=0x420, lpdtp=0x22f9f40 | out: lpchText="j^", lprc=0x19eb18) returned 13 [0116.634] GdipGetFamilyName (in: family=0x5b751f8, name=0x19ea54, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0116.634] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0116.634] CoTaskMemAlloc (cb=0x5c) returned 0x80ed78 [0116.634] CreateFontIndirectW (lplf=0x80ed78) returned 0x30a0868 [0116.634] CoTaskMemFree (pv=0x80ed78) [0116.634] GetObjectW (in: h=0x30a0868, c=92, pv=0x19ea18 | out: pv=0x19ea18) returned 92 [0116.773] GetTextExtentPoint32W (in: hdc=0x230106af, lpString="0", c=1, psizl=0x22fa104 | out: psizl=0x22fa104) returned 1 [0116.843] DeleteObject (ho=0x30a0868) returned 1 [0116.844] GetSystemMetrics (nIndex=45) returned 2 [0116.844] GetSystemMetrics (nIndex=46) returned 2 [0116.844] GetSystemMetrics (nIndex=7) returned 3 [0116.844] GetSystemMetrics (nIndex=8) returned 3 [0116.844] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0116.844] AdjustWindowRectEx (in: lpRect=0x19ec38, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec38) returned 1 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xae05dd42, Data2=0xce7c, Data3=0x454e, Data4=([0]=0xb8, [1]=0x29, [2]=0xa, [3]=0xc1, [4]=0xc5, [5]=0x86, [6]=0xf2, [7]=0x26))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xbb2226aa, Data2=0x3ed6, Data3=0x45c0, Data4=([0]=0xb6, [1]=0x22, [2]=0xbf, [3]=0x5d, [4]=0xda, [5]=0x78, [6]=0x3f, [7]=0x5e))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xd5df8903, Data2=0x46ab, Data3=0x4568, Data4=([0]=0x94, [1]=0xa7, [2]=0x39, [3]=0x63, [4]=0x78, [5]=0x9, [6]=0x4e, [7]=0x9e))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0x2c8afea2, Data2=0x4044, Data3=0x45b4, Data4=([0]=0x9a, [1]=0x21, [2]=0x71, [3]=0x77, [4]=0xeb, [5]=0xec, [6]=0x32, [7]=0xa))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xaac3f61e, Data2=0x4744, Data3=0x4227, Data4=([0]=0x98, [1]=0xea, [2]=0xdb, [3]=0x5a, [4]=0x4c, [5]=0x1b, [6]=0x7d, [7]=0x2f))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xa6774291, Data2=0x1554, Data3=0x4117, Data4=([0]=0xa7, [1]=0xce, [2]=0xab, [3]=0x77, [4]=0xdc, [5]=0xe1, [6]=0x82, [7]=0xda))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0x47194323, Data2=0x15be, Data3=0x4e67, Data4=([0]=0x98, [1]=0xc8, [2]=0xb6, [3]=0xe0, [4]=0x72, [5]=0x22, [6]=0x2e, [7]=0xb4))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0x605deb69, Data2=0xfa76, Data3=0x419a, Data4=([0]=0x8f, [1]=0xc9, [2]=0x5, [3]=0x60, [4]=0x35, [5]=0x6c, [6]=0xd7, [7]=0x55))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xaeaa3a1, Data2=0x6932, Data3=0x4b58, Data4=([0]=0xaf, [1]=0x3b, [2]=0xac, [3]=0x22, [4]=0x43, [5]=0xe5, [6]=0x74, [7]=0xfd))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0x4d893b79, Data2=0xcdaf, Data3=0x4891, Data4=([0]=0xbc, [1]=0x43, [2]=0x85, [3]=0x2e, [4]=0x87, [5]=0xab, [6]=0xa5, [7]=0x3c))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0x252a4549, Data2=0x11e5, Data3=0x45b2, Data4=([0]=0x83, [1]=0x3c, [2]=0x37, [3]=0xeb, [4]=0x27, [5]=0x1e, [6]=0x2c, [7]=0x94))) returned 0x0 [0116.859] CoCreateGuid (in: pguid=0x19e31c | out: pguid=0x19e31c*(Data1=0xe37c230d, Data2=0x5d75, Data3=0x4d18, Data4=([0]=0x8f, [1]=0x65, [2]=0x48, [3]=0x1f, [4]=0x16, [5]=0x76, [6]=0xed, [7]=0xe2))) returned 0x0 [0116.863] CoCreateGuid (in: pguid=0x19e450 | out: pguid=0x19e450*(Data1=0x4302a5be, Data2=0x97a0, Data3=0x47ad, Data4=([0]=0x9c, [1]=0xa9, [2]=0x99, [3]=0x2a, [4]=0xa2, [5]=0xb1, [6]=0xcc, [7]=0x10))) returned 0x0 [0116.863] CoCreateGuid (in: pguid=0x19e450 | out: pguid=0x19e450*(Data1=0x912e40e8, Data2=0x6c40, Data3=0x4768, Data4=([0]=0x9b, [1]=0xa4, [2]=0x85, [3]=0xb9, [4]=0xab, [5]=0x1c, [6]=0x9d, [7]=0x89))) returned 0x0 [0116.863] CoCreateGuid (in: pguid=0x19e450 | out: pguid=0x19e450*(Data1=0xd364655a, Data2=0xc3b, Data3=0x4fe7, Data4=([0]=0x9b, [1]=0xdd, [2]=0x0, [3]=0x87, [4]=0x88, [5]=0xc0, [6]=0x33, [7]=0xd7))) returned 0x0 [0117.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.019] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0117.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.031] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0117.031] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.032] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.032] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.032] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.032] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.033] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.033] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.209] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.209] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.210] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.210] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.210] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.211] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.211] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.211] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.211] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.211] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.212] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.212] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.212] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.213] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.213] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x22ffbd8) returned 0x0 [0117.213] GdipGetFontSize (font=0x5babe68, size=0x22ffbdc) returned 0x0 [0117.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.214] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.214] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.214] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.291] GdipLoadImageFromStream (stream=0x47dfe30, image=0x19e4c0) returned 0x0 [0117.294] GdipImageForceValidation (image=0x5bb4e90) returned 0x0 [0117.296] GdipGetImageType (image=0x5bb4e90, type=0x19e4bc) returned 0x0 [0117.296] GdipGetImageRawFormat (image=0x5bb4e90, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0117.296] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.297] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.297] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.297] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.297] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.298] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.298] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.298] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.299] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.299] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.299] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.299] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.299] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.299] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.299] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2306d50) returned 0x0 [0117.300] GdipGetFontSize (font=0x5babe40, size=0x2306d54) returned 0x0 [0117.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.300] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.300] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.300] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.300] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.301] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2306f00) returned 0x0 [0117.301] GdipGetFontSize (font=0x5babd00, size=0x2306f04) returned 0x0 [0117.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.301] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.302] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.302] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.302] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23071a0) returned 0x0 [0117.302] GdipGetFontSize (font=0x5babc10, size=0x23071a4) returned 0x0 [0117.302] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.303] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.303] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.303] GetCurrentThreadId () returned 0x135c [0117.303] GetCurrentThreadId () returned 0x135c [0117.303] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.303] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.304] SelectObject (hdc=0x230106af, h=0x850a0958) returned 0x1f0a096d [0117.304] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x2307450 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0117.304] GetCurrentThreadId () returned 0x135c [0117.304] GetCurrentThreadId () returned 0x135c [0117.304] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.305] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.305] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x2307808 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0117.305] GetCurrentThreadId () returned 0x135c [0117.305] GetCurrentThreadId () returned 0x135c [0117.305] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.305] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.305] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x23078e4 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GdipImageGetFrameDimensionsCount (image=0x5bb4e90, count=0x19e90c) returned 0x0 [0117.306] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x8424b8 [0117.306] GdipImageGetFrameDimensionsList (image=0x5bb4e90, dimensionIDs=0x8424b8*(Data1=0x0, Data2=0x0, Data3=0x800, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0117.306] LocalFree (hMem=0x8424b8) returned 0x0 [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GetCurrentThreadId () returned 0x135c [0117.306] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.306] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.306] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x2307b24 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0117.307] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.307] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0117.307] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.307] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0117.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.308] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0117.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.308] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0117.308] GetCurrentThreadId () returned 0x135c [0117.308] GetCurrentThreadId () returned 0x135c [0117.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.309] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.309] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.310] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.310] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.310] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.310] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.310] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.311] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.311] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.311] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.311] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.311] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.311] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2309250) returned 0x0 [0117.311] GdipGetFontSize (font=0x5babee0, size=0x2309254) returned 0x0 [0117.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.312] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.312] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.312] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.404] GdipLoadImageFromStream (stream=0x47dfe10, image=0x19e4c0) returned 0x0 [0117.406] GdipImageForceValidation (image=0x5bb9498) returned 0x0 [0117.407] GdipGetImageType (image=0x5bb9498, type=0x19e4bc) returned 0x0 [0117.407] GdipGetImageRawFormat (image=0x5bb9498, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0117.408] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.409] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.409] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.409] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.410] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.410] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.410] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.410] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.410] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.411] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.421] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.421] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23103c8) returned 0x0 [0117.421] GdipGetFontSize (font=0x5babf08, size=0x23103cc) returned 0x0 [0117.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.422] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.423] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.423] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.423] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2310578) returned 0x0 [0117.423] GdipGetFontSize (font=0x5babeb8, size=0x231057c) returned 0x0 [0117.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.423] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.424] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.424] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.424] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2310818) returned 0x0 [0117.424] GdipGetFontSize (font=0x5babb98, size=0x231081c) returned 0x0 [0117.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.424] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.425] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.425] GetCurrentThreadId () returned 0x135c [0117.425] GetCurrentThreadId () returned 0x135c [0117.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.425] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.425] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x2310aac | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0117.426] GetCurrentThreadId () returned 0x135c [0117.426] GetCurrentThreadId () returned 0x135c [0117.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.427] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.427] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x2310e48 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0117.427] GetCurrentThreadId () returned 0x135c [0117.427] GetCurrentThreadId () returned 0x135c [0117.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.428] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.428] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x2310f24 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0117.428] GetCurrentThreadId () returned 0x135c [0117.428] GetCurrentThreadId () returned 0x135c [0117.428] GetCurrentThreadId () returned 0x135c [0117.428] GetCurrentThreadId () returned 0x135c [0117.428] GdipImageGetFrameDimensionsCount (image=0x5bb9498, count=0x19e90c) returned 0x0 [0117.428] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842668 [0117.428] GdipImageGetFrameDimensionsList (image=0x5bb9498, dimensionIDs=0x842668*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0117.428] LocalFree (hMem=0x842668) returned 0x0 [0117.428] GetCurrentThreadId () returned 0x135c [0117.428] GetCurrentThreadId () returned 0x135c [0117.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.429] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.429] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x2311164 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0117.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.429] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0117.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.430] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0117.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.430] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0117.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.430] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0117.430] GetCurrentThreadId () returned 0x135c [0117.430] GetCurrentThreadId () returned 0x135c [0117.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.431] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.431] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.432] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.432] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.432] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.433] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.433] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.433] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.434] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.434] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.434] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2312890) returned 0x0 [0117.434] GdipGetFontSize (font=0x5babf30, size=0x2312894) returned 0x0 [0117.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.434] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.434] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.434] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.500] GdipLoadImageFromStream (stream=0x47dfdf0, image=0x19e4c0) returned 0x0 [0117.501] GdipImageForceValidation (image=0x5bbdaa0) returned 0x0 [0117.511] GdipGetImageType (image=0x5bbdaa0, type=0x19e4bc) returned 0x0 [0117.511] GdipGetImageRawFormat (image=0x5bbdaa0, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0117.511] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.511] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.511] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.511] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.512] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.512] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.512] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.513] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.513] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.513] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.513] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.513] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.513] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.513] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2319a08) returned 0x0 [0117.513] GdipGetFontSize (font=0x5babe90, size=0x2319a0c) returned 0x0 [0117.513] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.514] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.514] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.514] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.514] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2319bb8) returned 0x0 [0117.514] GdipGetFontSize (font=0x5babaf8, size=0x2319bbc) returned 0x0 [0117.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.514] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.515] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.515] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.515] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2319e58) returned 0x0 [0117.515] GdipGetFontSize (font=0x5babbc0, size=0x2319e5c) returned 0x0 [0117.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.515] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.515] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.515] GetCurrentThreadId () returned 0x135c [0117.516] GetCurrentThreadId () returned 0x135c [0117.516] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.516] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.516] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x231a0ec | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0117.516] GetCurrentThreadId () returned 0x135c [0117.516] GetCurrentThreadId () returned 0x135c [0117.516] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.516] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.516] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x231a488 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.517] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.517] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x231a564 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GetCurrentThreadId () returned 0x135c [0117.517] GdipImageGetFrameDimensionsCount (image=0x5bbdaa0, count=0x19e90c) returned 0x0 [0117.517] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x8423f8 [0117.517] GdipImageGetFrameDimensionsList (image=0x5bbdaa0, dimensionIDs=0x8423f8*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0117.517] LocalFree (hMem=0x8423f8) returned 0x0 [0117.518] GetCurrentThreadId () returned 0x135c [0117.518] GetCurrentThreadId () returned 0x135c [0117.518] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.518] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.518] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x231a7a4 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0117.518] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.518] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0117.519] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.519] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0117.519] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.519] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0117.519] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.519] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0117.519] GetCurrentThreadId () returned 0x135c [0117.519] GetCurrentThreadId () returned 0x135c [0117.519] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.520] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.521] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.521] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.521] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.522] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.522] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.522] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.522] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.522] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.523] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.523] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x231bed0) returned 0x0 [0117.523] GdipGetFontSize (font=0x5babb48, size=0x231bed4) returned 0x0 [0117.523] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.523] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.523] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.523] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.593] GdipLoadImageFromStream (stream=0x47dfdd0, image=0x19e4c0) returned 0x0 [0117.595] GdipImageForceValidation (image=0x5bc20a8) returned 0x0 [0117.596] GdipGetImageType (image=0x5bc20a8, type=0x19e4bc) returned 0x0 [0117.596] GdipGetImageRawFormat (image=0x5bc20a8, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0117.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.596] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.596] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.597] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.597] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.597] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.597] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.597] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.598] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.598] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.598] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.598] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.599] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2323048) returned 0x0 [0117.599] GdipGetFontSize (font=0x5babcb0, size=0x232304c) returned 0x0 [0117.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.599] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.599] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.599] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.599] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.599] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23231f8) returned 0x0 [0117.599] GdipGetFontSize (font=0x5babf58, size=0x23231fc) returned 0x0 [0117.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.600] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.600] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.600] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.600] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2323498) returned 0x0 [0117.600] GdipGetFontSize (font=0x5babad0, size=0x232349c) returned 0x0 [0117.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.600] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.601] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.601] GetCurrentThreadId () returned 0x135c [0117.601] GetCurrentThreadId () returned 0x135c [0117.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.601] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.601] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x232372c | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0117.601] GetCurrentThreadId () returned 0x135c [0117.601] GetCurrentThreadId () returned 0x135c [0117.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.602] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.602] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x2323ac8 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.602] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.602] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x2323ba4 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GetCurrentThreadId () returned 0x135c [0117.602] GdipImageGetFrameDimensionsCount (image=0x5bc20a8, count=0x19e90c) returned 0x0 [0117.602] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842548 [0117.602] GdipImageGetFrameDimensionsList (image=0x5bc20a8, dimensionIDs=0x842548*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x3a)), count=0x1) returned 0x0 [0117.603] LocalFree (hMem=0x842548) returned 0x0 [0117.603] GetCurrentThreadId () returned 0x135c [0117.603] GetCurrentThreadId () returned 0x135c [0117.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.603] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.603] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x2323de4 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0117.603] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.603] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0117.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.604] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0117.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.604] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0117.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.604] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0117.604] GetCurrentThreadId () returned 0x135c [0117.604] GetCurrentThreadId () returned 0x135c [0117.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.605] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.605] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.606] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.606] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.606] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.606] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.606] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.607] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.607] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.607] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.607] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x232555c) returned 0x0 [0117.607] GdipGetFontSize (font=0x5babbe8, size=0x2325560) returned 0x0 [0117.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.608] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.608] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.608] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.691] GdipLoadImageFromStream (stream=0x47dfdb0, image=0x19e4c0) returned 0x0 [0117.692] GdipImageForceValidation (image=0x5bc66b0) returned 0x0 [0117.693] GdipGetImageType (image=0x5bc66b0, type=0x19e4bc) returned 0x0 [0117.693] GdipGetImageRawFormat (image=0x5bc66b0, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0117.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.694] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.694] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.694] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.694] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.695] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0117.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.695] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.695] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.695] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.695] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.696] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0117.696] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.696] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x232c6d4) returned 0x0 [0117.696] GdipGetFontSize (font=0x5babd28, size=0x232c6d8) returned 0x0 [0117.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.696] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.697] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.697] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.697] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x232c884) returned 0x0 [0117.697] GdipGetFontSize (font=0x5babda0, size=0x232c888) returned 0x0 [0117.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.697] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.697] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.697] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0117.697] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.698] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x232cb24) returned 0x0 [0117.698] GdipGetFontSize (font=0x5babdc8, size=0x232cb28) returned 0x0 [0117.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.698] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.698] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.698] GetCurrentThreadId () returned 0x135c [0117.698] GetCurrentThreadId () returned 0x135c [0117.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.698] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.699] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x232cdb8 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0117.699] GetCurrentThreadId () returned 0x135c [0117.699] GetCurrentThreadId () returned 0x135c [0117.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.699] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.699] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x232d154 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0117.699] GetCurrentThreadId () returned 0x135c [0117.699] GetCurrentThreadId () returned 0x135c [0117.699] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.700] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.700] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x232d230 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GdipImageGetFrameDimensionsCount (image=0x5bc66b0, count=0x19e90c) returned 0x0 [0117.700] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842668 [0117.700] GdipImageGetFrameDimensionsList (image=0x5bc66b0, dimensionIDs=0x842668*(Data1=0x74737953, Data2=0x6d65, Data3=0x442e, Data4=([0]=0x72, [1]=0x61, [2]=0x77, [3]=0x69, [4]=0x6e, [5]=0x67, [6]=0x0, [7]=0x0)), count=0x1) returned 0x0 [0117.700] LocalFree (hMem=0x842668) returned 0x0 [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GetCurrentThreadId () returned 0x135c [0117.700] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.700] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0117.700] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x232d470 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0117.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.701] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0117.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.701] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0117.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.701] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0117.702] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.702] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0117.702] GetCurrentThreadId () returned 0x135c [0117.702] GetCurrentThreadId () returned 0x135c [0117.705] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.705] AdjustWindowRectEx (in: lpRect=0x19eaa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eaa8) returned 1 [0117.706] SelectObject (hdc=0x230106af, h=0x630a095a) returned 0x850a0958 [0117.706] DrawTextExW (in: hdc=0x230106af, lpchText="Team 1", cchText=6, lprc=0x19ea90, format=0x2400, lpdtp=0x232dbe0 | out: lpchText="Team 1", lprc=0x19ea90) returned 16 [0117.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.706] AdjustWindowRectEx (in: lpRect=0x19eb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb7c) returned 1 [0117.714] SystemParametersInfoW (in: uiAction=0x29, uiParam=0x1f4, pvParam=0x19e9b0, fWinIni=0x0 | out: pvParam=0x19e9b0) returned 1 [0117.715] GetDC (hWnd=0x0) returned 0xc0100ae [0117.715] CoTaskMemAlloc (cb=0x5c) returned 0x80efe8 [0117.715] GdipCreateFontFromLogfontW (hdc=0xc0100ae, logfont=0x80efe8, font=0x19ebb8) returned 0x0 [0117.740] CoTaskMemFree (pv=0x80efe8) [0117.740] CoTaskMemAlloc (cb=0x5c) returned 0x80ed10 [0117.740] CoTaskMemFree (pv=0x80ed10) [0117.740] CoTaskMemAlloc (cb=0x5c) returned 0x80ec40 [0117.740] CoTaskMemFree (pv=0x80ec40) [0117.740] GdipGetFontUnit (font=0x5babc38, unit=0x19eb84) returned 0x0 [0117.740] GdipGetFontSize (font=0x5babc38, size=0x19eb88) returned 0x0 [0117.740] GdipGetFontStyle (font=0x5babc38, style=0x19eb80) returned 0x0 [0117.740] GdipGetFamily (font=0x5babc38, family=0x19eb7c) returned 0x0 [0117.741] GdipGetFontSize (font=0x5babc38, size=0x232df58) returned 0x0 [0117.741] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0117.743] GetDC (hWnd=0x0) returned 0xc0100ae [0117.743] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19eb98) returned 0x0 [0117.744] GdipGetDpiY (graphics=0x5bcaf58, dpi=0x232e060) returned 0x0 [0117.744] GdipGetFontHeight (font=0x5babc38, graphics=0x5bcaf58, height=0x19eb90) returned 0x0 [0117.744] GdipGetEmHeight (family=0x5b77e18, style=0, EmHeight=0x19eb98) returned 0x0 [0117.745] GdipGetLineSpacing (family=0x5b77e18, style=0, LineSpacing=0x19eb98) returned 0x0 [0117.745] GdipDeleteGraphics (graphics=0x5bcaf58) returned 0x0 [0117.745] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0117.745] GdipCreateFont (fontFamily=0x5b77e18, emSize=0x41100000, style=0, unit=0x3, font=0x232e020) returned 0x0 [0117.745] GdipGetFontSize (font=0x5bac1b0, size=0x232e024) returned 0x0 [0117.745] SystemParametersInfoW (in: uiAction=0x6a, uiParam=0x0, pvParam=0x19e55c, fWinIni=0x0 | out: pvParam=0x19e55c) returned 1 [0117.747] GetSystemMetrics (nIndex=80) returned 1 [0117.747] MonitorFromRect (lprc=0x19ec00, dwFlags=0x2) returned 0x10001 [0117.748] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eaf0 | out: lpmi=0x19eaf0) returned 1 [0117.750] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x6010868 [0117.751] GetDeviceCaps (hdc=0x6010868, index=12) returned 32 [0117.751] GetDeviceCaps (hdc=0x6010868, index=14) returned 1 [0117.751] DeleteDC (hdc=0x6010868) returned 1 [0117.752] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb34 | out: lpmi=0x19eb34) returned 1 [0117.752] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.753] AdjustWindowRectEx (in: lpRect=0x19ebd8, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebd8) returned 1 [0117.759] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x19ebd8, fWinIni=0x0 | out: pvParam=0x19ebd8) returned 1 [0117.761] IsAppThemed () returned 0x1 [0117.761] GetThemeAppProperties () returned 0x3 [0117.761] GetThemeAppProperties () returned 0x3 [0117.767] IsAppThemed () returned 0x1 [0117.767] GetThemeAppProperties () returned 0x3 [0117.767] GetThemeAppProperties () returned 0x3 [0117.768] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.768] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0117.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.769] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0117.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.769] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.769] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.770] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.770] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.770] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.821] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.822] AdjustWindowRectEx (in: lpRect=0x19e9f4, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f4) returned 1 [0117.822] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.822] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0117.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.823] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.823] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.823] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0117.823] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0117.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.824] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.824] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.824] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0117.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.825] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0117.825] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0117.825] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2330664) returned 0x0 [0117.825] GdipGetFontSize (font=0x5bac1d8, size=0x2330668) returned 0x0 [0117.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.825] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.825] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0117.825] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0117.965] GdipLoadImageFromStream (stream=0x47dfd90, image=0x19e4c0) returned 0x0 [0117.968] GdipImageForceValidation (image=0x5bcbca0) returned 0x0 [0118.045] GdipGetImageType (image=0x5bcbca0, type=0x19e4bc) returned 0x0 [0118.045] GdipGetImageRawFormat (image=0x5bcbca0, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0118.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.046] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.046] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.047] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.047] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.047] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.047] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.048] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.048] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.048] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.049] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.049] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.049] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23377dc) returned 0x0 [0118.049] GdipGetFontSize (font=0x5bac0e8, size=0x23377e0) returned 0x0 [0118.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.049] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.049] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.050] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.050] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.050] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x233798c) returned 0x0 [0118.050] GdipGetFontSize (font=0x5bac048, size=0x2337990) returned 0x0 [0118.050] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.050] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.051] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.051] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.051] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2337c2c) returned 0x0 [0118.051] GdipGetFontSize (font=0x5bac098, size=0x2337c30) returned 0x0 [0118.051] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.052] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.052] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.052] GetCurrentThreadId () returned 0x135c [0118.052] GetCurrentThreadId () returned 0x135c [0118.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.052] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.053] SelectObject (hdc=0x230106af, h=0x850a0958) returned 0x630a095a [0118.053] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x2337edc | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0118.053] GetCurrentThreadId () returned 0x135c [0118.053] GetCurrentThreadId () returned 0x135c [0118.053] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.053] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.054] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x2338294 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0118.054] GetCurrentThreadId () returned 0x135c [0118.054] GetCurrentThreadId () returned 0x135c [0118.054] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.054] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.054] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x2338370 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0118.054] GetCurrentThreadId () returned 0x135c [0118.054] GetCurrentThreadId () returned 0x135c [0118.055] GetCurrentThreadId () returned 0x135c [0118.055] GetCurrentThreadId () returned 0x135c [0118.055] GdipImageGetFrameDimensionsCount (image=0x5bcbca0, count=0x19e90c) returned 0x0 [0118.055] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842410 [0118.055] GdipImageGetFrameDimensionsList (image=0x5bcbca0, dimensionIDs=0x842410*(Data1=0x6f63736d, Data2=0x6c72, Data3=0x869, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0118.055] LocalFree (hMem=0x842410) returned 0x0 [0118.055] GetCurrentThreadId () returned 0x135c [0118.055] GetCurrentThreadId () returned 0x135c [0118.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.055] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.055] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x23385b0 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0118.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.056] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0118.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.056] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0118.056] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.057] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0118.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.057] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0118.057] GetCurrentThreadId () returned 0x135c [0118.057] GetCurrentThreadId () returned 0x135c [0118.057] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.057] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0118.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.058] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.058] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0118.058] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0118.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.059] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.059] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.059] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0118.059] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.059] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.059] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.060] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2339cdc) returned 0x0 [0118.060] GdipGetFontSize (font=0x5bac0c0, size=0x2339ce0) returned 0x0 [0118.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.060] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.060] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.060] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.170] GdipLoadImageFromStream (stream=0x47dfd70, image=0x19e4c0) returned 0x0 [0118.171] GdipImageForceValidation (image=0x5bcbfe8) returned 0x0 [0118.172] GdipGetImageType (image=0x5bcbfe8, type=0x19e4bc) returned 0x0 [0118.172] GdipGetImageRawFormat (image=0x5bcbfe8, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0118.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.173] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.173] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.173] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.174] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.174] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.174] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.174] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.174] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.174] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.175] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.175] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.175] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.175] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.176] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2340e54) returned 0x0 [0118.176] GdipGetFontSize (font=0x5bac110, size=0x2340e58) returned 0x0 [0118.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.176] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.176] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.177] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.177] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.177] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2341004) returned 0x0 [0118.177] GdipGetFontSize (font=0x5bac228, size=0x2341008) returned 0x0 [0118.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.178] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.178] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.178] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.178] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.178] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23412a4) returned 0x0 [0118.178] GdipGetFontSize (font=0x5bac138, size=0x23412a8) returned 0x0 [0118.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.179] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.179] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.179] GetCurrentThreadId () returned 0x135c [0118.179] GetCurrentThreadId () returned 0x135c [0118.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.179] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.179] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x2341538 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0118.179] GetCurrentThreadId () returned 0x135c [0118.179] GetCurrentThreadId () returned 0x135c [0118.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.180] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.180] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x23418d4 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0118.180] GetCurrentThreadId () returned 0x135c [0118.180] GetCurrentThreadId () returned 0x135c [0118.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.180] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.180] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x23419b0 | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0118.180] GetCurrentThreadId () returned 0x135c [0118.180] GetCurrentThreadId () returned 0x135c [0118.181] GetCurrentThreadId () returned 0x135c [0118.181] GetCurrentThreadId () returned 0x135c [0118.181] GdipImageGetFrameDimensionsCount (image=0x5bcbfe8, count=0x19e90c) returned 0x0 [0118.181] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842668 [0118.181] GdipImageGetFrameDimensionsList (image=0x5bcbfe8, dimensionIDs=0x842668*(Data1=0x6e0065, Data2=0x2d, Data3=0x855, Data4=([0]=0xb0, [1]=0x3f, [2]=0x5f, [3]=0x7f, [4]=0x11, [5]=0xd5, [6]=0xa, [7]=0x3a)), count=0x1) returned 0x0 [0118.181] LocalFree (hMem=0x842668) returned 0x0 [0118.181] GetCurrentThreadId () returned 0x135c [0118.181] GetCurrentThreadId () returned 0x135c [0118.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.181] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.181] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x2341bf0 | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0118.182] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.182] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0118.183] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.183] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0118.183] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.183] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0118.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.184] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0118.184] GetCurrentThreadId () returned 0x135c [0118.184] GetCurrentThreadId () returned 0x135c [0118.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.184] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0118.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.185] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.185] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0118.185] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0118.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.185] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.186] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.186] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0118.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.187] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.187] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.187] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x23433a8) returned 0x0 [0118.187] GdipGetFontSize (font=0x5bac188, size=0x23433ac) returned 0x0 [0118.187] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.187] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.187] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.188] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.265] GdipLoadImageFromStream (stream=0x47dfd50, image=0x19e4c0) returned 0x0 [0118.266] GdipImageForceValidation (image=0x5bcc330) returned 0x0 [0118.267] GdipGetImageType (image=0x5bcc330, type=0x19e4bc) returned 0x0 [0118.267] GdipGetImageRawFormat (image=0x5bcc330, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0118.267] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.268] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.268] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.268] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.269] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.269] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.269] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.269] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.269] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.270] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.270] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.270] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.270] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x234a520) returned 0x0 [0118.270] GdipGetFontSize (font=0x5babfa8, size=0x234a524) returned 0x0 [0118.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.271] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.271] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.271] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.271] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.271] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x234a6d0) returned 0x0 [0118.271] GdipGetFontSize (font=0x5bac160, size=0x234a6d4) returned 0x0 [0118.272] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.272] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.272] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.272] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.272] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.272] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x234a970) returned 0x0 [0118.272] GdipGetFontSize (font=0x5bac200, size=0x234a974) returned 0x0 [0118.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.273] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.273] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.273] GetCurrentThreadId () returned 0x135c [0118.273] GetCurrentThreadId () returned 0x135c [0118.273] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.273] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.273] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x234ac04 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0118.274] GetCurrentThreadId () returned 0x135c [0118.274] GetCurrentThreadId () returned 0x135c [0118.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.274] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.274] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x234afa0 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0118.274] GetCurrentThreadId () returned 0x135c [0118.274] GetCurrentThreadId () returned 0x135c [0118.274] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.274] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.274] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x234b07c | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GdipImageGetFrameDimensionsCount (image=0x5bcc330, count=0x19e90c) returned 0x0 [0118.275] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x8425a8 [0118.275] GdipImageGetFrameDimensionsList (image=0x5bcc330, dimensionIDs=0x8425a8*(Data1=0x6f63736d, Data2=0x6c72, Data3=0x869, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0118.275] LocalFree (hMem=0x8425a8) returned 0x0 [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GetCurrentThreadId () returned 0x135c [0118.275] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.275] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.275] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x234b2bc | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0118.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.276] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0118.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.276] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0118.276] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.276] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0118.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.277] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0118.277] GetCurrentThreadId () returned 0x135c [0118.277] GetCurrentThreadId () returned 0x135c [0118.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.277] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0118.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.278] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.278] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0118.278] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0118.278] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.278] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.279] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.279] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0118.279] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.279] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.279] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.279] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x234c9e8) returned 0x0 [0118.279] GdipGetFontSize (font=0x5bac250, size=0x234c9ec) returned 0x0 [0118.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.280] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.280] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.280] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.345] GdipLoadImageFromStream (stream=0x47dfd30, image=0x19e4c0) returned 0x0 [0118.347] GdipImageForceValidation (image=0x5bcc678) returned 0x0 [0118.348] GdipGetImageType (image=0x5bcc678, type=0x19e4bc) returned 0x0 [0118.348] GdipGetImageRawFormat (image=0x5bcc678, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0118.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.349] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.350] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.350] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.350] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.350] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.351] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.351] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.351] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.351] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.351] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2353b60) returned 0x0 [0118.351] GdipGetFontSize (font=0x5babfd0, size=0x2353b64) returned 0x0 [0118.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.352] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.352] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.352] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.352] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2353d10) returned 0x0 [0118.352] GdipGetFontSize (font=0x5babff8, size=0x2353d14) returned 0x0 [0118.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.353] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.353] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.353] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.353] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2353fb0) returned 0x0 [0118.353] GdipGetFontSize (font=0x5bac020, size=0x2353fb4) returned 0x0 [0118.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.353] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.354] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.354] GetCurrentThreadId () returned 0x135c [0118.354] GetCurrentThreadId () returned 0x135c [0118.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.354] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.354] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x2354244 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0118.354] GetCurrentThreadId () returned 0x135c [0118.354] GetCurrentThreadId () returned 0x135c [0118.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.355] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.355] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x23545e0 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.355] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.355] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x23546bc | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GetCurrentThreadId () returned 0x135c [0118.355] GdipImageGetFrameDimensionsCount (image=0x5bcc678, count=0x19e90c) returned 0x0 [0118.355] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842668 [0118.355] GdipImageGetFrameDimensionsList (image=0x5bcc678, dimensionIDs=0x842668*(Data1=0x6f63736d, Data2=0x6c72, Data3=0x869, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0118.356] LocalFree (hMem=0x842668) returned 0x0 [0118.356] GetCurrentThreadId () returned 0x135c [0118.356] GetCurrentThreadId () returned 0x135c [0118.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.356] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.356] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x23548fc | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0118.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.356] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0118.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.357] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0118.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.357] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0118.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.357] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0118.357] GetCurrentThreadId () returned 0x135c [0118.357] GetCurrentThreadId () returned 0x135c [0118.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.358] AdjustWindowRectEx (in: lpRect=0x19ebc4, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebc4) returned 1 [0118.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.358] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.358] AdjustWindowRectEx (in: lpRect=0x19ea70, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea70) returned 1 [0118.358] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc1dd [0118.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.359] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.359] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.359] AdjustWindowRectEx (in: lpRect=0x19ea58, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea58) returned 1 [0118.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.360] AdjustWindowRectEx (in: lpRect=0x19ea6c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea6c) returned 1 [0118.360] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.360] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x2356028) returned 0x0 [0118.360] GdipGetFontSize (font=0x5bac070, size=0x235602c) returned 0x0 [0118.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.360] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.360] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.420] GdipLoadImageFromStream (stream=0x47dfd10, image=0x19e4c0) returned 0x0 [0118.421] GdipImageForceValidation (image=0x5bcaf80) returned 0x0 [0118.422] GdipGetImageType (image=0x5bcaf80, type=0x19e4bc) returned 0x0 [0118.422] GdipGetImageRawFormat (image=0x5bcaf80, format=0x19e430*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0118.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.423] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.423] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56000000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.423] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.423] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.424] AdjustWindowRectEx (in: lpRect=0x19e9c0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c0) returned 1 [0118.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.424] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.425] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.425] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.425] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9f0) returned 1 [0118.425] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.426] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x235d1a0) returned 0x0 [0118.426] GdipGetFontSize (font=0x5c122b8, size=0x235d1a4) returned 0x0 [0118.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.437] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.437] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.438] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.438] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.438] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x235d350) returned 0x0 [0118.438] GdipGetFontSize (font=0x5c122e0, size=0x235d354) returned 0x0 [0118.438] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.438] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.439] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.439] AdjustWindowRectEx (in: lpRect=0x19e9a4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9a4) returned 1 [0118.439] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19ea34) returned 0x0 [0118.439] GdipCreateFont (fontFamily=0x5b751f8, emSize=0x41040000, style=1, unit=0x3, font=0x235d5f0) returned 0x0 [0118.439] GdipGetFontSize (font=0x5c124c0, size=0x235d5f4) returned 0x0 [0118.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.440] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.440] AdjustWindowRectEx (in: lpRect=0x19e9c4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e9c4) returned 1 [0118.440] GetCurrentThreadId () returned 0x135c [0118.440] GetCurrentThreadId () returned 0x135c [0118.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.441] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.441] DrawTextExW (in: hdc=0x230106af, lpchText="Seen: ", cchText=6, lprc=0x19e81c, format=0x2400, lpdtp=0x235d884 | out: lpchText="Seen: ", lprc=0x19e81c) returned 13 [0118.441] GetCurrentThreadId () returned 0x135c [0118.441] GetCurrentThreadId () returned 0x135c [0118.442] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.442] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.442] DrawTextExW (in: hdc=0x230106af, lpchText="NAMEEEEEEEEEEEE", cchText=15, lprc=0x19e81c, format=0x2400, lpdtp=0x235dc20 | out: lpchText="NAMEEEEEEEEEEEE", lprc=0x19e81c) returned 13 [0118.443] GetCurrentThreadId () returned 0x135c [0118.443] GetCurrentThreadId () returned 0x135c [0118.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.444] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.444] DrawTextExW (in: hdc=0x230106af, lpchText="Solo", cchText=4, lprc=0x19e81c, format=0x2400, lpdtp=0x235dcfc | out: lpchText="Solo", lprc=0x19e81c) returned 13 [0118.444] GetCurrentThreadId () returned 0x135c [0118.444] GetCurrentThreadId () returned 0x135c [0118.444] GetCurrentThreadId () returned 0x135c [0118.444] GetCurrentThreadId () returned 0x135c [0118.444] GdipImageGetFrameDimensionsCount (image=0x5bcaf80, count=0x19e90c) returned 0x0 [0118.444] LocalAlloc (uFlags=0x0, uBytes=0x10) returned 0x842668 [0118.445] GdipImageGetFrameDimensionsList (image=0x5bcaf80, dimensionIDs=0x842668*(Data1=0x74737953, Data2=0x6d65, Data3=0x82e, Data4=([0]=0x6e, [1]=0x0, [2]=0x61, [3]=0x0, [4]=0x6d, [5]=0x0, [6]=0x65, [7]=0x0)), count=0x1) returned 0x0 [0118.445] LocalFree (hMem=0x842668) returned 0x0 [0118.445] GetCurrentThreadId () returned 0x135c [0118.445] GetCurrentThreadId () returned 0x135c [0118.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.445] AdjustWindowRectEx (in: lpRect=0x19e834, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e834) returned 1 [0118.446] DrawTextExW (in: hdc=0x230106af, lpchText="Level: ", cchText=7, lprc=0x19e81c, format=0x2400, lpdtp=0x235df3c | out: lpchText="Level: ", lprc=0x19e81c) returned 13 [0118.446] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.446] AdjustWindowRectEx (in: lpRect=0x19e9f0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9f0) returned 1 [0118.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.447] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb88) returned 1 [0118.447] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.447] AdjustWindowRectEx (in: lpRect=0x19eb90, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb90) returned 1 [0118.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.448] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x56010a00, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0118.448] GetCurrentThreadId () returned 0x135c [0118.448] GetCurrentThreadId () returned 0x135c [0118.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.449] AdjustWindowRectEx (in: lpRect=0x19eaa8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eaa8) returned 1 [0118.449] SelectObject (hdc=0x230106af, h=0x630a095a) returned 0x850a0958 [0118.449] DrawTextExW (in: hdc=0x230106af, lpchText="Team 2", cchText=6, lprc=0x19ea90, format=0x2400, lpdtp=0x235e6ac | out: lpchText="Team 2", lprc=0x19ea90) returned 16 [0118.450] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.450] AdjustWindowRectEx (in: lpRect=0x19eb7c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb7c) returned 1 [0118.450] GetCurrentThreadId () returned 0x135c [0118.450] GetCurrentThreadId () returned 0x135c [0118.450] IsAppThemed () returned 0x1 [0118.450] GetThemeAppProperties () returned 0x3 [0118.450] GetThemeAppProperties () returned 0x3 [0118.450] GetCurrentThreadId () returned 0x135c [0118.450] GetCurrentThreadId () returned 0x135c [0118.450] IsAppThemed () returned 0x1 [0118.450] GetThemeAppProperties () returned 0x3 [0118.450] GetThemeAppProperties () returned 0x3 [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] IsAppThemed () returned 0x1 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] IsAppThemed () returned 0x1 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] IsAppThemed () returned 0x1 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetThemeAppProperties () returned 0x3 [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.451] GetCurrentThreadId () returned 0x135c [0118.452] IsAppThemed () returned 0x1 [0118.452] GetThemeAppProperties () returned 0x3 [0118.452] GetThemeAppProperties () returned 0x3 [0118.452] GetCurrentThreadId () returned 0x135c [0118.452] GetCurrentThreadId () returned 0x135c [0118.452] IsAppThemed () returned 0x1 [0118.452] GetThemeAppProperties () returned 0x3 [0118.452] GetThemeAppProperties () returned 0x3 [0118.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.452] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0118.452] IsAppThemed () returned 0x1 [0118.453] GetThemeAppProperties () returned 0x3 [0118.453] GetThemeAppProperties () returned 0x3 [0118.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.453] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0118.453] GetCurrentThreadId () returned 0x135c [0118.453] GetCurrentThreadId () returned 0x135c [0118.453] IsAppThemed () returned 0x1 [0118.453] GetThemeAppProperties () returned 0x3 [0118.453] GetThemeAppProperties () returned 0x3 [0118.454] GetCurrentThreadId () returned 0x135c [0118.454] GetCurrentThreadId () returned 0x135c [0118.454] IsAppThemed () returned 0x1 [0118.454] GetThemeAppProperties () returned 0x3 [0118.454] GetThemeAppProperties () returned 0x3 [0118.454] GetCurrentThreadId () returned 0x135c [0118.454] GetCurrentThreadId () returned 0x135c [0118.454] IsAppThemed () returned 0x1 [0118.454] GetThemeAppProperties () returned 0x3 [0118.454] GetThemeAppProperties () returned 0x3 [0118.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.455] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.455] IsAppThemed () returned 0x1 [0118.455] GetThemeAppProperties () returned 0x3 [0118.455] GetThemeAppProperties () returned 0x3 [0118.455] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.456] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.543] GetDC (hWnd=0x0) returned 0xc0100ae [0118.543] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19ebd0) returned 0x0 [0118.544] GdipGetFontHeight (font=0x48eefc0, graphics=0x5c12810, height=0x19ebc8) returned 0x0 [0118.544] GdipDeleteGraphics (graphics=0x5c12810) returned 0x0 [0118.544] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0118.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.545] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.545] IsAppThemed () returned 0x1 [0118.545] GetThemeAppProperties () returned 0x3 [0118.545] GetThemeAppProperties () returned 0x3 [0118.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.545] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.546] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.546] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.546] IsAppThemed () returned 0x1 [0118.546] GetThemeAppProperties () returned 0x3 [0118.546] GetThemeAppProperties () returned 0x3 [0118.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.547] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.551] UpdateWindow (hWnd=0x0) returned 0 [0118.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.554] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.554] IsAppThemed () returned 0x1 [0118.554] GetThemeAppProperties () returned 0x3 [0118.554] GetThemeAppProperties () returned 0x3 [0118.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.554] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.557] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.557] IsAppThemed () returned 0x1 [0118.558] GetThemeAppProperties () returned 0x3 [0118.558] GetThemeAppProperties () returned 0x3 [0118.558] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.558] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.559] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.559] IsAppThemed () returned 0x1 [0118.559] GetThemeAppProperties () returned 0x3 [0118.559] GetThemeAppProperties () returned 0x3 [0118.559] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.559] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.559] GetCurrentThreadId () returned 0x135c [0118.559] GetCurrentThreadId () returned 0x135c [0118.559] IsAppThemed () returned 0x1 [0118.560] GetThemeAppProperties () returned 0x3 [0118.560] GetThemeAppProperties () returned 0x3 [0118.560] GetCurrentThreadId () returned 0x135c [0118.560] GetCurrentThreadId () returned 0x135c [0118.560] IsAppThemed () returned 0x1 [0118.560] GetThemeAppProperties () returned 0x3 [0118.560] GetThemeAppProperties () returned 0x3 [0118.560] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.560] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.560] IsAppThemed () returned 0x1 [0118.560] GetThemeAppProperties () returned 0x3 [0118.560] GetThemeAppProperties () returned 0x3 [0118.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.561] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.561] GetDC (hWnd=0x0) returned 0xc0100ae [0118.561] GdipCreateFromHDC (hdc=0xc0100ae, graphics=0x19ebd0) returned 0x0 [0118.561] GdipGetFontHeight (font=0x48eefc0, graphics=0x5c12810, height=0x19ebc8) returned 0x0 [0118.561] GdipDeleteGraphics (graphics=0x5c12810) returned 0x0 [0118.561] ReleaseDC (hWnd=0x0, hDC=0xc0100ae) returned 1 [0118.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.562] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.562] IsAppThemed () returned 0x1 [0118.562] GetThemeAppProperties () returned 0x3 [0118.562] GetThemeAppProperties () returned 0x3 [0118.562] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.562] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.563] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.563] IsAppThemed () returned 0x1 [0118.563] GetThemeAppProperties () returned 0x3 [0118.563] GetThemeAppProperties () returned 0x3 [0118.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.563] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.563] GetCurrentThreadId () returned 0x135c [0118.563] GetCurrentThreadId () returned 0x135c [0118.563] IsAppThemed () returned 0x1 [0118.563] GetThemeAppProperties () returned 0x3 [0118.563] GetThemeAppProperties () returned 0x3 [0118.563] GetCurrentThreadId () returned 0x135c [0118.563] GetCurrentThreadId () returned 0x135c [0118.563] IsAppThemed () returned 0x1 [0118.563] GetThemeAppProperties () returned 0x3 [0118.563] GetThemeAppProperties () returned 0x3 [0118.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.564] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.564] IsAppThemed () returned 0x1 [0118.564] GetThemeAppProperties () returned 0x3 [0118.564] GetThemeAppProperties () returned 0x3 [0118.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.564] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec54) returned 1 [0118.564] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.564] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.564] IsAppThemed () returned 0x1 [0118.564] GetThemeAppProperties () returned 0x3 [0118.564] GetThemeAppProperties () returned 0x3 [0118.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.565] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.565] IsAppThemed () returned 0x1 [0118.565] GetThemeAppProperties () returned 0x3 [0118.565] GetThemeAppProperties () returned 0x3 [0118.565] SelectObject (hdc=0x230106af, h=0x1f0a096d) returned 0x630a095a [0118.565] DrawTextExW (in: hdc=0x230106af, lpchText="j^", cchText=2, lprc=0x19eb18, format=0x420, lpdtp=0x2360eb4 | out: lpchText="j^", lprc=0x19eb18) returned 13 [0118.565] GdipGetFamilyName (in: family=0x5b751f8, name=0x19ea54, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0118.565] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0118.565] CoTaskMemAlloc (cb=0x5c) returned 0x80f328 [0118.565] CreateFontIndirectW (lplf=0x80f328) returned 0x70a0868 [0118.566] CoTaskMemFree (pv=0x80f328) [0118.566] GetObjectW (in: h=0x70a0868, c=92, pv=0x19ea18 | out: pv=0x19ea18) returned 92 [0118.566] GetTextExtentPoint32W (in: hdc=0x230106af, lpString="0", c=1, psizl=0x2361078 | out: psizl=0x2361078) returned 1 [0118.566] DeleteObject (ho=0x70a0868) returned 1 [0118.566] GetSystemMetrics (nIndex=45) returned 2 [0118.566] GetSystemMetrics (nIndex=46) returned 2 [0118.566] GetSystemMetrics (nIndex=7) returned 3 [0118.566] GetSystemMetrics (nIndex=8) returned 3 [0118.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.566] AdjustWindowRectEx (in: lpRect=0x19ec38, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec38) returned 1 [0118.566] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.567] AdjustWindowRectEx (in: lpRect=0x19eb0c, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb0c) returned 1 [0118.567] GdipGetFamilyName (in: family=0x5b751f8, name=0x19ead8, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0118.567] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0118.567] CoTaskMemAlloc (cb=0x5c) returned 0x80f328 [0118.567] CreateFontIndirectW (lplf=0x80f328) returned 0x80a0868 [0118.568] CoTaskMemFree (pv=0x80f328) [0118.568] GetObjectW (in: h=0x80a0868, c=92, pv=0x19ea9c | out: pv=0x19ea9c) returned 92 [0118.568] GetTextExtentPoint32W (in: hdc=0x230106af, lpString="0", c=1, psizl=0x236132c | out: psizl=0x236132c) returned 1 [0118.568] DeleteObject (ho=0x80a0868) returned 1 [0118.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.569] AdjustWindowRectEx (in: lpRect=0x19ebc0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ebc0) returned 1 [0118.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.569] AdjustWindowRectEx (in: lpRect=0x19ead4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ead4) returned 1 [0118.569] GdipGetFamilyName (in: family=0x5b751f8, name=0x19eaa0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0118.569] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0118.569] CoTaskMemAlloc (cb=0x5c) returned 0x80ee48 [0118.569] CreateFontIndirectW (lplf=0x80ee48) returned 0x90a0868 [0118.569] CoTaskMemFree (pv=0x80ee48) [0118.569] GetObjectW (in: h=0x90a0868, c=92, pv=0x19ea64 | out: pv=0x19ea64) returned 92 [0118.569] GetTextExtentPoint32W (in: hdc=0x230106af, lpString="0", c=1, psizl=0x236154c | out: psizl=0x236154c) returned 1 [0118.569] DeleteObject (ho=0x90a0868) returned 1 [0118.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.570] AdjustWindowRectEx (in: lpRect=0x19ec08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec08) returned 1 [0118.570] IsAppThemed () returned 0x1 [0118.570] GetThemeAppProperties () returned 0x3 [0118.570] GetThemeAppProperties () returned 0x3 [0118.570] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.570] AdjustWindowRectEx (in: lpRect=0x19ead4, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ead4) returned 1 [0118.570] GdipGetFamilyName (in: family=0x5b751f8, name=0x19eaa0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0118.570] GetDeviceCaps (hdc=0x230106af, index=90) returned 96 [0118.570] CoTaskMemAlloc (cb=0x5c) returned 0x80ef80 [0118.570] CreateFontIndirectW (lplf=0x80ef80) returned 0xa0a0868 [0118.570] CoTaskMemFree (pv=0x80ef80) [0118.570] GetObjectW (in: h=0xa0a0868, c=92, pv=0x19ea64 | out: pv=0x19ea64) returned 92 [0118.571] GetTextExtentPoint32W (in: hdc=0x230106af, lpString="0", c=1, psizl=0x2361844 | out: psizl=0x2361844) returned 1 [0118.571] DeleteObject (ho=0xa0a0868) returned 1 [0118.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.573] AdjustWindowRectEx (in: lpRect=0x19eac8, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eac8) returned 1 [0118.573] DrawTextExW (in: hdc=0x230106af, lpchText="https://github.com/high6/LoLNotes", cchText=33, lprc=0x19eab0, format=0x2400, lpdtp=0x2361dd0 | out: lpchText="https://github.com/high6/LoLNotes", lprc=0x19eab0) returned 13 [0118.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.574] AdjustWindowRectEx (in: lpRect=0x19eb7c, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb7c) returned 1 [0118.577] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.577] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ec54) returned 1 [0118.577] IsAppThemed () returned 0x1 [0118.577] GetThemeAppProperties () returned 0x3 [0118.577] GetThemeAppProperties () returned 0x3 [0118.577] GetCurrentThreadId () returned 0x135c [0118.577] GetCurrentThreadId () returned 0x135c [0118.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.578] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0118.578] IsAppThemed () returned 0x1 [0118.578] GetThemeAppProperties () returned 0x3 [0118.578] GetThemeAppProperties () returned 0x3 [0118.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.578] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0118.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.579] AdjustWindowRectEx (in: lpRect=0x19ec38, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec38) returned 1 [0118.580] GetCurrentThreadId () returned 0x135c [0118.580] GetCurrentThreadId () returned 0x135c [0118.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.581] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0118.581] IsAppThemed () returned 0x1 [0118.581] GetThemeAppProperties () returned 0x3 [0118.581] GetThemeAppProperties () returned 0x3 [0118.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.581] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0118.625] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.625] AdjustWindowRectEx (in: lpRect=0x19ec28, dwStyle=0x56210044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec28) returned 1 [0118.628] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.628] AdjustWindowRectEx (in: lpRect=0x19ec28, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec28) returned 1 [0118.629] GetCurrentThreadId () returned 0x135c [0118.629] GetCurrentThreadId () returned 0x135c [0118.629] IsAppThemed () returned 0x1 [0118.629] GetThemeAppProperties () returned 0x3 [0118.629] GetThemeAppProperties () returned 0x3 [0118.629] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.629] AdjustWindowRectEx (in: lpRect=0x19ec14, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec14) returned 1 [0118.629] IsAppThemed () returned 0x1 [0118.629] GetThemeAppProperties () returned 0x3 [0118.629] GetThemeAppProperties () returned 0x3 [0118.630] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.630] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0118.635] IsAppThemed () returned 0x1 [0118.635] GetThemeAppProperties () returned 0x3 [0118.635] GetThemeAppProperties () returned 0x3 [0118.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.638] AdjustWindowRectEx (in: lpRect=0x19ec08, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec08) returned 1 [0118.638] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.638] AdjustWindowRectEx (in: lpRect=0x19eb48, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb48) returned 1 [0118.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.639] AdjustWindowRectEx (in: lpRect=0x19eb38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb38) returned 1 [0118.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.639] AdjustWindowRectEx (in: lpRect=0x19eb38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb38) returned 1 [0118.639] IsAppThemed () returned 0x1 [0118.639] GetThemeAppProperties () returned 0x3 [0118.639] GetThemeAppProperties () returned 0x3 [0118.640] GetCurrentThreadId () returned 0x135c [0118.640] GetCurrentThreadId () returned 0x135c [0118.643] GetCurrentThreadId () returned 0x135c [0118.643] GetCurrentThreadId () returned 0x135c [0118.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.644] AdjustWindowRectEx (in: lpRect=0x19ec20, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec20) returned 1 [0118.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.647] AdjustWindowRectEx (in: lpRect=0x19ec1c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec1c) returned 1 [0118.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.647] AdjustWindowRectEx (in: lpRect=0x19eb5c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb5c) returned 1 [0118.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.647] AdjustWindowRectEx (in: lpRect=0x19eb4c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb4c) returned 1 [0118.647] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.647] AdjustWindowRectEx (in: lpRect=0x19eb4c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb4c) returned 1 [0118.647] IsAppThemed () returned 0x1 [0118.647] GetThemeAppProperties () returned 0x3 [0118.647] GetThemeAppProperties () returned 0x3 [0118.703] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.703] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x5601414c, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec54) returned 1 [0118.712] MonitorFromRect (lprc=0x19ec00, dwFlags=0x2) returned 0x10001 [0118.712] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eaf0 | out: lpmi=0x19eaf0) returned 1 [0118.712] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xb010868 [0118.712] GetDeviceCaps (hdc=0xb010868, index=12) returned 32 [0118.712] GetDeviceCaps (hdc=0xb010868, index=14) returned 1 [0118.712] DeleteDC (hdc=0xb010868) returned 1 [0118.712] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb34 | out: lpmi=0x19eb34) returned 1 [0118.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.713] AdjustWindowRectEx (in: lpRect=0x19ebd8, dwStyle=0x82000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ebd8) returned 1 [0118.713] IsAppThemed () returned 0x1 [0118.713] GetThemeAppProperties () returned 0x3 [0118.713] GetThemeAppProperties () returned 0x3 [0118.713] IsAppThemed () returned 0x1 [0118.713] GetThemeAppProperties () returned 0x3 [0118.713] GetThemeAppProperties () returned 0x3 [0118.713] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0118.714] AdjustWindowRectEx (in: lpRect=0x19ec54, dwStyle=0x56010007, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ec54) returned 1 [0118.962] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x19ec6c | out: pfEnabled=0x19ec6c) returned 0x0 [0123.132] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xec00, lpName=0x0) returned 0x45c [0123.132] memcpy (in: _Dst=0x7db0000, _Src=0x2374d10, _Size=0xec00 | out: _Dst=0x7db0000) returned 0x7db0000 [0123.133] CloseHandle (hObject=0x45c) returned 1 [0123.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.258] AdjustWindowRectEx (in: lpRect=0x19ec88, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19ec88) returned 1 [0123.259] GetSystemMetrics (nIndex=59) returned 1456 [0123.259] GetSystemMetrics (nIndex=60) returned 916 [0123.259] GetSystemMetrics (nIndex=34) returned 136 [0123.259] GetSystemMetrics (nIndex=35) returned 39 [0123.259] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.260] AdjustWindowRectEx (in: lpRect=0x19eb88, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19eb88) returned 1 [0123.261] GetCurrentThreadId () returned 0x135c [0123.261] GetCurrentThreadId () returned 0x135c [0123.262] MonitorFromRect (lprc=0x19ec04, dwFlags=0x2) returned 0x10001 [0123.262] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eaf4 | out: lpmi=0x19eaf4) returned 1 [0123.262] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xd010868 [0123.263] GetDeviceCaps (hdc=0xd010868, index=12) returned 32 [0123.263] GetDeviceCaps (hdc=0xd010868, index=14) returned 1 [0123.263] DeleteDC (hdc=0xd010868) returned 1 [0123.263] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19eb38 | out: lpmi=0x19eb38) returned 1 [0123.326] CreateCompatibleDC (hdc=0x0) returned 0xe010868 [0123.326] SelectObject (hdc=0xe010868, h=0x320a0964) returned 0x18a0048 [0123.326] GetTextMetricsW (in: hdc=0xe010868, lptm=0x19ebe8 | out: lptm=0x19ebe8) returned 1 [0123.326] GetTextExtentPoint32W (in: hdc=0xe010868, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2385960 | out: psizl=0x2385960) returned 1 [0123.326] SelectObject (hdc=0xe010868, h=0x18a0048) returned 0x320a0964 [0123.326] DeleteDC (hdc=0xe010868) returned 1 [0123.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.327] AdjustWindowRectEx (in: lpRect=0x19ebf8, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ebf8) returned 1 [0123.327] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.328] AdjustWindowRectEx (in: lpRect=0x19ea5c, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea5c) returned 1 [0123.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.328] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.328] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.329] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0123.329] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.329] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e994) returned 1 [0123.329] GetWindowTextLengthW (hWnd=0x2027c) returned 0 [0123.329] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.330] GetSystemMetrics (nIndex=42) returned 0 [0123.330] GetWindowTextW (in: hWnd=0x2027c, lpString=0x19ea74, nMaxCount=1 | out: lpString="") returned 0 [0123.330] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xd, wParam=0x1, lParam=0x19ea74) returned 0x0 [0123.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.330] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.331] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.331] AdjustWindowRectEx (in: lpRect=0x19eb00, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb00) returned 1 [0123.331] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.331] AdjustWindowRectEx (in: lpRect=0x19e964, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e964) returned 1 [0123.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.332] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x4601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.332] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.332] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x4601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.333] AdjustWindowRectEx (in: lpRect=0x19eabc, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19eabc) returned 1 [0123.333] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.333] AdjustWindowRectEx (in: lpRect=0x19e920, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e920) returned 1 [0123.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.334] AdjustWindowRectEx (in: lpRect=0x19ea74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea74) returned 1 [0123.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.334] AdjustWindowRectEx (in: lpRect=0x19e8d8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8d8) returned 1 [0123.334] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.334] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.335] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.335] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.335] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.336] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.336] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.336] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.337] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.337] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.337] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.338] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.338] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.338] AdjustWindowRectEx (in: lpRect=0x19ea74, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea74) returned 1 [0123.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.339] AdjustWindowRectEx (in: lpRect=0x19e8d8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8d8) returned 1 [0123.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.339] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.340] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.340] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.340] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.340] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.341] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.341] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.341] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.341] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.342] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.342] AdjustWindowRectEx (in: lpRect=0x19e9e8, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9e8) returned 1 [0123.342] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.343] AdjustWindowRectEx (in: lpRect=0x19e84c, dwStyle=0x46010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e84c) returned 1 [0123.343] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.343] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.343] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.343] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.344] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.344] AdjustWindowRectEx (in: lpRect=0x19eb20, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb20) returned 1 [0123.344] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.344] AdjustWindowRectEx (in: lpRect=0x19e984, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e984) returned 1 [0123.344] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.344] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.345] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.345] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.345] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.346] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5600000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.346] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.346] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.347] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0123.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.347] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e994) returned 1 [0123.347] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.347] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0123.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.348] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e994) returned 1 [0123.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.348] AdjustWindowRectEx (in: lpRect=0x19eb20, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb20) returned 1 [0123.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.348] AdjustWindowRectEx (in: lpRect=0x19e984, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e984) returned 1 [0123.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.349] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.349] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.349] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.350] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.350] AdjustWindowRectEx (in: lpRect=0x19eb20, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb20) returned 1 [0123.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.350] AdjustWindowRectEx (in: lpRect=0x19e984, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e984) returned 1 [0123.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.351] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.351] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.351] AdjustWindowRectEx (in: lpRect=0x19eacc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eacc) returned 1 [0123.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.352] AdjustWindowRectEx (in: lpRect=0x19e930, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e930) returned 1 [0123.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.352] AdjustWindowRectEx (in: lpRect=0x19eb20, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19eb20) returned 1 [0123.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.352] AdjustWindowRectEx (in: lpRect=0x19e984, dwStyle=0x56210243, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e984) returned 1 [0123.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.353] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0123.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.355] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e994) returned 1 [0123.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.355] AdjustWindowRectEx (in: lpRect=0x19e7d0, dwStyle=0x5601000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e7d0) returned 1 [0123.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.356] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0123.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.356] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19e994) returned 1 [0123.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.356] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.356] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.357] AdjustWindowRectEx (in: lpRect=0x19eb18, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19eb18) returned 1 [0123.357] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.357] AdjustWindowRectEx (in: lpRect=0x19e958, dwStyle=0x562100c1, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e958) returned 1 [0123.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.358] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.358] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.358] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19eb30) returned 1 [0123.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.359] AdjustWindowRectEx (in: lpRect=0x19e994, dwStyle=0x56210844, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e994) returned 1 [0123.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.359] AdjustWindowRectEx (in: lpRect=0x19eb64, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19eb64) returned 1 [0123.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.360] AdjustWindowRectEx (in: lpRect=0x19e9c8, dwStyle=0x46000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e9c8) returned 1 [0123.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.360] AdjustWindowRectEx (in: lpRect=0x19ea64, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea64) returned 1 [0123.360] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.360] AdjustWindowRectEx (in: lpRect=0x19e8c8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e8c8) returned 1 [0123.361] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.361] AdjustWindowRectEx (in: lpRect=0x19ea38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea38) returned 1 [0123.361] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.361] AdjustWindowRectEx (in: lpRect=0x19e89c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e89c) returned 1 [0123.361] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.361] AdjustWindowRectEx (in: lpRect=0x19ea04, dwStyle=0x5601414d, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ea04) returned 1 [0123.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.362] AdjustWindowRectEx (in: lpRect=0x19e868, dwStyle=0x5601414d, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e868) returned 1 [0123.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.362] AdjustWindowRectEx (in: lpRect=0x19ea38, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ea38) returned 1 [0123.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.363] AdjustWindowRectEx (in: lpRect=0x19e89c, dwStyle=0x56000000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19e89c) returned 1 [0123.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.363] AdjustWindowRectEx (in: lpRect=0x19ea04, dwStyle=0x56010007, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ea04) returned 1 [0123.363] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.363] AdjustWindowRectEx (in: lpRect=0x19e868, dwStyle=0x56010007, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19e868) returned 1 [0123.363] GetWindowTextLengthW (hWnd=0x2027c) returned 0 [0123.363] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0123.363] GetSystemMetrics (nIndex=42) returned 0 [0123.363] GetWindowTextW (in: hWnd=0x2027c, lpString=0x19eac4, nMaxCount=1 | out: lpString="") returned 0 [0123.363] CallWindowProcW (lpPrevWndFunc=0x73e807e0, hWnd=0x2027c, Msg=0xd, wParam=0x1, lParam=0x19eac4) returned 0x0 [0123.420] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea60) returned 0x0 [0123.422] IsAppThemed () returned 0x1 [0123.423] GetThemeAppProperties () returned 0x3 [0123.423] GetThemeAppProperties () returned 0x3 [0123.423] IsAppThemed () returned 0x1 [0123.423] GetThemeAppProperties () returned 0x3 [0123.423] GetThemeAppProperties () returned 0x3 [0123.423] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea24) returned 0x0 [0123.427] IsAppThemed () returned 0x1 [0123.427] GetThemeAppProperties () returned 0x3 [0123.427] GetThemeAppProperties () returned 0x3 [0123.427] IsAppThemed () returned 0x1 [0123.427] GetThemeAppProperties () returned 0x3 [0123.427] GetThemeAppProperties () returned 0x3 [0123.428] IsThemePartDefined () returned 0x1 [0123.429] GdipCreateRegion (region=0x19e938) returned 0x0 [0123.429] GdipGetClip (graphics=0x5c12bd0, region=0x5bcfc10) returned 0x0 [0123.429] GdipCreateMatrix (matrix=0x19e938) returned 0x0 [0123.430] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12eb0) returned 0x0 [0123.430] GdipIsMatrixIdentity (matrix=0x5c12eb0, result=0x19e950) returned 0x0 [0123.430] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x849e28 [0123.431] GdipGetMatrixElements (matrix=0x5c12eb0, matrixOut=0x849e28) returned 0x0 [0123.434] LocalFree (hMem=0x849e28) returned 0x0 [0123.434] GdipDeleteMatrix (matrix=0x5c12eb0) returned 0x0 [0123.434] GdipIsInfiniteRegion (region=0x5bcfc10, graphics=0x5c12bd0, result=0x19e978) returned 0x0 [0123.435] GdipDeleteRegion (region=0x5bcfc10) returned 0x0 [0123.435] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e980) returned 0x0 [0123.435] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.435] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.435] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.435] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.435] SaveDC (hdc=0x230106af) returned 2 [0123.436] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x2389290 | out: lppt=0x2389290) returned 1 [0123.437] IsAppThemed () returned 0x1 [0123.437] GetThemeAppProperties () returned 0x3 [0123.437] GetThemeAppProperties () returned 0x3 [0123.438] GetThemePartSize () returned 0x0 [0123.438] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.465] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.465] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.466] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.466] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e780 | out: pv=0x19e780) returned 92 [0123.467] DrawTextExW (in: hdc=0x230106af, lpchText="Dev Mode", cchText=8, lprc=0x19e8c0, format=0x2404, lpdtp=0x2389384 | out: lpchText="Dev Mode", lprc=0x19e8c0) returned 13 [0123.468] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.468] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea60) returned 0x0 [0123.468] IsAppThemed () returned 0x1 [0123.468] GetThemeAppProperties () returned 0x3 [0123.468] GetThemeAppProperties () returned 0x3 [0123.468] IsAppThemed () returned 0x1 [0123.468] GetThemeAppProperties () returned 0x3 [0123.468] GetThemeAppProperties () returned 0x3 [0123.468] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea24) returned 0x0 [0123.469] IsAppThemed () returned 0x1 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] IsAppThemed () returned 0x1 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] GetThemeAppProperties () returned 0x3 [0123.469] IsThemePartDefined () returned 0x1 [0123.469] GdipCreateRegion (region=0x19e938) returned 0x0 [0123.469] GdipGetClip (graphics=0x5c12bd0, region=0x5bcf940) returned 0x0 [0123.469] GdipCreateMatrix (matrix=0x19e938) returned 0x0 [0123.469] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12ee0) returned 0x0 [0123.469] GdipIsMatrixIdentity (matrix=0x5c12ee0, result=0x19e950) returned 0x0 [0123.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x849e28 [0123.469] GdipGetMatrixElements (matrix=0x5c12ee0, matrixOut=0x849e28) returned 0x0 [0123.470] LocalFree (hMem=0x849e28) returned 0x0 [0123.470] GdipDeleteMatrix (matrix=0x5c12ee0) returned 0x0 [0123.470] GdipIsInfiniteRegion (region=0x5bcf940, graphics=0x5c12bd0, result=0x19e978) returned 0x0 [0123.470] GdipDeleteRegion (region=0x5bcf940) returned 0x0 [0123.470] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e980) returned 0x0 [0123.470] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.470] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.471] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.471] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.471] SaveDC (hdc=0x230106af) returned 2 [0123.471] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x23899a4 | out: lppt=0x23899a4) returned 1 [0123.471] IsAppThemed () returned 0x1 [0123.471] GetThemeAppProperties () returned 0x3 [0123.471] GetThemeAppProperties () returned 0x3 [0123.471] GetThemePartSize () returned 0x0 [0123.471] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.471] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.471] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.471] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.472] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e780 | out: pv=0x19e780) returned 92 [0123.472] DrawTextExW (in: hdc=0x230106af, lpchText="Delete LeaveBuster", cchText=18, lprc=0x19e8c0, format=0x2404, lpdtp=0x2389a80 | out: lpchText="Delete LeaveBuster", lprc=0x19e8c0) returned 13 [0123.472] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.568] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19eaa8) returned 0x0 [0123.568] IsAppThemed () returned 0x1 [0123.568] GetThemeAppProperties () returned 0x3 [0123.568] GetThemeAppProperties () returned 0x3 [0123.568] IsAppThemed () returned 0x1 [0123.568] GetThemeAppProperties () returned 0x3 [0123.569] GetThemeAppProperties () returned 0x3 [0123.569] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea6c) returned 0x0 [0123.570] IsAppThemed () returned 0x1 [0123.570] GetThemeAppProperties () returned 0x3 [0123.570] GetThemeAppProperties () returned 0x3 [0123.570] IsAppThemed () returned 0x1 [0123.571] GetThemeAppProperties () returned 0x3 [0123.571] GetThemeAppProperties () returned 0x3 [0123.571] IsThemePartDefined () returned 0x1 [0123.571] GdipCreateRegion (region=0x19e980) returned 0x0 [0123.571] GdipGetClip (graphics=0x5c12bd0, region=0x5bcf8b0) returned 0x0 [0123.571] GdipCreateMatrix (matrix=0x19e980) returned 0x0 [0123.571] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12eb0) returned 0x0 [0123.571] GdipIsMatrixIdentity (matrix=0x5c12eb0, result=0x19e998) returned 0x0 [0123.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x849e28 [0123.571] GdipGetMatrixElements (matrix=0x5c12eb0, matrixOut=0x849e28) returned 0x0 [0123.571] LocalFree (hMem=0x849e28) returned 0x0 [0123.572] GdipDeleteMatrix (matrix=0x5c12eb0) returned 0x0 [0123.572] GdipIsInfiniteRegion (region=0x5bcf8b0, graphics=0x5c12bd0, result=0x19e9c0) returned 0x0 [0123.572] GdipDeleteRegion (region=0x5bcf8b0) returned 0x0 [0123.572] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e9c8) returned 0x0 [0123.572] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.572] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.572] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.572] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.572] SaveDC (hdc=0x230106af) returned 2 [0123.572] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x238a17c | out: lppt=0x238a17c) returned 1 [0123.572] IsAppThemed () returned 0x1 [0123.573] GetThemeAppProperties () returned 0x3 [0123.573] GetThemeAppProperties () returned 0x3 [0123.573] GetThemePartSize () returned 0x0 [0123.573] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.573] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.573] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.573] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.573] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e7c8 | out: pv=0x19e7c8) returned 92 [0123.573] DrawTextExW (in: hdc=0x230106af, lpchText="ProcessClass", cchText=12, lprc=0x19e908, format=0x2404, lpdtp=0x238a258 | out: lpchText="ProcessClass", lprc=0x19e908) returned 13 [0123.573] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.574] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19eaa8) returned 0x0 [0123.574] IsAppThemed () returned 0x1 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] IsAppThemed () returned 0x1 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea6c) returned 0x0 [0123.574] IsAppThemed () returned 0x1 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] GetThemeAppProperties () returned 0x3 [0123.574] IsAppThemed () returned 0x1 [0123.575] GetThemeAppProperties () returned 0x3 [0123.575] GetThemeAppProperties () returned 0x3 [0123.575] IsThemePartDefined () returned 0x1 [0123.575] GdipCreateRegion (region=0x19e980) returned 0x0 [0123.575] GdipGetClip (graphics=0x5c12bd0, region=0x5bcfca0) returned 0x0 [0123.575] GdipCreateMatrix (matrix=0x19e980) returned 0x0 [0123.575] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12ee0) returned 0x0 [0123.575] GdipIsMatrixIdentity (matrix=0x5c12ee0, result=0x19e998) returned 0x0 [0123.575] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x84a020 [0123.575] GdipGetMatrixElements (matrix=0x5c12ee0, matrixOut=0x84a020) returned 0x0 [0123.575] LocalFree (hMem=0x84a020) returned 0x0 [0123.575] GdipDeleteMatrix (matrix=0x5c12ee0) returned 0x0 [0123.575] GdipIsInfiniteRegion (region=0x5bcfca0, graphics=0x5c12bd0, result=0x19e9c0) returned 0x0 [0123.576] GdipDeleteRegion (region=0x5bcfca0) returned 0x0 [0123.576] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e9c8) returned 0x0 [0123.576] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.576] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.576] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.576] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.576] SaveDC (hdc=0x230106af) returned 2 [0123.576] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x238a878 | out: lppt=0x238a878) returned 1 [0123.576] IsAppThemed () returned 0x1 [0123.576] GetThemeAppProperties () returned 0x3 [0123.576] GetThemeAppProperties () returned 0x3 [0123.576] GetThemePartSize () returned 0x0 [0123.576] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.576] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.576] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.576] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.577] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e7c8 | out: pv=0x19e7c8) returned 92 [0123.577] DrawTextExW (in: hdc=0x230106af, lpchText="Toolhelp32", cchText=10, lprc=0x19e908, format=0x2404, lpdtp=0x238a954 | out: lpchText="Toolhelp32", lprc=0x19e908) returned 13 [0123.577] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.577] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19eaa8) returned 0x0 [0123.577] IsAppThemed () returned 0x1 [0123.577] GetThemeAppProperties () returned 0x3 [0123.577] GetThemeAppProperties () returned 0x3 [0123.577] IsAppThemed () returned 0x1 [0123.577] GetThemeAppProperties () returned 0x3 [0123.578] GetThemeAppProperties () returned 0x3 [0123.578] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea6c) returned 0x0 [0123.578] IsAppThemed () returned 0x1 [0123.578] GetThemeAppProperties () returned 0x3 [0123.578] GetThemeAppProperties () returned 0x3 [0123.578] IsAppThemed () returned 0x1 [0123.578] GetThemeAppProperties () returned 0x3 [0123.578] GetThemeAppProperties () returned 0x3 [0123.578] IsThemePartDefined () returned 0x1 [0123.578] GdipCreateRegion (region=0x19e980) returned 0x0 [0123.578] GdipGetClip (graphics=0x5c12bd0, region=0x5bcf940) returned 0x0 [0123.578] GdipCreateMatrix (matrix=0x19e980) returned 0x0 [0123.578] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12eb0) returned 0x0 [0123.578] GdipIsMatrixIdentity (matrix=0x5c12eb0, result=0x19e998) returned 0x0 [0123.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x84a1e0 [0123.578] GdipGetMatrixElements (matrix=0x5c12eb0, matrixOut=0x84a1e0) returned 0x0 [0123.579] LocalFree (hMem=0x84a1e0) returned 0x0 [0123.579] GdipDeleteMatrix (matrix=0x5c12eb0) returned 0x0 [0123.579] GdipIsInfiniteRegion (region=0x5bcf940, graphics=0x5c12bd0, result=0x19e9c0) returned 0x0 [0123.579] GdipDeleteRegion (region=0x5bcf940) returned 0x0 [0123.579] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e9c8) returned 0x0 [0123.579] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.579] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.579] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.579] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.579] SaveDC (hdc=0x230106af) returned 2 [0123.579] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x238af74 | out: lppt=0x238af74) returned 1 [0123.580] IsAppThemed () returned 0x1 [0123.580] GetThemeAppProperties () returned 0x3 [0123.580] GetThemeAppProperties () returned 0x3 [0123.580] GetThemePartSize () returned 0x0 [0123.580] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.580] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.580] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.580] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.580] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e7c8 | out: pv=0x19e7c8) returned 92 [0123.580] DrawTextExW (in: hdc=0x230106af, lpchText="Mirror", cchText=6, lprc=0x19e908, format=0x2404, lpdtp=0x238b050 | out: lpchText="Mirror", lprc=0x19e908) returned 13 [0123.580] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.580] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea70) returned 0x0 [0123.581] IsAppThemed () returned 0x1 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] IsAppThemed () returned 0x1 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea34) returned 0x0 [0123.581] IsAppThemed () returned 0x1 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] IsAppThemed () returned 0x1 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] GetThemeAppProperties () returned 0x3 [0123.581] IsThemePartDefined () returned 0x1 [0123.582] GdipCreateRegion (region=0x19e948) returned 0x0 [0123.582] GdipGetClip (graphics=0x5c12bd0, region=0x5bcfee0) returned 0x0 [0123.582] GdipCreateMatrix (matrix=0x19e948) returned 0x0 [0123.582] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12ee0) returned 0x0 [0123.582] GdipIsMatrixIdentity (matrix=0x5c12ee0, result=0x19e960) returned 0x0 [0123.582] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x849e28 [0123.582] GdipGetMatrixElements (matrix=0x5c12ee0, matrixOut=0x849e28) returned 0x0 [0123.583] LocalFree (hMem=0x849e28) returned 0x0 [0123.583] GdipDeleteMatrix (matrix=0x5c12ee0) returned 0x0 [0123.583] GdipIsInfiniteRegion (region=0x5bcfee0, graphics=0x5c12bd0, result=0x19e988) returned 0x0 [0123.583] GdipDeleteRegion (region=0x5bcfee0) returned 0x0 [0123.583] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e990) returned 0x0 [0123.583] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.583] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.583] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.583] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.583] SaveDC (hdc=0x230106af) returned 2 [0123.583] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x238b6f0 | out: lppt=0x238b6f0) returned 1 [0123.583] IsAppThemed () returned 0x1 [0123.583] GetThemeAppProperties () returned 0x3 [0123.583] GetThemeAppProperties () returned 0x3 [0123.583] GetThemePartSize () returned 0x0 [0123.583] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.583] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.584] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.584] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.584] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e790 | out: pv=0x19e790) returned 92 [0123.584] DrawTextExW (in: hdc=0x230106af, lpchText="Trace", cchText=5, lprc=0x19e8d0, format=0x2404, lpdtp=0x238b7cc | out: lpchText="Trace", lprc=0x19e8d0) returned 13 [0123.584] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.584] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea70) returned 0x0 [0123.585] IsAppThemed () returned 0x1 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] IsAppThemed () returned 0x1 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] GdipCreateFromHDC (hdc=0x230106af, graphics=0x19ea34) returned 0x0 [0123.585] IsAppThemed () returned 0x1 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] IsAppThemed () returned 0x1 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] GetThemeAppProperties () returned 0x3 [0123.585] IsThemePartDefined () returned 0x1 [0123.585] GdipCreateRegion (region=0x19e948) returned 0x0 [0123.585] GdipGetClip (graphics=0x5c12bd0, region=0x5bcf700) returned 0x0 [0123.585] GdipCreateMatrix (matrix=0x19e948) returned 0x0 [0123.586] GdipGetWorldTransform (graphics=0x5c12bd0, matrix=0x5c12eb0) returned 0x0 [0123.586] GdipIsMatrixIdentity (matrix=0x5c12eb0, result=0x19e960) returned 0x0 [0123.586] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0x84a020 [0123.586] GdipGetMatrixElements (matrix=0x5c12eb0, matrixOut=0x84a020) returned 0x0 [0123.586] LocalFree (hMem=0x84a020) returned 0x0 [0123.586] GdipDeleteMatrix (matrix=0x5c12eb0) returned 0x0 [0123.586] GdipIsInfiniteRegion (region=0x5bcf700, graphics=0x5c12bd0, result=0x19e988) returned 0x0 [0123.586] GdipDeleteRegion (region=0x5bcf700) returned 0x0 [0123.586] GdipGetDC (graphics=0x5c12bd0, hdc=0x19e990) returned 0x0 [0123.586] GetCurrentObject (hdc=0x230106af, type=0x1) returned 0x1b00017 [0123.587] GetCurrentObject (hdc=0x230106af, type=0x2) returned 0x1900010 [0123.587] GetCurrentObject (hdc=0x230106af, type=0x7) returned 0x185000f [0123.587] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.587] SaveDC (hdc=0x230106af) returned 2 [0123.587] OffsetViewportOrgEx (in: hdc=0x230106af, x=0, y=0, lppt=0x238bdec | out: lppt=0x238bdec) returned 1 [0123.597] IsAppThemed () returned 0x1 [0123.597] GetThemeAppProperties () returned 0x3 [0123.597] GetThemeAppProperties () returned 0x3 [0123.597] GetThemePartSize () returned 0x0 [0123.597] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0123.597] GdipReleaseDC (graphics=0x5c12bd0, hdc=0x230106af) returned 0x0 [0123.597] GdipDeleteGraphics (graphics=0x5c12bd0) returned 0x0 [0123.598] GetCurrentObject (hdc=0x230106af, type=0x6) returned 0x1f0a096d [0123.598] GetObjectW (in: h=0x1f0a096d, c=92, pv=0x19e790 | out: pv=0x19e790) returned 92 [0123.598] DrawTextExW (in: hdc=0x230106af, lpchText="Debug", cchText=5, lprc=0x19e8d0, format=0x2404, lpdtp=0x238bec8 | out: lpchText="Debug", lprc=0x19e8d0) returned 13 [0123.598] GdipDeleteGraphics (graphics=0x5c12880) returned 0x0 [0123.604] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.604] AdjustWindowRectEx (in: lpRect=0x19e940, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e940) returned 1 [0123.604] AdjustWindowRectEx (in: lpRect=0x19eb60, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19eb60) returned 1 [0123.604] MonitorFromRect (lprc=0x19e8fc, dwFlags=0x2) returned 0x10001 [0123.604] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19e7ec | out: lpmi=0x19e7ec) returned 1 [0123.605] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x24010868 [0123.605] GetDeviceCaps (hdc=0x24010868, index=12) returned 32 [0123.605] GetDeviceCaps (hdc=0x24010868, index=14) returned 1 [0123.605] DeleteDC (hdc=0x24010868) returned 1 [0123.605] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19e830 | out: lpmi=0x19e830) returned 1 [0123.605] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x6ae90000 [0123.605] AdjustWindowRectEx (in: lpRect=0x19e8b8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e8b8) returned 1 [0123.605] AdjustWindowRectEx (in: lpRect=0x19e998, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x19e998) returned 1 [0123.606] GetSystemMetrics (nIndex=34) returned 136 [0123.606] GetSystemMetrics (nIndex=35) returned 39 [0123.606] MonitorFromRect (lprc=0x19e8fc, dwFlags=0x2) returned 0x10001 [0123.606] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19e7ec | out: lpmi=0x19e7ec) returned 1 [0123.606] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x25010868 [0123.606] GetDeviceCaps (hdc=0x25010868, index=12) returned 32 [0123.606] GetDeviceCaps (hdc=0x25010868, index=14) returned 1 [0123.606] DeleteDC (hdc=0x25010868) returned 1 [0123.606] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x19e830 | out: lpmi=0x19e830) returned 1 [0170.391] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x2e00, lpName=0x0) returned 0x46c [0170.392] memcpy (in: _Dst=0x5b0000, _Src=0x237c7d0, _Size=0x2e00 | out: _Dst=0x5b0000) returned 0x5b0000 [0170.392] CloseHandle (hObject=0x46c) returned 1 [0170.424] CoTaskMemAlloc (cb=0x20c) returned 0x8420e8 [0170.424] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x8420e8 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0170.424] CoTaskMemFree (pv=0x8420e8) [0170.425] GetLongPathNameW (in: lpszShortPath="C:\\Users\\RDHJ0C~1\\", lpszLongPath=0x19ddf8, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX\\") returned 0x16 [0170.427] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x19de0c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x29 [0170.499] GdipLoadImageFromStream (stream=0x47dfcf0, image=0x19e860) returned 0x0 [0170.514] GdipImageForceValidation (image=0x5bcb610) returned 0x0 [0170.526] GdipGetImageType (image=0x5bcb610, type=0x19e85c) returned 0x0 [0170.526] GdipGetImageRawFormat (image=0x5bcb610, format=0x19e7d0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0170.540] GdipGetImageWidth (image=0x5bcb610, width=0x19ede8) returned 0x0 [0170.541] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.542] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.542] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=0, color=0x19edd4) returned 0x0 [0170.543] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=1, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=2, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=3, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=4, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=5, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=6, color=0x19edd4) returned 0x0 [0170.544] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.544] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.544] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=7, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=8, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=9, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=10, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=11, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=12, color=0x19edd4) returned 0x0 [0170.545] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.545] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.545] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=13, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=14, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=15, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=16, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=17, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=18, color=0x19edd4) returned 0x0 [0170.546] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.546] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.546] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=19, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=20, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=21, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=22, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=23, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=24, color=0x19edd4) returned 0x0 [0170.547] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.547] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.547] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=25, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.548] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.548] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=26, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.548] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.548] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=27, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.548] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.548] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=28, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.548] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.548] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=29, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.548] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.548] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=30, color=0x19edd4) returned 0x0 [0170.548] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=31, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=32, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=33, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=34, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=35, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=36, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.549] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.549] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=37, color=0x19edd4) returned 0x0 [0170.549] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.550] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=38, color=0x19edd4) returned 0x0 [0170.550] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.550] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=39, color=0x19edd4) returned 0x0 [0170.550] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.550] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=40, color=0x19edd4) returned 0x0 [0170.550] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.550] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=41, color=0x19edd4) returned 0x0 [0170.550] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.550] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=42, color=0x19edd4) returned 0x0 [0170.550] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.550] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=43, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=44, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=45, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=46, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=47, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=48, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.551] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.551] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=49, color=0x19edd4) returned 0x0 [0170.551] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=50, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=51, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=52, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=53, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=54, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=55, color=0x19edd4) returned 0x0 [0170.552] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.552] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.552] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=56, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=57, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=58, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=59, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=60, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=61, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.553] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=62, color=0x19edd4) returned 0x0 [0170.553] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.553] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=63, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=64, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=65, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=66, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=67, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=68, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.554] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.554] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=69, color=0x19edd4) returned 0x0 [0170.554] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=70, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=71, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=72, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=73, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=74, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=75, color=0x19edd4) returned 0x0 [0170.555] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.555] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.555] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=76, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=77, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=78, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=79, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=80, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=81, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=82, color=0x19edd4) returned 0x0 [0170.556] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.556] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.556] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=83, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=84, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=85, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=86, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=87, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=88, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=89, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=90, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.557] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=91, color=0x19edd4) returned 0x0 [0170.557] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.557] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=92, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=93, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=94, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=95, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=96, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=97, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=98, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.558] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.558] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=99, color=0x19edd4) returned 0x0 [0170.558] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=100, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=101, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=102, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=103, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=104, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=105, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=106, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.559] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=107, color=0x19edd4) returned 0x0 [0170.559] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.559] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=108, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=109, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=110, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=111, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=112, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=113, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.560] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=114, color=0x19edd4) returned 0x0 [0170.560] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.560] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=115, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=116, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=117, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=118, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=119, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=120, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=121, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=122, color=0x19edd4) returned 0x0 [0170.561] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.561] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.561] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=123, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=124, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=125, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=126, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=127, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=128, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=129, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=130, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.562] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.562] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=131, color=0x19edd4) returned 0x0 [0170.562] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=132, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=133, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=134, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=135, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=136, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=137, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=138, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=139, color=0x19edd4) returned 0x0 [0170.563] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.563] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.563] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=140, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=141, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=142, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=143, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=144, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=145, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=146, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=147, color=0x19edd4) returned 0x0 [0170.564] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.564] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.564] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=148, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=149, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=150, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=151, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=152, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=153, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=154, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=155, color=0x19edd4) returned 0x0 [0170.565] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.565] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.565] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=156, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=157, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=158, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=159, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=160, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=161, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=162, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.566] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=163, color=0x19edd4) returned 0x0 [0170.566] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.566] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=164, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=165, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=166, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=167, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=168, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=169, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=170, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=171, color=0x19edd4) returned 0x0 [0170.567] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.567] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.567] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=172, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=173, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=174, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=175, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=176, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=177, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=178, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=179, color=0x19edd4) returned 0x0 [0170.568] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.568] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.568] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=180, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=181, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=182, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=183, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=184, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=185, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=186, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=187, color=0x19edd4) returned 0x0 [0170.569] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.569] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.569] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=188, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=189, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=190, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=191, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=192, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=193, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=194, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=195, color=0x19edd4) returned 0x0 [0170.570] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.570] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.570] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=196, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=197, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=198, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=199, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=200, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=201, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=202, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=203, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.571] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.571] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=204, color=0x19edd4) returned 0x0 [0170.571] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=205, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=206, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=207, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=208, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=209, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=210, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=211, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.572] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=212, color=0x19edd4) returned 0x0 [0170.572] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.572] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=213, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=214, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=215, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=216, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=217, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=218, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=219, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=220, color=0x19edd4) returned 0x0 [0170.573] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.573] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.573] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=221, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=222, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=223, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=224, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=225, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=226, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=227, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=228, color=0x19edd4) returned 0x0 [0170.574] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.574] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.574] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=229, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=230, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=231, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=232, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=233, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=234, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=235, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=236, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.575] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.575] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=237, color=0x19edd4) returned 0x0 [0170.575] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.576] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.576] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=238, color=0x19edd4) returned 0x0 [0170.576] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.576] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.576] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=239, color=0x19edd4) returned 0x0 [0170.576] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.576] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.576] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=240, color=0x19edd4) returned 0x0 [0170.576] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.576] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.576] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=241, color=0x19edd4) returned 0x0 [0170.576] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.576] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.576] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=242, color=0x19edd4) returned 0x0 [0170.577] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.577] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=243, color=0x19edd4) returned 0x0 [0170.577] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.577] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=244, color=0x19edd4) returned 0x0 [0170.577] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.577] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=245, color=0x19edd4) returned 0x0 [0170.577] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.577] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=246, color=0x19edd4) returned 0x0 [0170.577] GdipGetImageWidth (image=0x5bcb610, width=0x19edc4) returned 0x0 [0170.577] GdipGetImageHeight (image=0x5bcb610, height=0x19edc4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=247, color=0x19edd4) returned 0x0 [0170.577] GdipBitmapGetPixel (bitmap=0x5bcb610, x=0, y=248, color=0x19edd4) returned 0x0 [0170.689] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x65e00, lpName=0x0) returned 0x46c [0170.689] memcpy (in: _Dst=0x4230000, _Src=0x3c16ff0, _Size=0x65e00 | out: _Dst=0x4230000) returned 0x4230000 [0170.693] CloseHandle (hObject=0x46c) returned 1 [0172.154] CoTaskMemAlloc (cb=0xd) returned 0x8428a8 [0172.154] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x240f824, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.154] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.155] CoTaskMemFree (pv=0x8428a8) [0172.166] CoTaskMemAlloc (cb=0x11) returned 0x7fdca0 [0172.166] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResumeThread", cchWideChar=12, lpMultiByteStr=0x240fb60, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResumeThread", lpUsedDefaultChar=0x0) returned 12 [0172.166] GetProcAddress (hModule=0x76720000, lpProcName="ResumeThread") returned 0x7673a800 [0172.166] CoTaskMemFree (pv=0x7fdca0) [0172.180] CoTaskMemAlloc (cb=0xd) returned 0x8428a8 [0172.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410338, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.180] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.181] CoTaskMemFree (pv=0x8428a8) [0172.181] CoTaskMemAlloc (cb=0x1a) returned 0x7eec40 [0172.181] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64SetThreadContext", cchWideChar=21, lpMultiByteStr=0x2410370, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64SetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0172.181] GetProcAddress (hModule=0x76720000, lpProcName="Wow64SetThreadContext") returned 0x76763e60 [0172.181] CoTaskMemFree (pv=0x7eec40) [0172.186] CoTaskMemAlloc (cb=0xd) returned 0x8428a8 [0172.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x241043c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.186] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.186] CoTaskMemFree (pv=0x8428a8) [0172.186] CoTaskMemAlloc (cb=0x15) returned 0x7fdca0 [0172.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetThreadContext", cchWideChar=16, lpMultiByteStr=0x2410474, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0172.186] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadContext") returned 0x76762490 [0172.186] CoTaskMemFree (pv=0x7fdca0) [0172.190] CoTaskMemAlloc (cb=0xd) returned 0x842788 [0172.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x241053c, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.190] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.190] CoTaskMemFree (pv=0x842788) [0172.190] CoTaskMemAlloc (cb=0x1a) returned 0x7eec40 [0172.190] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Wow64GetThreadContext", cchWideChar=21, lpMultiByteStr=0x2410574, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Wow64GetThreadContext", lpUsedDefaultChar=0x0) returned 21 [0172.190] GetProcAddress (hModule=0x76720000, lpProcName="Wow64GetThreadContext") returned 0x76763e30 [0172.190] CoTaskMemFree (pv=0x7eec40) [0172.193] CoTaskMemAlloc (cb=0xd) returned 0x842980 [0172.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410640, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.193] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.193] CoTaskMemFree (pv=0x842980) [0172.193] CoTaskMemAlloc (cb=0x15) returned 0x7fdca0 [0172.193] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetThreadContext", cchWideChar=16, lpMultiByteStr=0x2410678, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetThreadContext", lpUsedDefaultChar=0x0) returned 16 [0172.194] GetProcAddress (hModule=0x76720000, lpProcName="GetThreadContext") returned 0x7673ec60 [0172.194] CoTaskMemFree (pv=0x7fdca0) [0172.196] CoTaskMemAlloc (cb=0xd) returned 0x842818 [0172.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410734, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.196] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.196] CoTaskMemFree (pv=0x842818) [0172.196] CoTaskMemAlloc (cb=0x13) returned 0x7fdca0 [0172.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VirtualAllocEx", cchWideChar=14, lpMultiByteStr=0x241076c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VirtualAllocEx", lpUsedDefaultChar=0x0) returned 14 [0172.197] GetProcAddress (hModule=0x76720000, lpProcName="VirtualAllocEx") returned 0x76762730 [0172.197] CoTaskMemFree (pv=0x7fdca0) [0172.216] CoTaskMemAlloc (cb=0xd) returned 0x842980 [0172.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410828, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.217] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.217] CoTaskMemFree (pv=0x842980) [0172.217] CoTaskMemAlloc (cb=0x17) returned 0x7fd9c0 [0172.217] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WriteProcessMemory", cchWideChar=18, lpMultiByteStr=0x2410860, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WriteProcessMemory", lpUsedDefaultChar=0x0) returned 18 [0172.218] GetProcAddress (hModule=0x76720000, lpProcName="WriteProcessMemory") returned 0x76762850 [0172.218] CoTaskMemFree (pv=0x7fd9c0) [0172.225] CoTaskMemAlloc (cb=0xd) returned 0x842788 [0172.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410924, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.225] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.225] CoTaskMemFree (pv=0x842788) [0172.225] CoTaskMemAlloc (cb=0x16) returned 0x7fd9c0 [0172.225] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ReadProcessMemory", cchWideChar=17, lpMultiByteStr=0x241095c, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ReadProcessMemory", lpUsedDefaultChar=0x0) returned 17 [0172.226] GetProcAddress (hModule=0x76720000, lpProcName="ReadProcessMemory") returned 0x76761c80 [0172.226] CoTaskMemFree (pv=0x7fd9c0) [0172.231] CoTaskMemAlloc (cb=0xa) returned 0x8428a8 [0172.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ntdll", cchWideChar=5, lpMultiByteStr=0x2410a1c, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ntdll", lpUsedDefaultChar=0x0) returned 5 [0172.231] LoadLibraryA (lpLibFileName="ntdll") returned 0x771d0000 [0172.231] CoTaskMemFree (pv=0x8428a8) [0172.231] CoTaskMemAlloc (cb=0x19) returned 0x7eec40 [0172.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ZwUnmapViewOfSection", cchWideChar=20, lpMultiByteStr=0x2410a48, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ZwUnmapViewOfSection", lpUsedDefaultChar=0x0) returned 20 [0172.232] GetProcAddress (hModule=0x771d0000, lpProcName="ZwUnmapViewOfSection") returned 0x77246f40 [0172.232] CoTaskMemFree (pv=0x7eec40) [0172.279] CoTaskMemAlloc (cb=0xd) returned 0x842818 [0172.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="kernel32", cchWideChar=8, lpMultiByteStr=0x2410b10, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="kernel32", lpUsedDefaultChar=0x0) returned 8 [0172.279] LoadLibraryA (lpLibFileName="kernel32") returned 0x76720000 [0172.279] CoTaskMemFree (pv=0x842818) [0172.279] CoTaskMemAlloc (cb=0x13) returned 0x7fdca0 [0172.279] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateProcessA", cchWideChar=14, lpMultiByteStr=0x2410b48, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateProcessA", lpUsedDefaultChar=0x0) returned 14 [0172.280] GetProcAddress (hModule=0x76720000, lpProcName="CreateProcessA") returned 0x76760750 [0172.280] CoTaskMemFree (pv=0x7fdca0) [0172.639] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", nBufferLength=0x105, lpBuffer=0x19e344, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", lpFilePart=0x0) returned 0x62 [0183.550] CreateFileMappingW (hFile=0xffffffff, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x1b200, lpName=0x0) returned 0x3b4 [0183.552] memcpy (in: _Dst=0x7c30000, _Src=0x3cd31a0, _Size=0x1b200 | out: _Dst=0x7c30000) returned 0x7c30000 [0183.554] CloseHandle (hObject=0x3b4) returned 1 [0183.659] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", nBufferLength=0x105, lpBuffer=0x19e27c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", lpFilePart=0x0) returned 0x62 [0183.805] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x19dd0c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0183.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", cchWideChar=98, lpMultiByteStr=0x19e4a4, cbMultiByte=100, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exeà\x07=$\x96¼(ú\ro`í\x19", lpUsedDefaultChar=0x0) returned 98 [0183.840] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0x19e4a0, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$\x8aà\x07C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", lpUsedDefaultChar=0x0) returned 0 [0183.840] CreateProcessA (in: lpApplicationName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", lpCommandLine="", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19e564*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19e8b0 | out: lpCommandLine="", lpProcessInformation=0x19e8b0*(hProcess=0x46c, hThread=0x3b4, dwProcessId=0xeec, dwThreadId=0x11e0)) returned 1 [0183.902] CoTaskMemFree (pv=0x0) [0183.910] GetThreadContext (in: hThread=0x3b4, lpContext=0x2463800 | out: lpContext=0x2463800*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x310000, Edx=0x0, Ecx=0x0, Eax=0x4e7e6e, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0183.911] ReadProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x310008, lpBuffer=0x19e8a0, nSize=0x4, lpNumberOfBytesRead=0x19e8e4 | out: lpBuffer=0x19e8a0*, lpNumberOfBytesRead=0x19e8e4*=0x4) returned 1 [0183.912] NtUnmapViewOfSection (ProcessHandle=0x46c, BaseAddress=0x400000) returned 0x0 [0183.922] VirtualAllocEx (hProcess=0x46c, lpAddress=0x400000, dwSize=0x17000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0183.923] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x400000, lpBuffer=0x3d053e0*, nSize=0x1000, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x3d053e0*, lpNumberOfBytesWritten=0x19e8e4*=0x1000) returned 1 [0183.937] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x401000, lpBuffer=0x2464164*, nSize=0xf000, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x2464164*, lpNumberOfBytesWritten=0x19e8e4*=0xf000) returned 1 [0183.949] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x410000, lpBuffer=0x247370c*, nSize=0x5000, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x247370c*, lpNumberOfBytesWritten=0x19e8e4*=0x5000) returned 1 [0183.953] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x415000, lpBuffer=0x2478718*, nSize=0x1000, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x2478718*, lpNumberOfBytesWritten=0x19e8e4*=0x1000) returned 1 [0183.956] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x416000, lpBuffer=0x2479724*, nSize=0x1000, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x2479724*, lpNumberOfBytesWritten=0x19e8e4*=0x1000) returned 1 [0183.980] WriteProcessMemory (in: hProcess=0x46c, lpBaseAddress=0x310008, lpBuffer=0x247aa30*, nSize=0x4, lpNumberOfBytesWritten=0x19e8e4 | out: lpBuffer=0x247aa30*, lpNumberOfBytesWritten=0x19e8e4*=0x4) returned 1 [0183.990] SetThreadContext (hThread=0x3b4, lpContext=0x2463800*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x310000, Edx=0x0, Ecx=0x0, Eax=0x40fd88, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0183.993] ResumeThread (hThread=0x3b4) returned 0x1 [0184.078] CoGetContextToken (in: pToken=0x19ed00 | out: pToken=0x19ed00) returned 0x0 [0184.080] IUnknown:QueryInterface (in: This=0x7ca118, riid=0x6f1d38a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x19ed24 | out: ppvObject=0x19ed24*=0x7ca124) returned 0x0 [0184.083] IComThreadingInfo:GetCurrentThreadType (in: This=0x7ca124, pThreadType=0x19ed84 | out: pThreadType=0x19ed84*=1) returned 0x0 [0184.084] IUnknown:Release (This=0x7ca124) returned 0x1 [0184.089] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0x798468*=0x14c, lpdwindex=0x19eba4 | out: lpdwindex=0x19eba4) returned 0x0 [0186.479] CoGetContextToken (in: pToken=0x19db2c | out: pToken=0x19db2c) returned 0x0 [0186.479] CoGetContextToken (in: pToken=0x19db0c | out: pToken=0x19db0c) returned 0x0 [0186.479] CoGetContextToken (in: pToken=0x19da90 | out: pToken=0x19da90) returned 0x0 [0186.480] WebBrowser:IUnknown:Release (This=0x80ea44) returned 0x11 [0186.480] WebBrowser:IUnknown:Release (This=0x80ea44) returned 0x10 [0186.480] CoGetContextToken (in: pToken=0x19da90 | out: pToken=0x19da90) returned 0x0 [0186.480] WebBrowser:IUnknown:Release (This=0x80e938) returned 0xf [0186.480] WebBrowser:IUnknown:Release (This=0x80e91c) returned 0xe [0186.480] WebBrowser:IUnknown:Release (This=0x80e928) returned 0xd [0186.480] WebBrowser:IUnknown:Release (This=0x80e92c) returned 0xc [0186.480] WebBrowser:IUnknown:Release (This=0x80e9d8) returned 0xb [0186.480] WebBrowser:IUnknown:Release (This=0x80ea78) returned 0xa [0186.480] WebBrowser:IUnknown:Release (This=0x80e9e4) returned 0x9 [0186.480] CoGetContextToken (in: pToken=0x19da90 | out: pToken=0x19da90) returned 0x0 [0186.480] WebBrowser:IUnknown:Release (This=0x80ea10) returned 0x8 [0186.480] WebBrowser:IUnknown:Release (This=0x80ea10) returned 0x7 Thread: id = 2 os_tid = 0x1384 Thread: id = 3 os_tid = 0x139c Thread: id = 4 os_tid = 0x13a4 [0088.703] CoGetContextToken (in: pToken=0x43cfc74 | out: pToken=0x43cfc74) returned 0x800401f0 [0088.703] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0088.703] RoInitialize () returned 0x1 [0088.703] RoUninitialize () returned 0x0 [0124.151] GdipDeleteFont (font=0x5babc38) returned 0x0 [0124.152] CloseHandle (hObject=0x2e8) returned 1 [0124.153] CloseHandle (hObject=0x2d4) returned 1 [0124.153] CloseHandle (hObject=0x2e4) returned 1 [0124.153] CloseHandle (hObject=0x2f0) returned 1 [0124.154] CloseHandle (hObject=0x2e0) returned 1 [0124.154] CloseHandle (hObject=0x2dc) returned 1 [0124.154] CloseHandle (hObject=0x2ec) returned 1 [0124.154] CloseHandle (hObject=0x2d8) returned 1 [0184.487] SetWindowLongW (hWnd=0x202ae, nIndex=-4, dwNewLong=1944586208) returned 76949590 [0184.489] SetClassLongW (hWnd=0x202ae, nIndex=-24, dwNewLong=1944586208) returned 0x730aeed0 [0184.490] PostMessageW (hWnd=0x202ae, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.490] SetWindowLongW (hWnd=0x2029a, nIndex=-4, dwNewLong=1944586208) returned 76949550 [0184.490] SetClassLongW (hWnd=0x2029a, nIndex=-24, dwNewLong=1944586208) returned 0x49605be [0184.491] PostMessageW (hWnd=0x2029a, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.491] SetWindowLongW (hWnd=0x402b0, nIndex=-4, dwNewLong=1944586208) returned 76944710 [0184.491] SetClassLongW (hWnd=0x402b0, nIndex=-24, dwNewLong=1944586208) returned 0x73e807e0 [0184.491] PostMessageW (hWnd=0x402b0, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.491] SetWindowLongW (hWnd=0x2027c, nIndex=-4, dwNewLong=1944586208) returned 76944750 [0184.491] SetClassLongW (hWnd=0x2027c, nIndex=-24, dwNewLong=1944586208) returned 0x73e807e0 [0184.491] PostMessageW (hWnd=0x2027c, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.492] SetWindowLongW (hWnd=0x7039e, nIndex=-4, dwNewLong=1944586208) returned 76940774 [0184.492] SetClassLongW (hWnd=0x7039e, nIndex=-24, dwNewLong=1944586208) returned 0x73e807e0 [0184.492] PostMessageW (hWnd=0x7039e, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.493] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0184.493] UnregisterClassW (lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", hInstance=0x400000) returned 0 [0184.494] EtwEventUnregister (RegHandle=0x7c73a8) returned 0x0 [0184.497] IsWindow (hWnd=0x40386) returned 1 [0184.499] GetModuleHandleW (lpModuleName="user32.dll") returned 0x743d0000 [0184.499] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x43cfa14, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWgl=$\x96¼(ú\ro\x98ü<\x04\x01", lpUsedDefaultChar=0x0) returned 14 [0184.500] GetProcAddress (hModule=0x743d0000, lpProcName="DefWindowProcW") returned 0x73e807e0 [0184.500] SetWindowLongW (hWnd=0x40386, nIndex=-4, dwNewLong=1944586208) returned 76940894 [0184.501] SetClassLongW (hWnd=0x40386, nIndex=-24, dwNewLong=1944586208) returned 0x496065e [0184.501] IsWindow (hWnd=0x40386) returned 1 [0184.501] DestroyWindow (hWnd=0x40386) returned 0 [0184.502] PostMessageW (hWnd=0x40386, Msg=0x10, wParam=0x0, lParam=0x0) returned 1 [0184.502] SetConsoleCtrlHandler (HandlerRoutine=0x4960636, Add=0) returned 1 [0184.563] CloseHandle (hObject=0x278) returned 1 [0184.570] GdipDisposeImage (image=0x5bcb610) returned 0x0 [0184.580] GdipDeleteFont (font=0x5bac200) returned 0x0 [0184.581] GdipDeleteFont (font=0x5bac160) returned 0x0 [0184.581] GdipDeleteFont (font=0x5babfa8) returned 0x0 [0184.581] GdipDisposeImage (image=0x5bcc330) returned 0x0 [0184.582] GdipDeleteFont (font=0x5bac188) returned 0x0 [0184.584] GdipDeleteFont (font=0x5bac138) returned 0x0 [0184.584] GdipDeleteFont (font=0x5bac228) returned 0x0 [0184.584] GdipDeleteFont (font=0x5bac110) returned 0x0 [0184.585] GdipDisposeImage (image=0x5bcbfe8) returned 0x0 [0184.585] GdipDeleteFont (font=0x5bac0c0) returned 0x0 [0184.587] GdipDeleteFont (font=0x5bac098) returned 0x0 [0184.588] GdipDeleteFont (font=0x5bac048) returned 0x0 [0184.588] GdipDeleteFont (font=0x5bac0e8) returned 0x0 [0184.588] GdipDisposeImage (image=0x5bcbca0) returned 0x0 [0184.589] GdipDeleteFont (font=0x5bac1d8) returned 0x0 [0184.591] GdipDeleteFont (font=0x5bac1b0) returned 0x0 [0184.591] GdipDeleteFont (font=0x5babdc8) returned 0x0 [0184.591] GdipDeleteFont (font=0x5babda0) returned 0x0 [0184.592] GdipDeleteFont (font=0x5babd28) returned 0x0 [0184.592] GdipDisposeImage (image=0x5bc66b0) returned 0x0 [0184.593] GdipDeleteFont (font=0x5babbe8) returned 0x0 [0184.595] GdipDeleteFont (font=0x5babad0) returned 0x0 [0184.595] GdipDeleteFont (font=0x5babf58) returned 0x0 [0184.595] GdipDeleteFont (font=0x5babcb0) returned 0x0 [0184.596] GdipDisposeImage (image=0x5bc20a8) returned 0x0 [0184.596] GdipDeleteFont (font=0x5babb48) returned 0x0 [0184.598] GdipDeleteFont (font=0x5babbc0) returned 0x0 [0184.598] GdipDeleteFont (font=0x5babaf8) returned 0x0 [0184.599] GdipDeleteFont (font=0x5babe90) returned 0x0 [0184.599] GdipDisposeImage (image=0x5bbdaa0) returned 0x0 [0184.599] GdipDeleteFont (font=0x5babf30) returned 0x0 [0184.602] GdipDeleteFont (font=0x5babb98) returned 0x0 [0184.602] GdipDeleteFont (font=0x5babeb8) returned 0x0 [0184.603] GdipDeleteFont (font=0x5babf08) returned 0x0 [0184.603] GdipDisposeImage (image=0x5bb9498) returned 0x0 [0184.605] GdipDeleteFont (font=0x5babee0) returned 0x0 [0184.607] GdipDeleteFont (font=0x5babc10) returned 0x0 [0184.607] GdipDeleteFont (font=0x5babd00) returned 0x0 [0184.608] GdipDeleteFont (font=0x5babe40) returned 0x0 [0184.608] GdipDisposeImage (image=0x5bb4e90) returned 0x0 [0184.608] GdipDeleteFont (font=0x5babe68) returned 0x0 [0184.621] GdipDeleteFont (font=0x5c124c0) returned 0x0 [0184.626] GdipDeleteFont (font=0x5babd78) returned 0x0 [0184.626] GdipDeleteFont (font=0x5babd50) returned 0x0 [0184.627] GdipDeleteFont (font=0x5babc88) returned 0x0 [0184.627] GdipDeleteFont (font=0x5babcd8) returned 0x0 [0184.627] GdipDisposeImage (image=0x5bb0888) returned 0x0 [0184.628] GdipDeleteFont (font=0x5babaa8) returned 0x0 [0184.629] GdipDeleteFont (font=0x5c122e0) returned 0x0 [0184.630] GdipDeleteFont (font=0x5babb70) returned 0x0 [0184.630] GdipDeleteFont (font=0x5babf80) returned 0x0 [0184.630] GdipDeleteFont (font=0x5babe18) returned 0x0 [0184.630] GdipDisposeImage (image=0x5bac280) returned 0x0 [0184.633] GdipDeleteFont (font=0x5babc60) returned 0x0 [0184.634] GdipDeleteFont (font=0x5c122b8) returned 0x0 [0184.634] GdipDisposeImage (image=0x5bcaf80) returned 0x0 [0184.635] GdipDeleteFont (font=0x5babdf0) returned 0x0 [0184.635] GdipDeleteFont (font=0x5babb20) returned 0x0 [0184.636] GdipDeleteFont (font=0x5b91448) returned 0x0 [0184.636] GdipDisposeImage (image=0x5ba7470) returned 0x0 [0184.639] GdipDeleteFont (font=0x5b91470) returned 0x0 [0184.640] GdipDeleteFont (font=0x5bac070) returned 0x0 [0184.641] GdipDeleteFont (font=0x5b91420) returned 0x0 [0184.641] GdipDeleteFont (font=0x5b913f8) returned 0x0 [0184.641] GdipDeleteFont (font=0x5b912e0) returned 0x0 [0184.641] GdipDisposeImage (image=0x5ba2e68) returned 0x0 [0184.642] GdipDeleteFont (font=0x5b912b8) returned 0x0 [0184.644] GdipDeleteFont (font=0x5b913d0) returned 0x0 [0184.644] GdipDeleteFont (font=0x5b91498) returned 0x0 [0184.644] GdipDeleteFont (font=0x5b91538) returned 0x0 [0184.644] GdipDisposeImage (image=0x5b9e860) returned 0x0 [0184.647] GdipDeleteFont (font=0x5b913a8) returned 0x0 [0184.650] GdipDeleteFont (font=0x5b91290) returned 0x0 [0184.650] GdipDeleteFont (font=0x5b91330) returned 0x0 [0184.651] GdipDeleteFont (font=0x5b915b0) returned 0x0 [0184.651] GdipDisposeImage (image=0x5b9a258) returned 0x0 [0184.651] GdipDeleteFont (font=0x5b91380) returned 0x0 [0184.663] CloseThemeData () returned 0x0 [0184.666] DeleteObject (ho=0x320a0964) returned 1 [0184.667] DeleteObject (ho=0x630a095a) returned 1 [0184.667] GdipDeleteFont (font=0x5b91268) returned 0x0 [0184.668] GdipDeleteFont (font=0x5b91358) returned 0x0 [0184.668] GdipDeleteFont (font=0x5b914e8) returned 0x0 [0184.669] GdipDeleteFont (font=0x5b914c0) returned 0x0 [0184.669] GdipDisposeImage (image=0x5b95c50) returned 0x0 [0184.671] GdipDeleteFont (font=0x5b91308) returned 0x0 [0184.672] GdipDeleteFont (font=0x5b91560) returned 0x0 [0184.673] GdipDeleteFont (font=0x5b91588) returned 0x0 [0184.673] GdipDeleteFont (font=0x5b91510) returned 0x0 [0184.673] GdipDisposeImage (image=0x5b91648) returned 0x0 [0184.674] GdipDeleteFont (font=0x5b91600) returned 0x0 [0184.675] GdipDeleteFont (font=0x5bac020) returned 0x0 [0184.675] GdipDeleteFont (font=0x5b915d8) returned 0x0 [0184.676] GdipDeleteFont (font=0x5b91218) returned 0x0 [0184.676] GdipDeleteFont (font=0x5b911f0) returned 0x0 [0184.676] GdipDisposeImage (image=0x5b8cbe8) returned 0x0 [0184.678] GdipDeleteFont (font=0x5b8cbc0) returned 0x0 [0184.680] GdipDeleteFont (font=0x5babff8) returned 0x0 [0184.680] GdipDeleteFont (font=0x5b8cb98) returned 0x0 [0184.680] GdipDeleteFont (font=0x5b8cb70) returned 0x0 [0184.681] GdipDeleteFont (font=0x5b8cb48) returned 0x0 [0184.681] GdipDisposeImage (image=0x5b88540) returned 0x0 [0184.681] GdipDeleteFont (font=0x5b88518) returned 0x0 [0184.682] GdipDeleteFont (font=0x5babfd0) returned 0x0 [0184.683] GdipDeleteFont (font=0x5b884f0) returned 0x0 [0184.683] GdipDeleteFont (font=0x5b884c8) returned 0x0 [0184.683] GdipDeleteFont (font=0x5b884a0) returned 0x0 [0184.684] GdipDisposeImage (image=0x5b83e98) returned 0x0 [0184.685] GdipDeleteFont (font=0x5b83e70) returned 0x0 [0184.686] GdipDisposeImage (image=0x5bcc678) returned 0x0 [0184.690] DeleteObject (ho=0x850a0958) returned 1 [0184.690] GdipDeleteFont (font=0x5b83e48) returned 0x0 [0184.690] GdipDeleteFont (font=0x5b7b060) returned 0x0 [0184.691] GdipDeleteFont (font=0x5b7b038) returned 0x0 [0184.691] GdipDisposeImage (image=0x5b7f268) returned 0x0 [0184.691] GdipDeleteFont (font=0x48e1f08) returned 0x0 [0184.693] GdipDeleteFont (font=0x5bac250) returned 0x0 [0184.694] RestoreDC (hdc=0x230106af, nSavedDC=-1) returned 1 [0184.695] DeleteDC (hdc=0x230106af) returned 1 [0184.696] DeleteObject (ho=0x1f0a096d) returned 1 [0184.697] GdipDeleteFont (font=0x48eefc0) returned 0x0 [0184.702] RegCloseKey (hKey=0x80000004) returned 0x0 [0184.704] CoGetContextToken (in: pToken=0x43cf8b0 | out: pToken=0x43cf8b0) returned 0x0 [0184.704] IUnknown:QueryInterface (in: This=0x7ca118, riid=0x6f1eda0c*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x43cf854 | out: ppvObject=0x43cf854*=0x7ca128) returned 0x0 [0184.704] CObjectContext::ContextCallback () returned 0x0 [0186.481] IUnknown:Release (This=0x7ca128) returned 0x1 [0186.481] IUnknown:Release (This=0x7ca118) returned 0x0 Thread: id = 5 os_tid = 0xdd8 Thread: id = 6 os_tid = 0xde0 Thread: id = 7 os_tid = 0xde4 Thread: id = 8 os_tid = 0xdec Thread: id = 9 os_tid = 0xde8 Thread: id = 10 os_tid = 0xe68 [0144.165] CoGetContextToken (in: pToken=0x7f1fd0c | out: pToken=0x7f1fd0c) returned 0x0 [0144.165] IUnknown:QueryInterface (in: This=0x7ca1d0, riid=0x6f1d38a4*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x7f1fd30 | out: ppvObject=0x7f1fd30*=0x7ca1dc) returned 0x0 [0144.166] IComThreadingInfo:GetCurrentThreadType (in: This=0x7ca1dc, pThreadType=0x7f1fd5c | out: pThreadType=0x7f1fd5c*=0) returned 0x0 [0144.166] IUnknown:Release (This=0x7ca1dc) returned 0x0 Thread: id = 13 os_tid = 0xa1c Process: id = "2" image_name = "f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" page_root = "0x2d206000" os_pid = "0xeec" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1358" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe\"" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 625 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 626 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 627 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 628 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 629 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 630 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 631 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 632 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 633 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 634 start_va = 0x400000 end_va = 0x4ebfff monitored = 1 entry_point = 0x4e7e6e region_type = mapped_file name = "f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe") Region: id = 635 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 636 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 637 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 638 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 639 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 640 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 641 start_va = 0x400000 end_va = 0x416fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 642 start_va = 0x420000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 643 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 644 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 645 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 646 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 647 start_va = 0x600000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 648 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 649 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 650 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 651 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 652 start_va = 0x420000 end_va = 0x4ddfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 653 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 654 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 655 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 656 start_va = 0x4e0000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 657 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 658 start_va = 0x7e0000 end_va = 0x8dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 659 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 660 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 661 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 662 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 663 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 664 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 665 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 666 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 667 start_va = 0x74eb0000 end_va = 0x762aefff monitored = 0 entry_point = 0x7506b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 668 start_va = 0x76800000 end_va = 0x76836fff monitored = 0 entry_point = 0x76803b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 671 start_va = 0x745b0000 end_va = 0x74aa8fff monitored = 0 entry_point = 0x747b7610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 672 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 673 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 674 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 675 start_va = 0x74520000 end_va = 0x745acfff monitored = 0 entry_point = 0x74569b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 676 start_va = 0x76470000 end_va = 0x764b3fff monitored = 0 entry_point = 0x76477410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 677 start_va = 0x73f20000 end_va = 0x73f2efff monitored = 0 entry_point = 0x73f22e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 678 start_va = 0x73f30000 end_va = 0x73f8efff monitored = 0 entry_point = 0x73f34af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 679 start_va = 0x520000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 680 start_va = 0x8e0000 end_va = 0x9dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 681 start_va = 0x6e190000 end_va = 0x6e1fffff monitored = 0 entry_point = 0x6e1c2cf0 region_type = mapped_file name = "msvcp60.dll" filename = "\\Windows\\SysWOW64\\msvcp60.dll" (normalized: "c:\\windows\\syswow64\\msvcp60.dll") Region: id = 682 start_va = 0x6ae60000 end_va = 0x6ae83fff monitored = 0 entry_point = 0x6ae64820 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 683 start_va = 0x717a0000 end_va = 0x7191dfff monitored = 0 entry_point = 0x7181c630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 688 start_va = 0x6ee60000 end_va = 0x6efcafff monitored = 0 entry_point = 0x6eece360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 689 start_va = 0x71590000 end_va = 0x7179cfff monitored = 0 entry_point = 0x7167acb0 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 690 start_va = 0x6ae30000 end_va = 0x6ae52fff monitored = 0 entry_point = 0x6ae38940 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\SysWOW64\\winmmbase.dll" (normalized: "c:\\windows\\syswow64\\winmmbase.dll") Region: id = 691 start_va = 0x560000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 692 start_va = 0x9e0000 end_va = 0xadffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009e0000" filename = "" Region: id = 693 start_va = 0x73b80000 end_va = 0x73e4afff monitored = 0 entry_point = 0x73dbc4c0 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 694 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 695 start_va = 0xae0000 end_va = 0xc67fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 696 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 697 start_va = 0xc70000 end_va = 0xdf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000c70000" filename = "" Region: id = 698 start_va = 0xe00000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e00000" filename = "" Region: id = 699 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 700 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 701 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 702 start_va = 0x1f0000 end_va = 0x1f3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 703 start_va = 0x764d0000 end_va = 0x764d5fff monitored = 0 entry_point = 0x764d1460 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 704 start_va = 0x6f880000 end_va = 0x6f8a7fff monitored = 0 entry_point = 0x6f887820 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 705 start_va = 0x6f800000 end_va = 0x6f870fff monitored = 0 entry_point = 0x6f8569e0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\SysWOW64\\efswrt.dll" (normalized: "c:\\windows\\syswow64\\efswrt.dll") Region: id = 706 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 707 start_va = 0x6fe00000 end_va = 0x6fec7fff monitored = 0 entry_point = 0x6fe6ae90 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\SysWOW64\\WinTypes.dll" (normalized: "c:\\windows\\syswow64\\wintypes.dll") Region: id = 708 start_va = 0x2200000 end_va = 0x22e9fff monitored = 0 entry_point = 0x223d650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 709 start_va = 0x6f7b0000 end_va = 0x6f7f8fff monitored = 0 entry_point = 0x6f7b6450 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\SysWOW64\\edputil.dll" (normalized: "c:\\windows\\syswow64\\edputil.dll") Region: id = 710 start_va = 0x2200000 end_va = 0x2536fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 711 start_va = 0x5a0000 end_va = 0x5a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 712 start_va = 0x72cb0000 end_va = 0x72d24fff monitored = 0 entry_point = 0x72ce9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 713 start_va = 0x2540000 end_va = 0x26dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 714 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 715 start_va = 0x6fc60000 end_va = 0x6fdaafff monitored = 0 entry_point = 0x6fcc1660 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 716 start_va = 0x5b0000 end_va = 0x5b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 717 start_va = 0x74340000 end_va = 0x743c3fff monitored = 0 entry_point = 0x74366220 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 718 start_va = 0x5c0000 end_va = 0x5c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 719 start_va = 0x5d0000 end_va = 0x5d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 720 start_va = 0x700000 end_va = 0x744fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000000c.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x000000000000000c.db") Region: id = 721 start_va = 0x5e0000 end_va = 0x5e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 722 start_va = 0x750000 end_va = 0x7ddfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 723 start_va = 0x2540000 end_va = 0x2550fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 724 start_va = 0x26d0000 end_va = 0x26dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 725 start_va = 0x2560000 end_va = 0x2563fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 726 start_va = 0x2570000 end_va = 0x2583fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 727 start_va = 0x2590000 end_va = 0x2590fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002590000" filename = "" Region: id = 728 start_va = 0x25a0000 end_va = 0x25dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 729 start_va = 0x26e0000 end_va = 0x27dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 730 start_va = 0x25e0000 end_va = 0x261ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000025e0000" filename = "" Region: id = 731 start_va = 0x2620000 end_va = 0x265ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 732 start_va = 0x2660000 end_va = 0x269ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002660000" filename = "" Region: id = 733 start_va = 0x27e0000 end_va = 0x28dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000027e0000" filename = "" Region: id = 734 start_va = 0x28e0000 end_va = 0x29dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 735 start_va = 0x29e0000 end_va = 0x2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 736 start_va = 0x2ae0000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 737 start_va = 0x2b20000 end_va = 0x2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 738 start_va = 0x2560000 end_va = 0x2560fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002560000" filename = "" Thread: id = 11 os_tid = 0x11e0 [0187.793] __set_app_type (_Type=0x2) [0187.793] __p__fmode () returned 0x76b44d6c [0187.793] __p__commode () returned 0x76b45b1c [0187.793] __getmainargs (in: _Argc=0x19ff20, _Argv=0x19ff10, _Env=0x19ff1c, _DoWildCard=0, _StartInfo=0x19ff14 | out: _Argc=0x19ff20, _Argv=0x19ff10, _Env=0x19ff1c) returned 0 [0187.795] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4151a8 [0187.795] _onexit (_Func=0x401326) returned 0x401326 [0187.795] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415180 [0187.795] _onexit (_Func=0x40135c) returned 0x40135c [0187.796] ??2@YAPAXI@Z () returned 0x1e27b0 [0187.796] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x19fe9c [0187.796] ??2@YAPAXI@Z () returned 0x1e1140 [0187.796] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e1140 [0187.796] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e1150 [0187.796] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.796] _onexit (_Func=0x4013bf) returned 0x4013bf [0187.796] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4151f0 [0187.796] _onexit (_Func=0x401c86) returned 0x401c86 [0187.798] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415218 [0187.798] _onexit (_Func=0x401cb4) returned 0x401cb4 [0187.800] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe94 [0187.801] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x5 [0187.801] ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z () returned 0x1e27f9 [0187.801] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x5 [0187.801] ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z () returned 0x1e27fa [0187.801] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x5 [0187.801] ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z () returned 0x1e27fb [0187.801] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x5 [0187.801] ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z () returned 0x1e27fc [0187.801] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x5 [0187.801] ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z () returned 0x1e27fd [0187.801] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x415268 [0187.801] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.801] _onexit (_Func=0x402091) returned 0x402091 [0187.801] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415258 [0187.801] _onexit (_Func=0x4020c7) returned 0x4020c7 [0187.804] _onexit (_Func=0x402c3b) returned 0x402c3b [0187.805] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4156c4 [0187.805] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4156d4 [0187.805] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415710 [0187.805] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415720 [0187.805] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415730 [0187.805] _onexit (_Func=0x4036b7) returned 0x4036b7 [0187.806] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415788 [0187.806] _onexit (_Func=0x406015) returned 0x406015 [0187.806] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4157b0 [0187.806] _onexit (_Func=0x40604a) returned 0x40604a [0187.806] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4157d0 [0187.806] _onexit (_Func=0x40628c) returned 0x40628c [0187.806] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4157e8 [0187.806] _onexit (_Func=0x4062c2) returned 0x4062c2 [0187.806] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4157f8 [0187.806] _onexit (_Func=0x4062f8) returned 0x4062f8 [0187.807] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415918 [0187.807] _onexit (_Func=0x40632e) returned 0x40632e [0187.807] _onexit (_Func=0x407370) returned 0x407370 [0187.808] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415978 [0187.808] _onexit (_Func=0x4073a5) returned 0x4073a5 [0187.808] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415950 [0187.808] _onexit (_Func=0x4073db) returned 0x4073db [0187.808] ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z () returned 0x415988 [0187.808] _onexit (_Func=0x407411) returned 0x407411 [0187.808] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415968 [0187.808] _onexit (_Func=0x407447) returned 0x407447 [0187.809] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415998 [0187.809] _onexit (_Func=0x409190) returned 0x409190 [0187.809] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415a00 [0187.809] _onexit (_Func=0x4091c6) returned 0x4091c6 [0187.809] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4159e8 [0187.809] _onexit (_Func=0x4091fc) returned 0x4091fc [0187.810] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415a10 [0187.810] _onexit (_Func=0x409232) returned 0x409232 [0187.810] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x4159c0 [0187.810] _onexit (_Func=0x409260) returned 0x409260 [0187.810] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415a48 [0187.810] _onexit (_Func=0x409e33) returned 0x409e33 [0187.810] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415a20 [0187.810] _onexit (_Func=0x409e68) returned 0x409e68 [0187.811] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415a90 [0187.811] _onexit (_Func=0x40d184) returned 0x40d184 [0187.811] ??0Init@ios_base@std@@QAE@XZ () returned 0x415b01 [0187.811] _onexit (_Func=0x40d64e) returned 0x40d64e [0187.811] ??0_Winit@std@@QAE@XZ () returned 0x415b00 [0187.811] _onexit (_Func=0x40d67a) returned 0x40d67a [0187.811] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415ad8 [0187.812] _onexit (_Func=0x40d6a8) returned 0x40d6a8 [0187.812] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415b08 [0187.812] _onexit (_Func=0x40d6dd) returned 0x40d6dd [0187.812] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x415b18 [0187.812] _onexit (_Func=0x40d713) returned 0x40d713 [0187.812] LoadLibraryA (lpLibFileName="User32.dll") returned 0x743d0000 [0187.813] GetProcAddress (hModule=0x743d0000, lpProcName="GetLastInputInfo") returned 0x743fe100 [0187.813] ??0Init@ios_base@std@@QAE@XZ () returned 0x415ba5 [0187.813] _onexit (_Func=0x40f866) returned 0x40f866 [0187.813] ??0_Winit@std@@QAE@XZ () returned 0x415ba4 [0187.813] _onexit (_Func=0x40f892) returned 0x40f892 [0187.813] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76720000 [0187.813] GetProcAddress (hModule=0x76720000, lpProcName="GetConsoleWindow") returned 0x76786370 [0187.813] GetStartupInfoA (in: lpStartupInfo=0x19ff24 | out: lpStartupInfo=0x19ff24*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0187.813] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0187.818] FindResourceA (hModule=0x0, lpName="SETTINGS", lpType=0xa) returned 0x4160c8 [0187.818] LoadResource (hModule=0x0, hResInfo=0x4160c8) returned 0x416da4 [0187.818] LockResource (hResData=0x416da4) returned 0x416da4 [0187.819] SizeofResource (hModule=0x0, hResInfo=0x4160c8) returned 0x132 [0187.819] malloc (_Size=0x43) returned 0x1e0c50 [0187.819] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z () returned 0x19fe4c [0187.819] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x415950 [0187.819] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.819] malloc (_Size=0xee) returned 0x1e29d0 [0187.819] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z () returned 0x19fa10 [0187.819] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2ac9 [0187.819] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x19fe5c [0187.819] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.820] free (_Block=0x1e29d0) [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x19feb8 [0187.820] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe7c [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x19fe6c [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x19fe4c [0187.820] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.820] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x1a [0187.820] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.820] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.820] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.820] ??2@YAPAXI@Z () returned 0x1e29d0 [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e29d0 [0187.820] free (_Block=0x0) [0187.820] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.820] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.820] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x20 [0187.820] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.820] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.820] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.820] ??2@YAPAXI@Z () returned 0x1e2a18 [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2a18 [0187.820] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2a28 [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] free (_Block=0x1e29d0) [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.821] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x23 [0187.821] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.821] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] ??2@YAPAXI@Z () returned 0x1e2a70 [0187.821] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2a70 [0187.821] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2a80 [0187.821] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2a90 [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] free (_Block=0x1e2a18) [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.821] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x26 [0187.821] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.821] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2aa0 [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.821] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.821] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x29 [0187.821] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.821] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.821] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.821] ??2@YAPAXI@Z () returned 0x1e2c38 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c38 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c48 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c58 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c68 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c78 [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] free (_Block=0x1e2a70) [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.822] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x2c [0187.822] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.822] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c88 [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.822] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x2f [0187.822] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.822] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2c98 [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.822] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.822] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x32 [0187.822] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.822] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.822] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.822] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2ca8 [0187.823] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.823] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.823] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x35 [0187.823] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.823] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??2@YAPAXI@Z () returned 0x1e2d50 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2d50 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2d60 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2d70 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2d80 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2d90 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2da0 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2db0 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2dc0 [0187.823] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2dd0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.823] free (_Block=0x1e2c38) [0187.823] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.823] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.823] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x38 [0187.823] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.823] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.824] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.824] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2de0 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.824] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x44 [0187.824] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.824] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.824] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.824] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2df0 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.824] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x4c [0187.824] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.824] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.824] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.824] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2e00 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.824] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x4f [0187.824] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.824] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.824] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.824] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2e10 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.824] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.824] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x52 [0187.824] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.826] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.826] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.826] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2e20 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.826] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x6a [0187.826] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.826] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.826] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.826] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2e30 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.826] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x6d [0187.826] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.826] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.826] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.826] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e2e40 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.826] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.826] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x70 [0187.826] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.826] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.826] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.826] ??2@YAPAXI@Z () returned 0x1e65f0 [0187.826] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e65f0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6600 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6610 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6620 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6630 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6640 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6650 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6660 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6670 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6680 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6690 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66a0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66b0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66c0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66d0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66e0 [0187.827] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66f0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.827] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] free (_Block=0x1e2d50) [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.828] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x7a [0187.828] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.828] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6700 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.828] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x7d [0187.828] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.828] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6710 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.828] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x80 [0187.828] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.828] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6720 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.828] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x83 [0187.828] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.828] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.828] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.828] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6730 [0187.828] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.829] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x86 [0187.829] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.829] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.829] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.829] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6740 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.829] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x89 [0187.829] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.829] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.829] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.829] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6750 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.829] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x8b [0187.829] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.829] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.829] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.829] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6760 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.829] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x8e [0187.829] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.829] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.829] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.829] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6770 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.829] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.829] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x91 [0187.829] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.829] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.829] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.830] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6780 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.830] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x9a [0187.830] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.830] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.830] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.830] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6790 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.830] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0x9d [0187.830] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.830] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.830] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.830] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67a0 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.830] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.830] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xa0 [0187.830] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.832] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.832] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.832] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67b0 [0187.832] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.832] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.832] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xa3 [0187.832] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.832] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.832] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.832] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67c0 [0187.832] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.832] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.832] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xa6 [0187.832] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.832] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.832] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67d0 [0187.833] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.833] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.833] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xa9 [0187.833] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.833] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.833] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67e0 [0187.833] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.833] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.833] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xac [0187.833] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.833] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.833] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.833] ??2@YAPAXI@Z () returned 0x1e67f8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67f8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6808 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6818 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6828 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6838 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6848 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6858 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6868 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6878 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6888 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6898 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68a8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68b8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68c8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68d8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68e8 [0187.833] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68f8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6908 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6918 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6928 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6938 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6948 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6958 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6968 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6978 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6988 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6998 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69a8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69b8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69c8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69d8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69e8 [0187.834] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e69f8 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.834] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] free (_Block=0x1e65f0) [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.835] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xaf [0187.835] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.835] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a08 [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.835] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xb2 [0187.835] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.835] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.835] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.835] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a18 [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.835] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.836] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xb5 [0187.836] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.836] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.836] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.836] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a28 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.836] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xb8 [0187.836] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.836] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.836] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.836] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a38 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.836] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xbb [0187.836] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.836] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.836] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.836] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a48 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.836] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.837] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xc2 [0187.837] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.837] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.837] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.837] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a58 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.837] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xc5 [0187.837] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.837] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.837] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.837] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a68 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.837] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xc8 [0187.837] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.837] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.837] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.837] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a78 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.837] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xcb [0187.837] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.837] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.837] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.837] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a88 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.837] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.837] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xcd [0187.837] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.837] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.837] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.838] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6a98 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.838] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xd0 [0187.838] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.838] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.838] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.838] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6aa8 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.838] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xd3 [0187.838] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.838] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.838] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.838] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6ab8 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.838] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xd6 [0187.838] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.838] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.838] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.838] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6ac8 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.838] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xd9 [0187.838] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.838] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.838] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.838] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6ad8 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.838] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.839] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xdc [0187.839] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.839] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.839] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6ae8 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.839] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xe4 [0187.839] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.839] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.839] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6af8 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.839] ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z () returned 0xec [0187.839] ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z () returned 0x19fe2c [0187.839] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x19fe4c [0187.839] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6b08 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x2 [0187.839] ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0xee [0187.839] ??2@YAPAXI@Z () returned 0x1e7408 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7408 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7418 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7428 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7438 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7448 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7458 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7468 [0187.839] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7478 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7488 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7498 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74a8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74b8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74c8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74d8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74e8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e74f8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7508 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7518 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7528 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7538 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7548 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7558 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7568 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7578 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7588 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7598 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75a8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75b8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75c8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75d8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75e8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e75f8 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7608 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7618 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7628 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7638 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7648 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7658 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7668 [0187.840] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7678 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7688 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7698 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76a8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76b8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76c8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76d8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76e8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e76f8 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7708 [0187.841] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e7718 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.841] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] free (_Block=0x1e67f8) [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.842] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.843] free (_Block=0x0) [0187.843] ??2@YAPAXI@Z () returned 0x1e65f0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e65f0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6600 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6610 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6620 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6630 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6640 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6650 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6660 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6670 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6680 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6690 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66a0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66b0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66c0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66d0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66e0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e66f0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6700 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6710 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6720 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6730 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6740 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6750 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6760 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6770 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6780 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6790 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67a0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67b0 [0187.843] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67c0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67d0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67e0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e67f0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6800 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6810 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6820 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6830 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6840 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6850 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6860 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6870 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6880 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6890 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68a0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68b0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68c0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68d0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68e0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e68f0 [0187.844] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x1e6900 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.844] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.845] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] free (_Block=0x1e7408) [0187.846] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z () returned 0x19fe98 [0187.846] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fea8 [0187.846] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x4157e8 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.846] OpenMutexA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Remcos_Mutex_Inj") returned 0x0 [0187.847] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e04d1 [0187.847] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\remcos_totevzugmgbhhbj\\", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x0) returned 0x2 [0187.847] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x415978 [0187.847] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5f01 [0187.847] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="remcos_totevzugmgbhhbj") returned 0x198 [0187.847] GetLastError () returned 0x0 [0187.847] LoadLibraryA (lpLibFileName="Psapi.dll") returned 0x764d0000 [0187.919] GetProcAddress (hModule=0x764d0000, lpProcName="GetModuleFileNameExA") returned 0x764d1660 [0187.919] LoadLibraryA (lpLibFileName="Psapi.dll") returned 0x764d0000 [0187.919] GetProcAddress (hModule=0x764d0000, lpProcName="GetModuleFileNameExW") returned 0x764d13e0 [0187.919] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76720000 [0187.920] GetProcAddress (hModule=0x76720000, lpProcName="GlobalMemoryStatusEx") returned 0x7673afe0 [0187.920] GetModuleHandleA (lpModuleName="kernel32") returned 0x76720000 [0187.920] GetProcAddress (hModule=0x76720000, lpProcName="IsWow64Process") returned 0x76739f10 [0187.920] GetModuleHandleA (lpModuleName="kernel32") returned 0x76720000 [0187.920] GetProcAddress (hModule=0x76720000, lpProcName="GetComputerNameExW") returned 0x76745d40 [0187.920] GetModuleHandleA (lpModuleName="Shell32") returned 0x74eb0000 [0187.921] GetProcAddress (hModule=0x74eb0000, lpProcName="IsUserAnAdmin") returned 0x7515db90 [0187.921] GetModuleHandleA (lpModuleName="kernel32") returned 0x76720000 [0187.921] GetProcAddress (hModule=0x76720000, lpProcName="SetProcessDEPPolicy") returned 0x7673ef30 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e61a1 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e60e1 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5f91 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5e71 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5f31 [0187.921] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5ed1 [0187.921] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x41580c, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe")) returned 0x62 [0187.921] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fe80 | out: phkResult=0x19fe80*=0x19c) returned 0x0 [0187.921] RegQueryValueExA (in: hKey=0x19c, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x19fa70, lpcbData=0x19fe70*=0x400 | out: lpType=0x0, lpData=0x19fa70*=0x57, lpcbData=0x19fe70*=0xf) returned 0x0 [0187.921] RegCloseKey (hKey=0x19c) returned 0x0 [0187.921] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe98 [0187.921] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x415968 [0187.921] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.921] GetCurrentProcess () returned 0xffffffff [0187.922] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x19fe80 | out: Wow64Process=0x19fe80*=1) returned 1 [0187.922] ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z () returned 0x415968 [0187.922] IsUserAnAdmin () returned 1 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6d21 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e7231 [0187.922] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2e59 [0187.922] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z () returned 0x4157f8 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2c09 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2a71 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2cc1 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2cf1 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2d21 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2bd9 [0187.922] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6d81 [0187.922] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6d81 [0187.922] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2c39 [0187.922] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z () returned 0x19fe64 [0187.922] getenv (_VarName="UserProfile") returned="C:\\Users\\RDhJ0CNFevzX" [0187.922] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z () returned 0x19fe64 [0187.923] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e7051 [0187.925] GetLongPathNameA (in: lpszShortPath="C:\\Users\\RDhJ0CNFevzX", lpszLongPath=0x19fcf0, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\RDhJ0CNFevzX") returned 0x15 [0187.926] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe54 [0187.926] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe44 [0187.926] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z () returned 0x19fe24 [0187.926] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z () returned 0x19fe34 [0187.926] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z () returned 0x19fe98 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x415918 [0187.926] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.926] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2bd9 [0187.926] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e5e41 [0187.926] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2e89 [0187.926] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2c69 [0187.927] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6d81 [0187.927] ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e2c39 [0187.927] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6c31 [0187.927] CreateDirectoryA (lpPathName="C:\\Users\\RDhJ0CNFevzX\\remcos" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos"), lpSecurityAttributes=0x0) returned 1 [0187.928] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fe50 [0187.928] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fe30 [0187.928] ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z () returned 0x4157d0 [0187.928] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.928] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0187.928] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e0521 [0187.928] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e0521 [0187.928] CopyFileA (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\f384a96582763be490ea4eeed6d3f10291d7df964f64db077b4d10697149a7da.exe"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe"), bFailIfExists=0) returned 1 [0189.983] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6f31 [0189.983] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z () returned 0x19fd38 [0189.983] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fcf8 [0189.983] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run\\", phkResult=0x19fcf0 | out: phkResult=0x19fcf0*=0x1a0) returned 0x0 [0189.983] ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ () returned 0x29 [0189.983] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6b39 [0189.983] RegSetValueExA (in: hKey=0x1a0, lpValueName="remcos", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\"", cbData=0x29 | out: lpData="\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\"") returned 0x0 [0189.987] RegCloseKey (hKey=0x1a0) returned 0x0 [0189.987] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.987] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.987] getenv (_VarName="Temp") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp" [0189.987] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe40 [0189.987] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fe60 [0189.987] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z () returned 0x19fe30 [0189.987] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.987] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.987] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6b39 [0189.987] ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z () returned 0x19fd74 [0189.991] ??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z () returned 0x19fd74 [0189.991] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe50 [0189.991] ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z () returned 0x19fe40 [0189.991] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fe60 [0189.991] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z () returned 0x19fe20 [0189.991] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z () returned 0x19fe00 [0189.991] ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z () returned 0x19fe10 [0189.991] ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$c () returned 0x19fd74 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.991] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0189.992] ??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z () returned 0x19fd74 [0189.992] ??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z () returned 0x19fd74 [0189.992] ?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ () returned 0x19fd78 [0189.995] ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ () returned 0x1e6b39 [0190.054] ShellExecuteA (hwnd=0x0, lpOperation="open", lpFile="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat", lpParameters="", lpDirectory="", nShowCmd=0) returned 0x2a [0192.268] exit (_Code=0) [0192.270] closesocket (s=0x0) returned -1 [0192.271] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.271] closesocket (s=0x0) returned -1 [0192.271] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.271] closesocket (s=0x0) returned -1 [0192.271] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.271] closesocket (s=0x0) returned -1 [0192.272] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.273] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.274] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.278] free (_Block=0x1e65f0) [0192.279] closesocket (s=0x0) returned -1 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.279] free (_Block=0x0) [0192.280] closesocket (s=0x0) returned -1 [0192.280] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.280] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.280] ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ () returned 0x0 [0192.280] free (_Block=0x1e1140) Thread: id = 12 os_tid = 0xab4 Thread: id = 14 os_tid = 0x11d4 Thread: id = 15 os_tid = 0x1218 Thread: id = 16 os_tid = 0x1214 Thread: id = 17 os_tid = 0x1210 Thread: id = 18 os_tid = 0x11f8 Thread: id = 19 os_tid = 0x120c Thread: id = 20 os_tid = 0x11fc Process: id = "3" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x51881000" os_pid = "0x11f4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0xeec" cmd_line = "C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\" \"" cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 739 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 740 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 741 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 742 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 743 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 744 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 745 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 746 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 747 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 748 start_va = 0xe30000 end_va = 0xe81fff monitored = 1 entry_point = 0xe44fd0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 749 start_va = 0xe90000 end_va = 0x4e8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e90000" filename = "" Region: id = 750 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 751 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 752 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 753 start_va = 0x7fff0000 end_va = 0x7dfa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 754 start_va = 0x7dfa16770000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa16770000" filename = "" Region: id = 755 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 756 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 757 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 758 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 759 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 760 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 761 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 762 start_va = 0x440000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 763 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 764 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 765 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 766 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 847 start_va = 0x440000 end_va = 0x4fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 848 start_va = 0x5f0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 849 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 850 start_va = 0x500000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 851 start_va = 0x6f0000 end_va = 0x7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006f0000" filename = "" Region: id = 852 start_va = 0x7f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007f0000" filename = "" Region: id = 853 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 854 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 855 start_va = 0x6f8a0000 end_va = 0x6f8a7fff monitored = 0 entry_point = 0x6f8a1840 region_type = mapped_file name = "cmdext.dll" filename = "\\Windows\\SysWOW64\\cmdext.dll" (normalized: "c:\\windows\\syswow64\\cmdext.dll") Region: id = 856 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 857 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 858 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 859 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 860 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 861 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 862 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 863 start_va = 0x900000 end_va = 0xc36fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 918 start_va = 0x73e50000 end_va = 0x73ee1fff monitored = 0 entry_point = 0x73e90380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 919 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Thread: id = 21 os_tid = 0x1110 [0209.757] GetModuleHandleA (lpModuleName=0x0) returned 0xe30000 [0209.757] __set_app_type (_Type=0x1) [0209.757] __p__fmode () returned 0x76b44d6c [0209.757] __p__commode () returned 0x76b45b1c [0209.757] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xe45200) returned 0x0 [0209.759] __getmainargs (in: _Argc=0xe560e8, _Argv=0xe560ec, _Env=0xe560f0, _DoWildCard=0, _StartInfo=0xe560fc | out: _Argc=0xe560e8, _Argv=0xe560ec, _Env=0xe560f0) returned 0 [0209.759] GetCurrentThreadId () returned 0x1110 [0209.759] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1110) returned 0x84 [0209.759] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76720000 [0209.759] GetProcAddress (hModule=0x76720000, lpProcName="SetThreadUILanguage") returned 0x76762510 [0209.760] SetThreadUILanguage (LangId=0x0) returned 0x409 [0209.779] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0209.779] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x19ff18 | out: phkResult=0x19ff18*=0x0) returned 0x2 [0209.780] VirtualQuery (in: lpAddress=0x19ff1f, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0209.780] VirtualQuery (in: lpAddress=0xa0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c [0209.780] VirtualQuery (in: lpAddress=0xa1000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c [0209.780] VirtualQuery (in: lpAddress=0xa3000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0xa3000, AllocationBase=0xa0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c [0209.780] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x19fed0, dwLength=0x1c | out: lpBuffer=0x19fed0*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c [0209.780] GetConsoleOutputCP () returned 0x1b5 [0209.782] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xe5f460 | out: lpCPInfo=0xe5f460) returned 1 [0209.782] SetConsoleCtrlHandler (HandlerRoutine=0xe50e40, Add=1) returned 1 [0209.783] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.783] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x0) returned 1 [0209.784] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.784] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xe5f40c | out: lpMode=0xe5f40c) returned 1 [0209.785] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.785] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x7) returned 1 [0209.789] _get_osfhandle (_FileHandle=0) returned 0x38 [0209.789] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xe5f408 | out: lpMode=0xe5f408) returned 1 [0209.791] _get_osfhandle (_FileHandle=0) returned 0x38 [0209.791] SetConsoleMode (hConsoleHandle=0x38, dwMode=0x1a7) returned 1 [0209.793] GetEnvironmentStringsW () returned 0x5f7d40* [0209.793] GetProcessHeap () returned 0x5f0000 [0209.793] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa1a) returned 0x5f8768 [0209.793] memcpy (in: _Dst=0x5f8768, _Src=0x5f7d40, _Size=0xa1a | out: _Dst=0x5f8768) returned 0x5f8768 [0209.793] FreeEnvironmentStringsA (penv="A") returned 1 [0209.793] GetProcessHeap () returned 0x5f0000 [0209.793] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x4) returned 0x5f0550 [0209.793] GetEnvironmentStringsW () returned 0x5f7d40* [0209.793] GetProcessHeap () returned 0x5f0000 [0209.793] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa1a) returned 0x5f9190 [0209.793] memcpy (in: _Dst=0x5f9190, _Src=0x5f7d40, _Size=0xa1a | out: _Dst=0x5f9190) returned 0x5f9190 [0209.793] FreeEnvironmentStringsA (penv="A") returned 1 [0209.793] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x94) returned 0x0 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x49, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.794] RegQueryValueExW (in: hKey=0x94, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.794] RegCloseKey (hKey=0x94) returned 0x0 [0209.795] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ee7c | out: phkResult=0x19ee7c*=0x94) returned 0x0 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x40, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x1, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x0, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x4, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x4) returned 0x0 [0209.795] RegQueryValueExW (in: hKey=0x94, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ee84, lpData=0x19ee88, lpcbData=0x19ee80*=0x1000 | out: lpType=0x19ee84*=0x0, lpData=0x19ee88*=0x9, lpcbData=0x19ee80*=0x1000) returned 0x2 [0209.795] RegCloseKey (hKey=0x94) returned 0x0 [0209.795] time (in: timer=0x0 | out: timer=0x0) returned 0x62ed2879 [0209.795] srand (_Seed=0x62ed2879) [0209.795] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\" \"" [0209.795] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /c \"\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\" \"" [0209.795] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xe67720 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0209.796] GetProcessHeap () returned 0x5f0000 [0209.796] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x210) returned 0x5f9bb8 [0209.796] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5f9bc0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b [0209.796] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x63 [0209.796] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0209.796] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0209.796] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0209.796] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0209.796] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0209.796] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0209.796] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0209.796] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0209.796] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0209.796] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0209.797] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0209.797] GetProcessHeap () returned 0x5f0000 [0209.797] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f8768) returned 1 [0209.797] GetEnvironmentStringsW () returned 0x5f7d40* [0209.798] GetProcessHeap () returned 0x5f0000 [0209.798] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa32) returned 0x5fa810 [0209.798] memcpy (in: _Dst=0x5fa810, _Src=0x5f7d40, _Size=0xa32 | out: _Dst=0x5fa810) returned 0x5fa810 [0209.798] FreeEnvironmentStringsA (penv="A") returned 1 [0209.798] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x1b [0209.798] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0209.798] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0209.798] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0209.798] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0209.798] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0209.798] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0209.798] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0209.798] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0209.798] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0209.798] GetProcessHeap () returned 0x5f0000 [0209.798] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x44) returned 0x5f05c8 [0209.798] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x19fc54 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0209.799] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop", nBufferLength=0x104, lpBuffer=0x19fc54, lpFilePart=0x19fc4c | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x19fc4c*="Desktop") returned 0x1d [0209.799] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop")) returned 0x11 [0209.799] FindFirstFileW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x3ce179de, ftLastAccessTime.dwHighDateTime=0x1d70068, ftLastWriteTime.dwLowDateTime=0x3ce179de, ftLastWriteTime.dwHighDateTime=0x1d70068, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x5f0618 [0209.799] FindClose (in: hFindFile=0x5f0618 | out: hFindFile=0x5f0618) returned 1 [0209.799] memcpy (in: _Dst=0x19fc5a, _Src=0x19f9fc, _Size=0xa | out: _Dst=0x19fc5a) returned 0x19fc5a [0209.799] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX" (normalized: "c:\\users\\rdhj0cnfevzx"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ce179de, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0x3cec2ec2, ftLastAccessTime.dwHighDateTime=0x1d8a8d7, ftLastWriteTime.dwLowDateTime=0x3cec2ec2, ftLastWriteTime.dwHighDateTime=0x1d8a8d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RDhJ0CNFevzX", cAlternateFileName="RDHJ0C~1")) returned 0x5f0618 [0209.800] FindClose (in: hFindFile=0x5f0618 | out: hFindFile=0x5f0618) returned 1 [0209.800] _wcsnicmp (_String1="RDHJ0C~1", _String2="RDhJ0CNFevzX", _MaxCount=0xc) returned 16 [0209.800] memcpy (in: _Dst=0x19fc66, _Src=0x19f9fc, _Size=0x18 | out: _Dst=0x19fc66) returned 0x19fc66 [0209.800] FindFirstFileW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop"), lpFindFileData=0x19f9d0 | out: lpFindFileData=0x19f9d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3ced6473, ftCreationTime.dwHighDateTime=0x1d70068, ftLastAccessTime.dwLowDateTime=0xed38361b, ftLastAccessTime.dwHighDateTime=0x1d8a8d6, ftLastWriteTime.dwLowDateTime=0xed38361b, ftLastWriteTime.dwHighDateTime=0x1d8a8d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x5f0618 [0209.800] FindClose (in: hFindFile=0x5f0618 | out: hFindFile=0x5f0618) returned 1 [0209.800] memcpy (in: _Dst=0x19fc80, _Src=0x19f9fc, _Size=0xe | out: _Dst=0x19fc80) returned 0x19fc80 [0209.800] GetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop")) returned 0x11 [0209.800] SetCurrentDirectoryW (lpPathName="C:\\Users\\RDhJ0CNFevzX\\Desktop" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop")) returned 1 [0209.801] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 1 [0209.801] GetProcessHeap () returned 0x5f0000 [0209.801] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5fa810) returned 1 [0209.801] GetEnvironmentStringsW () returned 0x5f7d40* [0209.801] GetProcessHeap () returned 0x5f0000 [0209.801] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa76) returned 0x5f9dd0 [0209.801] memcpy (in: _Dst=0x5f9dd0, _Src=0x5f7d40, _Size=0xa76 | out: _Dst=0x5f9dd0) returned 0x5f9dd0 [0209.801] FreeEnvironmentStringsA (penv="=") returned 1 [0209.801] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xe67720 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0209.801] GetProcessHeap () returned 0x5f0000 [0209.802] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f05c8) returned 1 [0209.802] GetProcessHeap () returned 0x5f0000 [0209.802] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x400e) returned 0x5fbcd0 [0209.802] GetProcessHeap () returned 0x5f0000 [0209.802] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x78) returned 0x5fa850 [0209.802] GetProcessHeap () returned 0x5f0000 [0209.802] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x4008) returned 0x5ffce8 [0209.803] GetProcessHeap () returned 0x5f0000 [0209.803] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x4008) returned 0x603cf8 [0209.803] GetProcessHeap () returned 0x5f0000 [0209.804] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5fbcd0) returned 1 [0209.804] GetConsoleOutputCP () returned 0x1b5 [0209.808] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xe5f460 | out: lpCPInfo=0xe5f460) returned 1 [0209.808] GetUserDefaultLCID () returned 0x409 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0xe634a0, cchData=8 | out: lpLCData=":") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x19fd84, cchData=128 | out: lpLCData="0") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x19fd84, cchData=128 | out: lpLCData="1") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0xe634b0, cchData=8 | out: lpLCData="/") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0xe63500, cchData=32 | out: lpLCData="Mon") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0xe63540, cchData=32 | out: lpLCData="Tue") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0xe63580, cchData=32 | out: lpLCData="Wed") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0xe635c0, cchData=32 | out: lpLCData="Thu") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0xe63600, cchData=32 | out: lpLCData="Fri") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0xe63640, cchData=32 | out: lpLCData="Sat") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0xe63680, cchData=32 | out: lpLCData="Sun") returned 4 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0xe634c0, cchData=8 | out: lpLCData=".") returned 2 [0209.809] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0xe634e0, cchData=8 | out: lpLCData=",") returned 2 [0209.809] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0209.811] GetProcessHeap () returned 0x5f0000 [0209.811] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x20c) returned 0x5fa918 [0209.811] GetConsoleTitleW (in: lpConsoleTitle=0x5fa918, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0209.812] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76720000 [0209.812] GetProcAddress (hModule=0x76720000, lpProcName="CopyFileExW") returned 0x7673ffc0 [0209.813] GetProcAddress (hModule=0x76720000, lpProcName="IsDebuggerPresent") returned 0x7673b0b0 [0209.813] GetProcAddress (hModule=0x76720000, lpProcName="SetConsoleInputExeNameW") returned 0x76a2b440 [0209.813] GetProcessHeap () returned 0x5f0000 [0209.813] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x400a) returned 0x5fbcd0 [0209.813] GetProcessHeap () returned 0x5f0000 [0209.813] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5fbcd0) returned 1 [0209.815] _wcsicmp (_String1="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"", _String2=")") returned -7 [0209.815] _wcsicmp (_String1="FOR", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 68 [0209.815] _wcsicmp (_String1="FOR/?", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 68 [0209.815] _wcsicmp (_String1="IF", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 71 [0209.815] _wcsicmp (_String1="IF/?", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 71 [0209.815] _wcsicmp (_String1="REM", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 80 [0209.815] _wcsicmp (_String1="REM/?", _String2="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"") returned 80 [0209.815] GetProcessHeap () returned 0x5f0000 [0209.815] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x58) returned 0x5fab30 [0209.816] GetProcessHeap () returned 0x5f0000 [0209.816] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x6e) returned 0x5fab90 [0209.816] GetProcessHeap () returned 0x5f0000 [0209.816] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xc) returned 0x5f0578 [0209.817] GetConsoleTitleW (in: lpConsoleTitle=0x19fa70, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0209.817] GetFileAttributesW (lpFileName="\"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\"" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\\"c:\\users\\rdhj0c~1\\appdata\\local\\temp\\install.bat\"")) returned 0xffffffff [0209.818] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0209.818] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0209.818] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0209.818] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0209.818] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0209.818] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0209.818] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0209.818] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0209.818] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0209.818] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0209.818] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0209.818] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0209.818] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0209.818] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0209.818] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0209.818] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0209.818] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0209.818] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0209.818] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0209.818] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0209.818] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0209.818] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0209.818] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0209.818] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0209.819] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0209.819] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0209.819] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0209.819] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0209.819] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0209.819] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0209.819] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0209.819] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0209.819] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0209.819] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0209.819] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0209.819] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0209.819] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0209.819] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0209.819] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0209.819] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0209.819] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0209.819] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0209.819] _wcsicmp (_String1="\"C", _String2="DIR") returned -66 [0209.819] _wcsicmp (_String1="\"C", _String2="ERASE") returned -67 [0209.819] _wcsicmp (_String1="\"C", _String2="DEL") returned -66 [0209.819] _wcsicmp (_String1="\"C", _String2="TYPE") returned -82 [0209.819] _wcsicmp (_String1="\"C", _String2="COPY") returned -65 [0209.819] _wcsicmp (_String1="\"C", _String2="CD") returned -65 [0209.819] _wcsicmp (_String1="\"C", _String2="CHDIR") returned -65 [0209.819] _wcsicmp (_String1="\"C", _String2="RENAME") returned -80 [0209.819] _wcsicmp (_String1="\"C", _String2="REN") returned -80 [0209.820] _wcsicmp (_String1="\"C", _String2="ECHO") returned -67 [0209.820] _wcsicmp (_String1="\"C", _String2="SET") returned -81 [0209.820] _wcsicmp (_String1="\"C", _String2="PAUSE") returned -78 [0209.820] _wcsicmp (_String1="\"C", _String2="DATE") returned -66 [0209.820] _wcsicmp (_String1="\"C", _String2="TIME") returned -82 [0209.820] _wcsicmp (_String1="\"C", _String2="PROMPT") returned -78 [0209.820] _wcsicmp (_String1="\"C", _String2="MD") returned -75 [0209.820] _wcsicmp (_String1="\"C", _String2="MKDIR") returned -75 [0209.820] _wcsicmp (_String1="\"C", _String2="RD") returned -80 [0209.820] _wcsicmp (_String1="\"C", _String2="RMDIR") returned -80 [0209.820] _wcsicmp (_String1="\"C", _String2="PATH") returned -78 [0209.820] _wcsicmp (_String1="\"C", _String2="GOTO") returned -69 [0209.820] _wcsicmp (_String1="\"C", _String2="SHIFT") returned -81 [0209.820] _wcsicmp (_String1="\"C", _String2="CLS") returned -65 [0209.820] _wcsicmp (_String1="\"C", _String2="CALL") returned -65 [0209.820] _wcsicmp (_String1="\"C", _String2="VERIFY") returned -84 [0209.820] _wcsicmp (_String1="\"C", _String2="VER") returned -84 [0209.820] _wcsicmp (_String1="\"C", _String2="VOL") returned -84 [0209.820] _wcsicmp (_String1="\"C", _String2="EXIT") returned -67 [0209.820] _wcsicmp (_String1="\"C", _String2="SETLOCAL") returned -81 [0209.820] _wcsicmp (_String1="\"C", _String2="ENDLOCAL") returned -67 [0209.820] _wcsicmp (_String1="\"C", _String2="TITLE") returned -82 [0209.820] _wcsicmp (_String1="\"C", _String2="START") returned -81 [0209.820] _wcsicmp (_String1="\"C", _String2="DPATH") returned -66 [0209.820] _wcsicmp (_String1="\"C", _String2="KEYS") returned -73 [0209.820] _wcsicmp (_String1="\"C", _String2="MOVE") returned -75 [0209.821] _wcsicmp (_String1="\"C", _String2="PUSHD") returned -78 [0209.821] _wcsicmp (_String1="\"C", _String2="POPD") returned -78 [0209.821] _wcsicmp (_String1="\"C", _String2="ASSOC") returned -63 [0209.821] _wcsicmp (_String1="\"C", _String2="FTYPE") returned -68 [0209.821] _wcsicmp (_String1="\"C", _String2="BREAK") returned -64 [0209.821] _wcsicmp (_String1="\"C", _String2="COLOR") returned -65 [0209.821] _wcsicmp (_String1="\"C", _String2="MKLINK") returned -75 [0209.821] _wcsicmp (_String1="\"C", _String2="FOR") returned -68 [0209.821] _wcsicmp (_String1="\"C", _String2="IF") returned -71 [0209.821] _wcsicmp (_String1="\"C", _String2="REM") returned -80 [0209.821] GetProcessHeap () returned 0x5f0000 [0209.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x210) returned 0x5fac08 [0209.821] GetProcessHeap () returned 0x5f0000 [0209.821] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x72) returned 0x5f8c68 [0209.822] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0209.822] GetProcessHeap () returned 0x5f0000 [0209.822] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x418) returned 0x5fae20 [0209.822] SetErrorMode (uMode=0x0) returned 0x0 [0209.822] SetErrorMode (uMode=0x1) returned 0x0 [0209.822] GetFullPathNameW (in: lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\.", nBufferLength=0x208, lpBuffer=0x5fae28, lpFilePart=0x19f57c | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp", lpFilePart=0x19f57c*="Temp") returned 0x24 [0209.822] SetErrorMode (uMode=0x0) returned 0x1 [0209.822] GetProcessHeap () returned 0x5f0000 [0209.822] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x5fae20, Size=0x6a) returned 0x5fae20 [0209.822] GetProcessHeap () returned 0x5f0000 [0209.822] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x5fae20) returned 0x6a [0209.823] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\.") returned 1 [0209.823] GetProcessHeap () returned 0x5f0000 [0209.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x58) returned 0x5fae98 [0209.823] GetProcessHeap () returned 0x5f0000 [0209.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa4) returned 0x5faef8 [0209.823] GetProcessHeap () returned 0x5f0000 [0209.823] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x5faef8, Size=0x58) returned 0x5faef8 [0209.823] GetProcessHeap () returned 0x5f0000 [0209.823] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x5faef8) returned 0x58 [0209.823] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0209.823] GetProcessHeap () returned 0x5f0000 [0209.823] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xe0) returned 0x5faf58 [0209.828] GetProcessHeap () returned 0x5f0000 [0209.828] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x5faf58, Size=0x76) returned 0x5faf58 [0209.828] GetProcessHeap () returned 0x5f0000 [0209.828] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x5faf58) returned 0x76 [0209.828] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0209.828] FindFirstFileExW (in: lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\install.bat"), fInfoLevelId=0x1, lpFindFileData=0x19f328, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f328) returned 0x5fafd8 [0209.829] GetProcessHeap () returned 0x5f0000 [0209.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x0, Size=0x14) returned 0x5f7688 [0209.829] FindClose (in: hFindFile=0x5fafd8 | out: hFindFile=0x5fafd8) returned 1 [0209.829] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0209.829] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0209.829] GetConsoleTitleW (in: lpConsoleTitle=0x19f7fc, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0209.829] GetProcessHeap () returned 0x5f0000 [0209.829] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x11c) returned 0x5fafd8 [0209.829] ApiSetQueryApiSetPresence () returned 0x0 [0209.829] ResolveDelayLoadedAPI () returned 0x6f8a14a0 [0209.862] SaferWorker () returned 0x0 [0209.897] SetErrorMode (uMode=0x0) returned 0x0 [0209.897] SetErrorMode (uMode=0x1) returned 0x0 [0209.897] GetFullPathNameW (in: lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat", nBufferLength=0x104, lpBuffer=0x5fac10, lpFilePart=0x19f6ac | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat", lpFilePart=0x19f6ac*="install.bat") returned 0x30 [0209.897] SetErrorMode (uMode=0x0) returned 0x1 [0209.897] GetProcessHeap () returned 0x5f0000 [0209.897] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x6e) returned 0x5f8f00 [0209.897] wcsspn (_String=" ", _Control=" \x09") returned 0x1 [0209.897] GetProcessHeap () returned 0x5f0000 [0209.897] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa) returned 0x607e98 [0209.897] GetProcessHeap () returned 0x5f0000 [0209.897] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xc) returned 0x607f10 [0209.897] GetProcessHeap () returned 0x5f0000 [0209.897] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x607f10, Size=0xc) returned 0x607f28 [0209.897] GetProcessHeap () returned 0x5f0000 [0209.897] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x607f28) returned 0xc [0209.897] CmdBatNotificationStub () returned 0x1 [0209.898] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\install.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x19f73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb4 [0209.898] _open_osfhandle (_OSFileHandle=0xb4, _Flags=8) returned 3 [0209.898] _get_osfhandle (_FileHandle=3) returned 0xb4 [0209.898] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.898] _get_osfhandle (_FileHandle=3) returned 0xb4 [0209.898] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0209.898] ReadFile (in: hFile=0xb4, lpBuffer=0xe6b960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x19f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe6b960*, lpNumberOfBytesRead=0x19f6c4*=0x5a, lpOverlapped=0x0) returned 1 [0209.901] SetFilePointer (in: hFile=0xb4, lDistanceToMove=22, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0209.901] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0xe6b960, cbMultiByte=22, lpWideCharStr=0xe567e0, cchWideChar=8191 | out: lpWideCharStr="PING 127.0.0.1 -n 2 \r\n") returned 22 [0209.902] _get_osfhandle (_FileHandle=3) returned 0xb4 [0209.902] GetFileType (hFile=0xb4) returned 0x1 [0209.902] _get_osfhandle (_FileHandle=3) returned 0xb4 [0209.902] SetFilePointer (in: hFile=0xb4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0209.902] GetProcessHeap () returned 0x5f0000 [0209.902] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x400a) returned 0x5fbcd0 [0209.902] GetProcessHeap () returned 0x5f0000 [0209.903] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5fbcd0) returned 1 [0209.903] _wcsicmp (_String1="PING", _String2=")") returned 71 [0209.903] _wcsicmp (_String1="FOR", _String2="PING") returned -10 [0209.903] _wcsicmp (_String1="FOR/?", _String2="PING") returned -10 [0209.903] _wcsicmp (_String1="IF", _String2="PING") returned -7 [0209.903] _wcsicmp (_String1="IF/?", _String2="PING") returned -7 [0209.903] _wcsicmp (_String1="REM", _String2="PING") returned 2 [0209.904] _wcsicmp (_String1="REM/?", _String2="PING") returned 2 [0209.904] GetProcessHeap () returned 0x5f0000 [0209.904] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x58) returned 0x608198 [0209.904] GetProcessHeap () returned 0x5f0000 [0209.904] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x12) returned 0x5f76a8 [0209.904] GetProcessHeap () returned 0x5f0000 [0209.905] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x2a) returned 0x6081f8 [0209.906] _tell (_FileHandle=3) returned 22 [0209.906] _close (_FileHandle=3) returned 0 [0209.906] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x19f4d0 | out: _Buffer="\r\n") returned 2 [0209.906] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.906] GetFileType (hFile=0x3c) returned 0x2 [0209.906] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0209.906] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4a8 | out: lpMode=0x19f4a8) returned 1 [0209.908] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.908] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x19f4c0, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f4c0*=0x2) returned 1 [0209.910] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x4 [0209.910] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xe67720 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0209.910] _vsnwprintf (in: _Buffer=0xe5abe0, _BufferCount=0x3fe, _Format="%s", _ArgList=0x19f4cc | out: _Buffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 29 [0209.910] _vsnwprintf (in: _Buffer=0xe5ac1a, _BufferCount=0x3e1, _Format="%c", _ArgList=0x19f4cc | out: _Buffer=">") returned 1 [0209.910] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.910] GetFileType (hFile=0x3c) returned 0x2 [0209.911] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0209.911] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4ac | out: lpMode=0x19f4ac) returned 1 [0209.912] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.912] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe5abe0*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x19f4c4, lpReserved=0x0 | out: lpBuffer=0xe5abe0*, lpNumberOfCharsWritten=0x19f4c4*=0x1e) returned 1 [0209.928] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.928] GetFileType (hFile=0x3c) returned 0x2 [0209.928] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0209.928] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f74c | out: lpMode=0x19f74c) returned 1 [0209.929] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.929] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x5f76b0*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x19f764, lpReserved=0x0 | out: lpBuffer=0x5f76b0*, lpNumberOfCharsWritten=0x19f764*=0x4) returned 1 [0209.930] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x19f76c | out: _Buffer=" 127.0.0.1 -n 2 ") returned 17 [0209.930] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.930] GetFileType (hFile=0x3c) returned 0x2 [0209.931] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0209.931] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f744 | out: lpMode=0x19f744) returned 1 [0209.931] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.931] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x11, lpNumberOfCharsWritten=0x19f75c, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f75c*=0x11) returned 1 [0209.996] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x19f780 | out: _Buffer="\r\n") returned 2 [0209.996] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.996] GetFileType (hFile=0x3c) returned 0x2 [0209.996] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0209.996] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f758 | out: lpMode=0x19f758) returned 1 [0209.997] _get_osfhandle (_FileHandle=1) returned 0x3c [0209.997] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x19f770, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f770*=0x2) returned 1 [0209.998] _wcsicmp (_String1="PING", _String2="DIR") returned 12 [0209.998] _wcsicmp (_String1="PING", _String2="ERASE") returned 11 [0209.998] _wcsicmp (_String1="PING", _String2="DEL") returned 12 [0209.998] _wcsicmp (_String1="PING", _String2="TYPE") returned -4 [0209.998] _wcsicmp (_String1="PING", _String2="COPY") returned 13 [0209.998] _wcsicmp (_String1="PING", _String2="CD") returned 13 [0209.998] _wcsicmp (_String1="PING", _String2="CHDIR") returned 13 [0209.998] _wcsicmp (_String1="PING", _String2="RENAME") returned -2 [0209.998] _wcsicmp (_String1="PING", _String2="REN") returned -2 [0209.998] _wcsicmp (_String1="PING", _String2="ECHO") returned 11 [0209.998] _wcsicmp (_String1="PING", _String2="SET") returned -3 [0209.998] _wcsicmp (_String1="PING", _String2="PAUSE") returned 8 [0209.998] _wcsicmp (_String1="PING", _String2="DATE") returned 12 [0209.998] _wcsicmp (_String1="PING", _String2="TIME") returned -4 [0209.998] _wcsicmp (_String1="PING", _String2="PROMPT") returned -9 [0209.998] _wcsicmp (_String1="PING", _String2="MD") returned 3 [0209.998] _wcsicmp (_String1="PING", _String2="MKDIR") returned 3 [0209.999] _wcsicmp (_String1="PING", _String2="RD") returned -2 [0209.999] _wcsicmp (_String1="PING", _String2="RMDIR") returned -2 [0209.999] _wcsicmp (_String1="PING", _String2="PATH") returned 8 [0209.999] _wcsicmp (_String1="PING", _String2="GOTO") returned 9 [0209.999] _wcsicmp (_String1="PING", _String2="SHIFT") returned -3 [0209.999] _wcsicmp (_String1="PING", _String2="CLS") returned 13 [0209.999] _wcsicmp (_String1="PING", _String2="CALL") returned 13 [0209.999] _wcsicmp (_String1="PING", _String2="VERIFY") returned -6 [0209.999] _wcsicmp (_String1="PING", _String2="VER") returned -6 [0209.999] _wcsicmp (_String1="PING", _String2="VOL") returned -6 [0209.999] _wcsicmp (_String1="PING", _String2="EXIT") returned 11 [0209.999] _wcsicmp (_String1="PING", _String2="SETLOCAL") returned -3 [0209.999] _wcsicmp (_String1="PING", _String2="ENDLOCAL") returned 11 [0209.999] _wcsicmp (_String1="PING", _String2="TITLE") returned -4 [0209.999] _wcsicmp (_String1="PING", _String2="START") returned -3 [0209.999] _wcsicmp (_String1="PING", _String2="DPATH") returned 12 [0209.999] _wcsicmp (_String1="PING", _String2="KEYS") returned 5 [0209.999] _wcsicmp (_String1="PING", _String2="MOVE") returned 3 [0209.999] _wcsicmp (_String1="PING", _String2="PUSHD") returned -12 [0209.999] _wcsicmp (_String1="PING", _String2="POPD") returned -6 [0209.999] _wcsicmp (_String1="PING", _String2="ASSOC") returned 15 [0209.999] _wcsicmp (_String1="PING", _String2="FTYPE") returned 10 [0209.999] _wcsicmp (_String1="PING", _String2="BREAK") returned 14 [0209.999] _wcsicmp (_String1="PING", _String2="COLOR") returned 13 [0209.999] _wcsicmp (_String1="PING", _String2="MKLINK") returned 3 [0210.000] _wcsnicmp (_String1="PING", _String2="cmd ", _MaxCount=0x4) returned 13 [0210.000] GetProcessHeap () returned 0x5f0000 [0210.000] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x418) returned 0x608230 [0210.000] SetErrorMode (uMode=0x0) returned 0x0 [0210.000] SetErrorMode (uMode=0x1) returned 0x0 [0210.000] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x608238, lpFilePart=0x19f51c | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x19f51c*="Desktop") returned 0x1d [0210.000] SetErrorMode (uMode=0x0) returned 0x1 [0210.000] GetProcessHeap () returned 0x5f0000 [0210.000] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608230, Size=0x4e) returned 0x608230 [0210.000] GetProcessHeap () returned 0x5f0000 [0210.000] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608230) returned 0x4e [0210.000] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x63 [0210.000] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0210.001] GetProcessHeap () returned 0x5f0000 [0210.001] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x110) returned 0x608288 [0210.001] GetProcessHeap () returned 0x5f0000 [0210.001] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x218) returned 0x6083a0 [0210.006] GetProcessHeap () returned 0x5f0000 [0210.006] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x6083a0, Size=0x112) returned 0x6083a0 [0210.006] GetProcessHeap () returned 0x5f0000 [0210.006] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x6083a0) returned 0x112 [0210.006] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0210.006] GetProcessHeap () returned 0x5f0000 [0210.006] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xe0) returned 0x6084c0 [0210.008] GetProcessHeap () returned 0x5f0000 [0210.008] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x6084c0, Size=0x76) returned 0x6084c0 [0210.008] GetProcessHeap () returned 0x5f0000 [0210.008] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x6084c0) returned 0x76 [0210.008] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0210.008] FindFirstFileExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\PING.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ping.*"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0xffffffff [0210.009] GetLastError () returned 0x2 [0210.009] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0210.009] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.*" (normalized: "c:\\windows\\syswow64\\ping.*"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x608540 [0210.009] GetProcessHeap () returned 0x5f0000 [0210.009] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x5f7688, Size=0x4) returned 0x5f0990 [0210.009] FindClose (in: hFindFile=0x608540 | out: hFindFile=0x608540) returned 1 [0210.009] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.COM" (normalized: "c:\\windows\\syswow64\\ping.com"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0xffffffff [0210.011] GetLastError () returned 0x2 [0210.011] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.EXE" (normalized: "c:\\windows\\syswow64\\ping.exe"), fInfoLevelId=0x1, lpFindFileData=0x19f2a8, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19f2a8) returned 0x608540 [0210.011] FindClose (in: hFindFile=0x608540 | out: hFindFile=0x608540) returned 1 [0210.011] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0210.011] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0210.011] GetConsoleTitleW (in: lpConsoleTitle=0x19f2f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0210.012] _wcsicmp (_String1="PING", _String2="DIR") returned 12 [0210.012] _wcsicmp (_String1="PING", _String2="ERASE") returned 11 [0210.012] _wcsicmp (_String1="PING", _String2="DEL") returned 12 [0210.012] _wcsicmp (_String1="PING", _String2="TYPE") returned -4 [0210.012] _wcsicmp (_String1="PING", _String2="COPY") returned 13 [0210.012] _wcsicmp (_String1="PING", _String2="CD") returned 13 [0210.012] _wcsicmp (_String1="PING", _String2="CHDIR") returned 13 [0210.012] _wcsicmp (_String1="PING", _String2="RENAME") returned -2 [0210.012] _wcsicmp (_String1="PING", _String2="REN") returned -2 [0210.012] _wcsicmp (_String1="PING", _String2="ECHO") returned 11 [0210.012] _wcsicmp (_String1="PING", _String2="SET") returned -3 [0210.012] _wcsicmp (_String1="PING", _String2="PAUSE") returned 8 [0210.012] _wcsicmp (_String1="PING", _String2="DATE") returned 12 [0210.012] _wcsicmp (_String1="PING", _String2="TIME") returned -4 [0210.012] _wcsicmp (_String1="PING", _String2="PROMPT") returned -9 [0210.012] _wcsicmp (_String1="PING", _String2="MD") returned 3 [0210.012] _wcsicmp (_String1="PING", _String2="MKDIR") returned 3 [0210.012] _wcsicmp (_String1="PING", _String2="RD") returned -2 [0210.012] _wcsicmp (_String1="PING", _String2="RMDIR") returned -2 [0210.012] _wcsicmp (_String1="PING", _String2="PATH") returned 8 [0210.012] _wcsicmp (_String1="PING", _String2="GOTO") returned 9 [0210.013] _wcsicmp (_String1="PING", _String2="SHIFT") returned -3 [0210.013] _wcsicmp (_String1="PING", _String2="CLS") returned 13 [0210.013] _wcsicmp (_String1="PING", _String2="CALL") returned 13 [0210.013] _wcsicmp (_String1="PING", _String2="VERIFY") returned -6 [0210.013] _wcsicmp (_String1="PING", _String2="VER") returned -6 [0210.013] _wcsicmp (_String1="PING", _String2="VOL") returned -6 [0210.013] _wcsicmp (_String1="PING", _String2="EXIT") returned 11 [0210.013] _wcsicmp (_String1="PING", _String2="SETLOCAL") returned -3 [0210.013] _wcsicmp (_String1="PING", _String2="ENDLOCAL") returned 11 [0210.013] _wcsicmp (_String1="PING", _String2="TITLE") returned -4 [0210.013] _wcsicmp (_String1="PING", _String2="START") returned -3 [0210.013] _wcsicmp (_String1="PING", _String2="DPATH") returned 12 [0210.013] _wcsicmp (_String1="PING", _String2="KEYS") returned 5 [0210.013] _wcsicmp (_String1="PING", _String2="MOVE") returned 3 [0210.013] _wcsicmp (_String1="PING", _String2="PUSHD") returned -12 [0210.013] _wcsicmp (_String1="PING", _String2="POPD") returned -6 [0210.013] _wcsicmp (_String1="PING", _String2="ASSOC") returned 15 [0210.013] _wcsicmp (_String1="PING", _String2="FTYPE") returned 10 [0210.013] _wcsicmp (_String1="PING", _String2="BREAK") returned 14 [0210.013] _wcsicmp (_String1="PING", _String2="COLOR") returned 13 [0210.013] _wcsicmp (_String1="PING", _String2="MKLINK") returned 3 [0210.013] _wcsicmp (_String1="PING", _String2="DIR") returned 12 [0210.013] _wcsicmp (_String1="PING", _String2="ERASE") returned 11 [0210.013] _wcsicmp (_String1="PING", _String2="DEL") returned 12 [0210.013] _wcsicmp (_String1="PING", _String2="TYPE") returned -4 [0210.014] _wcsicmp (_String1="PING", _String2="COPY") returned 13 [0210.014] _wcsicmp (_String1="PING", _String2="CD") returned 13 [0210.014] _wcsicmp (_String1="PING", _String2="CHDIR") returned 13 [0210.014] _wcsicmp (_String1="PING", _String2="RENAME") returned -2 [0210.014] _wcsicmp (_String1="PING", _String2="REN") returned -2 [0210.014] _wcsicmp (_String1="PING", _String2="ECHO") returned 11 [0210.014] _wcsicmp (_String1="PING", _String2="SET") returned -3 [0210.014] _wcsicmp (_String1="PING", _String2="PAUSE") returned 8 [0210.014] _wcsicmp (_String1="PING", _String2="DATE") returned 12 [0210.014] _wcsicmp (_String1="PING", _String2="TIME") returned -4 [0210.014] _wcsicmp (_String1="PING", _String2="PROMPT") returned -9 [0210.014] _wcsicmp (_String1="PING", _String2="MD") returned 3 [0210.014] _wcsicmp (_String1="PING", _String2="MKDIR") returned 3 [0210.014] _wcsicmp (_String1="PING", _String2="RD") returned -2 [0210.014] _wcsicmp (_String1="PING", _String2="RMDIR") returned -2 [0210.014] _wcsicmp (_String1="PING", _String2="PATH") returned 8 [0210.014] _wcsicmp (_String1="PING", _String2="GOTO") returned 9 [0210.014] _wcsicmp (_String1="PING", _String2="SHIFT") returned -3 [0210.014] _wcsicmp (_String1="PING", _String2="CLS") returned 13 [0210.014] _wcsicmp (_String1="PING", _String2="CALL") returned 13 [0210.014] _wcsicmp (_String1="PING", _String2="VERIFY") returned -6 [0210.014] _wcsicmp (_String1="PING", _String2="VER") returned -6 [0210.014] _wcsicmp (_String1="PING", _String2="VOL") returned -6 [0210.014] _wcsicmp (_String1="PING", _String2="EXIT") returned 11 [0210.014] _wcsicmp (_String1="PING", _String2="SETLOCAL") returned -3 [0210.014] _wcsicmp (_String1="PING", _String2="ENDLOCAL") returned 11 [0210.014] _wcsicmp (_String1="PING", _String2="TITLE") returned -4 [0210.015] _wcsicmp (_String1="PING", _String2="START") returned -3 [0210.015] _wcsicmp (_String1="PING", _String2="DPATH") returned 12 [0210.015] _wcsicmp (_String1="PING", _String2="KEYS") returned 5 [0210.015] _wcsicmp (_String1="PING", _String2="MOVE") returned 3 [0210.015] _wcsicmp (_String1="PING", _String2="PUSHD") returned -12 [0210.015] _wcsicmp (_String1="PING", _String2="POPD") returned -6 [0210.015] _wcsicmp (_String1="PING", _String2="ASSOC") returned 15 [0210.015] _wcsicmp (_String1="PING", _String2="FTYPE") returned 10 [0210.015] _wcsicmp (_String1="PING", _String2="BREAK") returned 14 [0210.015] _wcsicmp (_String1="PING", _String2="COLOR") returned 13 [0210.015] _wcsicmp (_String1="PING", _String2="MKLINK") returned 3 [0210.015] _wcsicmp (_String1="PING", _String2="FOR") returned 10 [0210.015] _wcsicmp (_String1="PING", _String2="IF") returned 7 [0210.015] _wcsicmp (_String1="PING", _String2="REM") returned -2 [0210.015] GetProcessHeap () returned 0x5f0000 [0210.015] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x210) returned 0x608540 [0210.015] GetProcessHeap () returned 0x5f0000 [0210.015] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x34) returned 0x608758 [0210.015] _wcsnicmp (_String1="PING", _String2="cmd ", _MaxCount=0x4) returned 13 [0210.015] GetProcessHeap () returned 0x5f0000 [0210.015] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x418) returned 0x608798 [0210.016] SetErrorMode (uMode=0x0) returned 0x0 [0210.016] SetErrorMode (uMode=0x1) returned 0x0 [0210.016] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6087a0, lpFilePart=0x19edfc | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpFilePart=0x19edfc*="Desktop") returned 0x1d [0210.016] SetErrorMode (uMode=0x0) returned 0x1 [0210.016] GetProcessHeap () returned 0x5f0000 [0210.016] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608798, Size=0x4e) returned 0x608798 [0210.016] GetProcessHeap () returned 0x5f0000 [0210.016] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608798) returned 0x4e [0210.016] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x63 [0210.016] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0210.016] GetProcessHeap () returned 0x5f0000 [0210.016] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x110) returned 0x6087f0 [0210.016] GetProcessHeap () returned 0x5f0000 [0210.016] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x218) returned 0x608908 [0210.016] GetProcessHeap () returned 0x5f0000 [0210.017] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608908, Size=0x112) returned 0x608908 [0210.017] GetProcessHeap () returned 0x5f0000 [0210.017] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608908) returned 0x112 [0210.017] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0210.017] GetProcessHeap () returned 0x5f0000 [0210.017] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xe0) returned 0x608a28 [0210.017] GetProcessHeap () returned 0x5f0000 [0210.017] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608a28, Size=0x76) returned 0x608a28 [0210.017] GetProcessHeap () returned 0x5f0000 [0210.017] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608a28) returned 0x76 [0210.017] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0210.017] FindFirstFileExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\PING.*" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\ping.*"), fInfoLevelId=0x1, lpFindFileData=0x19eb88, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eb88) returned 0xffffffff [0210.017] GetLastError () returned 0x2 [0210.017] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0210.017] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.*" (normalized: "c:\\windows\\syswow64\\ping.*"), fInfoLevelId=0x1, lpFindFileData=0x19eb88, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eb88) returned 0x608aa8 [0210.018] FindClose (in: hFindFile=0x608aa8 | out: hFindFile=0x608aa8) returned 1 [0210.018] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.COM" (normalized: "c:\\windows\\syswow64\\ping.com"), fInfoLevelId=0x1, lpFindFileData=0x19eb88, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eb88) returned 0xffffffff [0210.018] GetLastError () returned 0x2 [0210.018] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\PING.EXE" (normalized: "c:\\windows\\syswow64\\ping.exe"), fInfoLevelId=0x1, lpFindFileData=0x19eb88, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eb88) returned 0x608aa8 [0210.018] FindClose (in: hFindFile=0x608aa8 | out: hFindFile=0x608aa8) returned 1 [0210.018] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0210.018] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0210.018] GetConsoleTitleW (in: lpConsoleTitle=0x19f07c, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0210.019] InitializeProcThreadAttributeList (in: lpAttributeList=0x19efa8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19ef8c | out: lpAttributeList=0x19efa8, lpSize=0x19ef8c) returned 1 [0210.019] UpdateProcThreadAttribute (in: lpAttributeList=0x19efa8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19ef94, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19efa8, lpPreviousValue=0x0) returned 1 [0210.019] GetStartupInfoW (in: lpStartupInfo=0x19efe0 | out: lpStartupInfo=0x19efe0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0210.019] GetProcessHeap () returned 0x5f0000 [0210.019] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x18) returned 0x5f76e8 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0210.020] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0210.021] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0210.022] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0210.022] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0210.022] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0210.022] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0210.022] GetProcessHeap () returned 0x5f0000 [0210.022] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f76e8) returned 1 [0210.022] GetProcessHeap () returned 0x5f0000 [0210.022] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa) returned 0x607fe8 [0210.022] lstrcmpW (lpString1="\\PING.EXE", lpString2="\\XCOPY.EXE") returned -1 [0210.025] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\PING.EXE", lpCommandLine="PING 127.0.0.1 -n 2 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\RDhJ0CNFevzX\\Desktop", lpStartupInfo=0x19ef30*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="PING 127.0.0.1 -n 2 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19ef7c | out: lpCommandLine="PING 127.0.0.1 -n 2 ", lpProcessInformation=0x19ef7c*(hProcess=0xb8, hThread=0xb0, dwProcessId=0x1268, dwThreadId=0xee4)) returned 1 [0210.196] CloseHandle (hObject=0xb0) returned 1 [0210.196] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0210.196] GetProcessHeap () returned 0x5f0000 [0210.197] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f9dd0) returned 1 [0210.197] GetEnvironmentStringsW () returned 0x5f9dd0* [0210.197] GetProcessHeap () returned 0x5f0000 [0210.197] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa76) returned 0x608f98 [0210.197] memcpy (in: _Dst=0x608f98, _Src=0x5f9dd0, _Size=0xa76 | out: _Dst=0x608f98) returned 0x608f98 [0210.197] FreeEnvironmentStringsA (penv="=") returned 1 [0210.199] WaitForSingleObject (hHandle=0xb8, dwMilliseconds=0xffffffff) returned 0x0 [0216.399] GetExitCodeProcess (in: hProcess=0xb8, lpExitCode=0x19ef14 | out: lpExitCode=0x19ef14*=0x0) returned 1 [0216.400] CloseHandle (hObject=0xb8) returned 1 [0216.400] _vsnwprintf (in: _Buffer=0x19effc, _BufferCount=0x13, _Format="%08X", _ArgList=0x19ef1c | out: _Buffer="00000000") returned 8 [0216.400] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0216.400] GetProcessHeap () returned 0x5f0000 [0216.400] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608f98) returned 1 [0216.400] GetEnvironmentStringsW () returned 0x60a4c0* [0216.400] GetProcessHeap () returned 0x5f0000 [0216.400] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa9c) returned 0x5fb250 [0216.400] memcpy (in: _Dst=0x5fb250, _Src=0x60a4c0, _Size=0xa9c | out: _Dst=0x5fb250) returned 0x5fb250 [0216.400] FreeEnvironmentStringsA (penv="=") returned 1 [0216.400] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0216.400] GetProcessHeap () returned 0x5f0000 [0216.400] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5fb250) returned 1 [0216.400] GetEnvironmentStringsW () returned 0x60a4c0* [0216.401] GetProcessHeap () returned 0x5f0000 [0216.401] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xa9c) returned 0x5fb250 [0216.401] memcpy (in: _Dst=0x5fb250, _Src=0x60a4c0, _Size=0xa9c | out: _Dst=0x5fb250) returned 0x5fb250 [0216.401] FreeEnvironmentStringsA (penv="=") returned 1 [0216.401] GetProcessHeap () returned 0x5f0000 [0216.401] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x607fe8) returned 1 [0216.401] DeleteProcThreadAttributeList (in: lpAttributeList=0x19efa8 | out: lpAttributeList=0x19efa8) [0216.401] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.401] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x7) returned 1 [0216.401] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.401] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xe5f40c | out: lpMode=0xe5f40c) returned 1 [0216.402] _get_osfhandle (_FileHandle=0) returned 0x38 [0216.402] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xe5f408 | out: lpMode=0xe5f408) returned 1 [0216.402] SetConsoleInputExeNameW () returned 0x1 [0216.402] GetConsoleOutputCP () returned 0x1b5 [0216.402] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xe5f460 | out: lpCPInfo=0xe5f460) returned 1 [0216.402] SetThreadUILanguage (LangId=0x0) returned 0x409 [0216.403] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\install.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x19f73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb8 [0216.403] _open_osfhandle (_OSFileHandle=0xb8, _Flags=8) returned 3 [0216.403] _get_osfhandle (_FileHandle=3) returned 0xb8 [0216.403] SetFilePointer (in: hFile=0xb8, lDistanceToMove=22, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0216.403] GetProcessHeap () returned 0x5f0000 [0216.403] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608a28) returned 1 [0216.404] GetProcessHeap () returned 0x5f0000 [0216.404] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608908) returned 1 [0216.404] GetProcessHeap () returned 0x5f0000 [0216.404] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x6087f0) returned 1 [0216.404] GetProcessHeap () returned 0x5f0000 [0216.404] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608798) returned 1 [0216.404] GetProcessHeap () returned 0x5f0000 [0216.404] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608758) returned 1 [0216.404] GetProcessHeap () returned 0x5f0000 [0216.405] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608540) returned 1 [0216.405] GetProcessHeap () returned 0x5f0000 [0216.405] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x6084c0) returned 1 [0216.405] GetProcessHeap () returned 0x5f0000 [0216.405] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x6083a0) returned 1 [0216.405] GetProcessHeap () returned 0x5f0000 [0216.405] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608288) returned 1 [0216.405] GetProcessHeap () returned 0x5f0000 [0216.406] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608230) returned 1 [0216.406] GetProcessHeap () returned 0x5f0000 [0216.406] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x6081f8) returned 1 [0216.406] GetProcessHeap () returned 0x5f0000 [0216.406] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f76a8) returned 1 [0216.406] GetProcessHeap () returned 0x5f0000 [0216.406] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608198) returned 1 [0216.407] _get_osfhandle (_FileHandle=3) returned 0xb8 [0216.407] SetFilePointer (in: hFile=0xb8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x16 [0216.407] ReadFile (in: hFile=0xb8, lpBuffer=0xe6b960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x19f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe6b960*, lpNumberOfBytesRead=0x19f6c4*=0x44, lpOverlapped=0x0) returned 1 [0216.408] SetFilePointer (in: hFile=0xb8, lDistanceToMove=74, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4a [0216.416] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0xe6b960, cbMultiByte=52, lpWideCharStr=0xe567e0, cchWideChar=8191 | out: lpWideCharStr="start \"\" \"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\"\r\n") returned 52 [0216.416] _get_osfhandle (_FileHandle=3) returned 0xb8 [0216.416] GetFileType (hFile=0xb8) returned 0x1 [0216.416] _get_osfhandle (_FileHandle=3) returned 0xb8 [0216.416] SetFilePointer (in: hFile=0xb8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x4a [0216.416] GetProcessHeap () returned 0x5f0000 [0216.416] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x400a) returned 0x60a4c0 [0216.416] GetProcessHeap () returned 0x5f0000 [0216.416] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x60a4c0) returned 1 [0216.416] _wcsicmp (_String1="start", _String2=")") returned 74 [0216.417] _wcsicmp (_String1="FOR", _String2="start") returned -13 [0216.417] _wcsicmp (_String1="FOR/?", _String2="start") returned -13 [0216.417] _wcsicmp (_String1="IF", _String2="start") returned -10 [0216.417] _wcsicmp (_String1="IF/?", _String2="start") returned -10 [0216.417] _wcsicmp (_String1="REM", _String2="start") returned -1 [0216.417] _wcsicmp (_String1="REM/?", _String2="start") returned -1 [0216.417] GetProcessHeap () returned 0x5f0000 [0216.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x58) returned 0x608bd8 [0216.417] GetProcessHeap () returned 0x5f0000 [0216.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x14) returned 0x5f7588 [0216.417] GetProcessHeap () returned 0x5f0000 [0216.417] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x64) returned 0x608c38 [0216.418] _tell (_FileHandle=3) returned 74 [0216.418] _close (_FileHandle=3) returned 0 [0216.419] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x19f4d0 | out: _Buffer="\r\n") returned 2 [0216.419] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.419] GetFileType (hFile=0x3c) returned 0x2 [0216.419] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.419] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4a8 | out: lpMode=0x19f4a8) returned 1 [0216.420] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.420] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x19f4c0, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f4c0*=0x2) returned 1 [0216.420] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x4 [0216.420] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xe67720 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0216.420] _vsnwprintf (in: _Buffer=0xe5abe0, _BufferCount=0x3fe, _Format="%s", _ArgList=0x19f4cc | out: _Buffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 29 [0216.420] _vsnwprintf (in: _Buffer=0xe5ac1a, _BufferCount=0x3e1, _Format="%c", _ArgList=0x19f4cc | out: _Buffer=">") returned 1 [0216.420] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.420] GetFileType (hFile=0x3c) returned 0x2 [0216.421] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.421] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4ac | out: lpMode=0x19f4ac) returned 1 [0216.421] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.421] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe5abe0*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x19f4c4, lpReserved=0x0 | out: lpBuffer=0xe5abe0*, lpNumberOfCharsWritten=0x19f4c4*=0x1e) returned 1 [0216.422] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.422] GetFileType (hFile=0x3c) returned 0x2 [0216.422] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.422] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f74c | out: lpMode=0x19f74c) returned 1 [0216.423] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.423] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x5f7590*, nNumberOfCharsToWrite=0x5, lpNumberOfCharsWritten=0x19f764, lpReserved=0x0 | out: lpBuffer=0x5f7590*, lpNumberOfCharsWritten=0x19f764*=0x5) returned 1 [0216.423] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x19f76c | out: _Buffer=" \"\" \"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\" ") returned 46 [0216.423] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.423] GetFileType (hFile=0x3c) returned 0x2 [0216.423] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.423] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f744 | out: lpMode=0x19f744) returned 1 [0216.424] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.424] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2e, lpNumberOfCharsWritten=0x19f75c, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f75c*=0x2e) returned 1 [0216.429] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x19f780 | out: _Buffer="\r\n") returned 2 [0216.429] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.429] GetFileType (hFile=0x3c) returned 0x2 [0216.429] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.429] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f758 | out: lpMode=0x19f758) returned 1 [0216.429] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.429] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x19f770, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f770*=0x2) returned 1 [0216.430] _wcsicmp (_String1="start", _String2="DIR") returned 15 [0216.430] _wcsicmp (_String1="start", _String2="ERASE") returned 14 [0216.430] _wcsicmp (_String1="start", _String2="DEL") returned 15 [0216.430] _wcsicmp (_String1="start", _String2="TYPE") returned -1 [0216.430] _wcsicmp (_String1="start", _String2="COPY") returned 16 [0216.430] _wcsicmp (_String1="start", _String2="CD") returned 16 [0216.430] _wcsicmp (_String1="start", _String2="CHDIR") returned 16 [0216.430] _wcsicmp (_String1="start", _String2="RENAME") returned 1 [0216.430] _wcsicmp (_String1="start", _String2="REN") returned 1 [0216.430] _wcsicmp (_String1="start", _String2="ECHO") returned 14 [0216.430] _wcsicmp (_String1="start", _String2="SET") returned 15 [0216.430] _wcsicmp (_String1="start", _String2="PAUSE") returned 3 [0216.430] _wcsicmp (_String1="start", _String2="DATE") returned 15 [0216.430] _wcsicmp (_String1="start", _String2="TIME") returned -1 [0216.430] _wcsicmp (_String1="start", _String2="PROMPT") returned 3 [0216.430] _wcsicmp (_String1="start", _String2="MD") returned 6 [0216.430] _wcsicmp (_String1="start", _String2="MKDIR") returned 6 [0216.430] _wcsicmp (_String1="start", _String2="RD") returned 1 [0216.430] _wcsicmp (_String1="start", _String2="RMDIR") returned 1 [0216.430] _wcsicmp (_String1="start", _String2="PATH") returned 3 [0216.430] _wcsicmp (_String1="start", _String2="GOTO") returned 12 [0216.430] _wcsicmp (_String1="start", _String2="SHIFT") returned 12 [0216.430] _wcsicmp (_String1="start", _String2="CLS") returned 16 [0216.430] _wcsicmp (_String1="start", _String2="CALL") returned 16 [0216.430] _wcsicmp (_String1="start", _String2="VERIFY") returned -3 [0216.431] _wcsicmp (_String1="start", _String2="VER") returned -3 [0216.431] _wcsicmp (_String1="start", _String2="VOL") returned -3 [0216.431] _wcsicmp (_String1="start", _String2="EXIT") returned 14 [0216.431] _wcsicmp (_String1="start", _String2="SETLOCAL") returned 15 [0216.431] _wcsicmp (_String1="start", _String2="ENDLOCAL") returned 14 [0216.431] _wcsicmp (_String1="start", _String2="TITLE") returned -1 [0216.431] _wcsicmp (_String1="start", _String2="START") returned 0 [0216.431] GetConsoleTitleW (in: lpConsoleTitle=0x19f2f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0216.431] _wcsicmp (_String1="start", _String2="DIR") returned 15 [0216.431] _wcsicmp (_String1="start", _String2="ERASE") returned 14 [0216.431] _wcsicmp (_String1="start", _String2="DEL") returned 15 [0216.431] _wcsicmp (_String1="start", _String2="TYPE") returned -1 [0216.431] _wcsicmp (_String1="start", _String2="COPY") returned 16 [0216.431] _wcsicmp (_String1="start", _String2="CD") returned 16 [0216.431] _wcsicmp (_String1="start", _String2="CHDIR") returned 16 [0216.431] _wcsicmp (_String1="start", _String2="RENAME") returned 1 [0216.431] _wcsicmp (_String1="start", _String2="REN") returned 1 [0216.431] _wcsicmp (_String1="start", _String2="ECHO") returned 14 [0216.432] _wcsicmp (_String1="start", _String2="SET") returned 15 [0216.432] _wcsicmp (_String1="start", _String2="PAUSE") returned 3 [0216.432] _wcsicmp (_String1="start", _String2="DATE") returned 15 [0216.432] _wcsicmp (_String1="start", _String2="TIME") returned -1 [0216.432] _wcsicmp (_String1="start", _String2="PROMPT") returned 3 [0216.432] _wcsicmp (_String1="start", _String2="MD") returned 6 [0216.432] _wcsicmp (_String1="start", _String2="MKDIR") returned 6 [0216.432] _wcsicmp (_String1="start", _String2="RD") returned 1 [0216.432] _wcsicmp (_String1="start", _String2="RMDIR") returned 1 [0216.432] _wcsicmp (_String1="start", _String2="PATH") returned 3 [0216.432] _wcsicmp (_String1="start", _String2="GOTO") returned 12 [0216.432] _wcsicmp (_String1="start", _String2="SHIFT") returned 12 [0216.432] _wcsicmp (_String1="start", _String2="CLS") returned 16 [0216.432] _wcsicmp (_String1="start", _String2="CALL") returned 16 [0216.432] _wcsicmp (_String1="start", _String2="VERIFY") returned -3 [0216.432] _wcsicmp (_String1="start", _String2="VER") returned -3 [0216.432] _wcsicmp (_String1="start", _String2="VOL") returned -3 [0216.432] _wcsicmp (_String1="start", _String2="EXIT") returned 14 [0216.432] _wcsicmp (_String1="start", _String2="SETLOCAL") returned 15 [0216.432] _wcsicmp (_String1="start", _String2="ENDLOCAL") returned 14 [0216.432] _wcsicmp (_String1="start", _String2="TITLE") returned -1 [0216.432] _wcsicmp (_String1="start", _String2="START") returned 0 [0216.432] GetProcessHeap () returned 0x5f0000 [0216.433] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xc0) returned 0x608ca8 [0216.433] GetProcessHeap () returned 0x5f0000 [0216.433] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608ca8, Size=0x64) returned 0x608ca8 [0216.433] GetProcessHeap () returned 0x5f0000 [0216.433] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608ca8) returned 0x64 [0216.433] GetProcessHeap () returned 0x5f0000 [0216.433] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x70) returned 0x608d18 [0216.434] GetStdHandle (nStdHandle=0xfffffff6) returned 0x38 [0216.435] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0216.435] GetStdHandle (nStdHandle=0xfffffff4) returned 0x40 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="DIR") returned -1 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="ERASE") returned -2 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="DEL") returned -1 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="TYPE") returned -17 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="COPY") returned -53 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="CD") returned -42 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="CHDIR") returned -46 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="RENAME") returned -15 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="REN") returned -15 [0216.437] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="ECHO") returned -2 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="SET") returned -16 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="PAUSE") returned -13 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="DATE") returned -1 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="TIME") returned -17 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="PROMPT") returned -13 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="MD") returned -10 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="MKDIR") returned -10 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="RD") returned -15 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="RMDIR") returned -15 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="PATH") returned -13 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="GOTO") returned -4 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="SHIFT") returned -16 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="CLS") returned -50 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="CALL") returned -39 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="VERIFY") returned -19 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="VER") returned -19 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="VOL") returned -19 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="EXIT") returned -2 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="SETLOCAL") returned -16 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="ENDLOCAL") returned -2 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="TITLE") returned -17 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="START") returned -16 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="DPATH") returned -1 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="KEYS") returned -8 [0216.438] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="MOVE") returned -10 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="PUSHD") returned -13 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="POPD") returned -13 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="ASSOC") returned 2 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="FTYPE") returned -3 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="BREAK") returned 1 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="COLOR") returned -53 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="MKLINK") returned -10 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="FOR") returned -3 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="IF") returned -6 [0216.439] _wcsicmp (_String1="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", _String2="REM") returned -15 [0216.439] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0216.439] GetProcessHeap () returned 0x5f0000 [0216.439] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x418) returned 0x608198 [0216.439] SetErrorMode (uMode=0x0) returned 0x0 [0216.439] SetErrorMode (uMode=0x1) returned 0x0 [0216.439] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\remcos\\.", nBufferLength=0x208, lpBuffer=0x6081a0, lpFilePart=0x182b24 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\remcos", lpFilePart=0x182b24*="remcos") returned 0x1c [0216.439] SetErrorMode (uMode=0x0) returned 0x1 [0216.439] GetProcessHeap () returned 0x5f0000 [0216.439] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608198, Size=0x58) returned 0x608198 [0216.439] GetProcessHeap () returned 0x5f0000 [0216.439] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608198) returned 0x58 [0216.440] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\RDhJ0CNFevzX\\remcos\\.") returned 1 [0216.440] GetProcessHeap () returned 0x5f0000 [0216.440] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x48) returned 0x608d90 [0216.443] GetProcessHeap () returned 0x5f0000 [0216.443] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x84) returned 0x6081f8 [0216.443] GetProcessHeap () returned 0x5f0000 [0216.443] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x6081f8, Size=0x48) returned 0x6081f8 [0216.443] GetProcessHeap () returned 0x5f0000 [0216.443] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x6081f8) returned 0x48 [0216.443] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0xe5f4a0, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0216.443] GetProcessHeap () returned 0x5f0000 [0216.443] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0xe0) returned 0x608248 [0216.443] GetProcessHeap () returned 0x5f0000 [0216.443] RtlReAllocateHeap (Heap=0x5f0000, Flags=0x0, Ptr=0x608248, Size=0x76) returned 0x608248 [0216.444] GetProcessHeap () returned 0x5f0000 [0216.444] RtlSizeHeap (HeapHandle=0x5f0000, Flags=0x0, MemoryPointer=0x608248) returned 0x76 [0216.444] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0216.444] FindFirstFileExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe"), fInfoLevelId=0x1, lpFindFileData=0x1828d0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1828d0) returned 0x608de0 [0216.444] FindClose (in: hFindFile=0x608de0 | out: hFindFile=0x608de0) returned 1 [0216.445] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0216.445] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0216.445] GetStartupInfoW (in: lpStartupInfo=0x182e28 | out: lpStartupInfo=0x182e28*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0216.445] InitializeProcThreadAttributeList (in: lpAttributeList=0x0, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x182dc4 | out: lpAttributeList=0x0, lpSize=0x182dc4) returned 0 [0216.445] GetLastError () returned 0x7a [0216.445] GetProcessHeap () returned 0x5f0000 [0216.445] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x2c) returned 0x608de0 [0216.445] InitializeProcThreadAttributeList (in: lpAttributeList=0x608de0, dwAttributeCount=0x2, dwFlags=0x0, lpSize=0x182dc4 | out: lpAttributeList=0x608de0, lpSize=0x182dc4) returned 1 [0216.445] UpdateProcThreadAttribute (in: lpAttributeList=0x608de0, dwFlags=0x0, Attribute=0x60001, lpValue=0x182ddc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x608de0, lpPreviousValue=0x0) returned 1 [0216.445] CreateProcessW (in: lpApplicationName="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe", lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80410, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x182de0*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x38, hStdOutput=0x3c, hStdError=0x40), lpProcessInformation=0x182dcc | out: lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\" ", lpProcessInformation=0x182dcc*(hProcess=0xb0, hThread=0xb8, dwProcessId=0x11e8, dwThreadId=0x1198)) returned 1 [0216.527] DeleteProcThreadAttributeList (in: lpAttributeList=0x608de0 | out: lpAttributeList=0x608de0) [0216.527] GetProcessHeap () returned 0x5f0000 [0216.527] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608de0) returned 1 [0216.527] GetLastError () returned 0x0 [0216.528] ResumeThread (hThread=0xb8) returned 0x0 [0216.528] CloseHandle (hObject=0xb8) returned 1 [0216.528] CloseHandle (hObject=0xb0) returned 1 [0216.528] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.528] SetConsoleMode (hConsoleHandle=0x3c, dwMode=0x7) returned 1 [0216.619] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.619] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xe5f40c | out: lpMode=0xe5f40c) returned 1 [0216.718] _get_osfhandle (_FileHandle=0) returned 0x38 [0216.718] GetConsoleMode (in: hConsoleHandle=0x38, lpMode=0xe5f408 | out: lpMode=0xe5f408) returned 1 [0216.802] SetConsoleInputExeNameW () returned 0x1 [0216.802] GetConsoleOutputCP () returned 0x1b5 [0216.921] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0xe5f460 | out: lpCPInfo=0xe5f460) returned 1 [0216.922] SetThreadUILanguage (LangId=0x0) returned 0x409 [0217.031] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\install.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x19f73c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xb0 [0217.031] _open_osfhandle (_OSFileHandle=0xb0, _Flags=8) returned 3 [0217.031] _get_osfhandle (_FileHandle=3) returned 0xb0 [0217.031] SetFilePointer (in: hFile=0xb0, lDistanceToMove=74, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4a [0217.031] GetProcessHeap () returned 0x5f0000 [0217.031] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608248) returned 1 [0217.031] GetProcessHeap () returned 0x5f0000 [0217.031] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x6081f8) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608d90) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608198) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608d18) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608ca8) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608c38) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x5f7588) returned 1 [0217.032] GetProcessHeap () returned 0x5f0000 [0217.032] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x608bd8) returned 1 [0217.032] _get_osfhandle (_FileHandle=3) returned 0xb0 [0217.032] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x4a [0217.032] ReadFile (in: hFile=0xb0, lpBuffer=0xe6b960, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x19f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe6b960*, lpNumberOfBytesRead=0x19f6c4*=0x10, lpOverlapped=0x0) returned 1 [0217.032] SetFilePointer (in: hFile=0xb0, lDistanceToMove=83, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x53 [0217.032] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0xe6b960, cbMultiByte=9, lpWideCharStr=0xe567e0, cchWideChar=8191 | out: lpWideCharStr="del %0 \r\n\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\"\r\n") returned 9 [0217.033] _get_osfhandle (_FileHandle=3) returned 0xb0 [0217.033] GetFileType (hFile=0xb0) returned 0x1 [0217.033] _get_osfhandle (_FileHandle=3) returned 0xb0 [0217.033] SetFilePointer (in: hFile=0xb0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x53 [0217.033] GetProcessHeap () returned 0x5f0000 [0217.033] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x400a) returned 0x60a4c0 [0217.033] GetProcessHeap () returned 0x5f0000 [0217.033] RtlFreeHeap (HeapHandle=0x5f0000, Flags=0x0, BaseAddress=0x60a4c0) returned 1 [0217.033] _wcsicmp (_String1="del", _String2=")") returned 59 [0217.033] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0217.033] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0217.033] _wcsicmp (_String1="IF", _String2="del") returned 5 [0217.033] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0217.033] _wcsicmp (_String1="REM", _String2="del") returned 14 [0217.033] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0217.033] GetProcessHeap () returned 0x5f0000 [0217.033] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x58) returned 0x5fa7d8 [0217.033] GetProcessHeap () returned 0x5f0000 [0217.033] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x10) returned 0x607ec8 [0217.034] GetProcessHeap () returned 0x5f0000 [0217.034] RtlAllocateHeap (HeapHandle=0x5f0000, Flags=0x8, Size=0x72) returned 0x5f81e8 [0217.034] _tell (_FileHandle=3) returned 83 [0217.034] _close (_FileHandle=3) returned 0 [0217.034] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x19f4d0 | out: _Buffer="\r\n") returned 2 [0217.034] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.035] GetFileType (hFile=0x3c) returned 0x2 [0217.035] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0217.035] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4a8 | out: lpMode=0x19f4a8) returned 1 [0217.169] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.169] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe67940*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x19f4c0, lpReserved=0x0 | out: lpBuffer=0xe67940*, lpNumberOfCharsWritten=0x19f4c0*=0x2) returned 1 [0217.265] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0xe67720 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 0x1d [0217.265] _vsnwprintf (in: _Buffer=0xe5abe0, _BufferCount=0x3fe, _Format="%s", _ArgList=0x19f4cc | out: _Buffer="C:\\Users\\RDhJ0CNFevzX\\Desktop") returned 29 [0217.266] _vsnwprintf (in: _Buffer=0xe5ac1a, _BufferCount=0x3e1, _Format="%c", _ArgList=0x19f4cc | out: _Buffer=">") returned 1 [0217.266] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.266] GetFileType (hFile=0x3c) returned 0x2 [0217.266] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0217.266] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f4ac | out: lpMode=0x19f4ac) returned 1 [0217.358] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.358] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0xe5abe0*, nNumberOfCharsToWrite=0x1e, lpNumberOfCharsWritten=0x19f4c4, lpReserved=0x0 | out: lpBuffer=0xe5abe0*, lpNumberOfCharsWritten=0x19f4c4*=0x1e) returned 1 [0217.595] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.595] GetFileType (hFile=0x3c) returned 0x2 [0217.595] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0217.595] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0x19f74c | out: lpMode=0x19f74c) returned 1 [0217.759] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.759] WriteConsoleW (in: hConsoleOutput=0x3c, lpBuffer=0x607ed0*, nNumberOfCharsToWrite=0x3, lpNumberOfCharsWritten=0x19f764, lpReserved=0x0 | out: lpBuffer=0x607ed0*, lpNumberOfCharsWritten=0x19f764*=0x3) returned 1 [0217.962] _vsnwprintf (in: _Buffer=0xe67940, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x19f76c | out: _Buffer=" \"C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\install.bat\" ") returned 53 [0217.962] _get_osfhandle (_FileHandle=1) returned 0x3c [0217.962] GetFileType (hFile=0x3c) returned 0x2 [0217.962] GetStdHandle (nStdHandle=0xfffffff5) returned 0x3c [0217.962] GetConsoleMode (hConsoleHandle=0x3c, lpMode=0x19f744) Thread: id = 26 os_tid = 0x126c Thread: id = 35 os_tid = 0x134c Process: id = "4" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x26018000" os_pid = "0x1264" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x11f4" cmd_line = "\\??\\C:\\Windows\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\Windows" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 767 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 768 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 769 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 770 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 771 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 772 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 773 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 774 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 775 start_va = 0x7ff637930000 end_va = 0x7ff637940fff monitored = 0 entry_point = 0x7ff6379316b0 region_type = mapped_file name = "conhost.exe" filename = "\\Windows\\System32\\conhost.exe" (normalized: "c:\\windows\\system32\\conhost.exe") Region: id = 776 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 777 start_va = 0x600000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 778 start_va = 0x7ffa15160000 end_va = 0x7ffa1520cfff monitored = 0 entry_point = 0x7ffa151781a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 779 start_va = 0x7ffa13130000 end_va = 0x7ffa13317fff monitored = 0 entry_point = 0x7ffa1315ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 780 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 781 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 782 start_va = 0x90000 end_va = 0x14dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 783 start_va = 0x7ffa13cc0000 end_va = 0x7ffa13d5cfff monitored = 0 entry_point = 0x7ffa13cc78a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 784 start_va = 0x150000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 785 start_va = 0x600000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 786 start_va = 0x7a0000 end_va = 0x89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 787 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 788 start_va = 0x7ffa0a320000 end_va = 0x7ffa0a378fff monitored = 0 entry_point = 0x7ffa0a32fbf0 region_type = mapped_file name = "conhostv2.dll" filename = "\\Windows\\System32\\ConhostV2.dll" (normalized: "c:\\windows\\system32\\conhostv2.dll") Region: id = 789 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 790 start_va = 0x7ffa14340000 end_va = 0x7ffa145bcfff monitored = 0 entry_point = 0x7ffa14414970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 791 start_va = 0x7ffa145c0000 end_va = 0x7ffa146dbfff monitored = 0 entry_point = 0x7ffa146002b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 792 start_va = 0x7ffa13320000 end_va = 0x7ffa13389fff monitored = 0 entry_point = 0x7ffa13356d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 793 start_va = 0x7ffa13d80000 end_va = 0x7ffa13ed5fff monitored = 0 entry_point = 0x7ffa13d8a8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 794 start_va = 0x7ffa13ee0000 end_va = 0x7ffa14065fff monitored = 0 entry_point = 0x7ffa13f2ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 795 start_va = 0x1a0000 end_va = 0x1a6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 796 start_va = 0x7ffa13b70000 end_va = 0x7ffa13cb2fff monitored = 0 entry_point = 0x7ffa13b98210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 797 start_va = 0x7ffa14070000 end_va = 0x7ffa140cafff monitored = 0 entry_point = 0x7ffa140838b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 798 start_va = 0x7ffa141e0000 end_va = 0x7ffa1421afff monitored = 0 entry_point = 0x7ffa141e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 799 start_va = 0x7ffa147c0000 end_va = 0x7ffa14880fff monitored = 0 entry_point = 0x7ffa147e0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 800 start_va = 0x7ffa11220000 end_va = 0x7ffa113a5fff monitored = 0 entry_point = 0x7ffa1126d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 801 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 802 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 803 start_va = 0x600000 end_va = 0x787fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 804 start_va = 0x790000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000790000" filename = "" Region: id = 805 start_va = 0x8a0000 end_va = 0xa20fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 806 start_va = 0xa30000 end_va = 0x1e2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a30000" filename = "" Region: id = 807 start_va = 0x1e30000 end_va = 0x1ecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 808 start_va = 0x1e30000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e30000" filename = "" Region: id = 809 start_va = 0x1ec0000 end_va = 0x1ecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 810 start_va = 0x7ffa15210000 end_va = 0x7ffa1676efff monitored = 0 entry_point = 0x7ffa153711f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 811 start_va = 0x7ffa13390000 end_va = 0x7ffa133d2fff monitored = 0 entry_point = 0x7ffa133a4b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 812 start_va = 0x7ffa13520000 end_va = 0x7ffa13b63fff monitored = 0 entry_point = 0x7ffa136e64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 813 start_va = 0x7ffa15090000 end_va = 0x7ffa15136fff monitored = 0 entry_point = 0x7ffa150a58d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 814 start_va = 0x7ffa14ba0000 end_va = 0x7ffa14bf1fff monitored = 0 entry_point = 0x7ffa14baf530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 815 start_va = 0x7ffa12e10000 end_va = 0x7ffa12e1efff monitored = 0 entry_point = 0x7ffa12e13210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 816 start_va = 0x7ffa12e80000 end_va = 0x7ffa12f34fff monitored = 0 entry_point = 0x7ffa12ec22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 817 start_va = 0x7ffa12dc0000 end_va = 0x7ffa12e0afff monitored = 0 entry_point = 0x7ffa12dc35f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 818 start_va = 0x7ffa12d90000 end_va = 0x7ffa12da3fff monitored = 0 entry_point = 0x7ffa12d952e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 819 start_va = 0x7ffa11710000 end_va = 0x7ffa117a5fff monitored = 0 entry_point = 0x7ffa11735570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 820 start_va = 0x1ed0000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 821 start_va = 0x1f90000 end_va = 0x22c6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 822 start_va = 0x50000 end_va = 0x70fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 823 start_va = 0x1ed0000 end_va = 0x1f29fff monitored = 1 entry_point = 0x1ee53f0 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 824 start_va = 0x1f80000 end_va = 0x1f8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 825 start_va = 0x22d0000 end_va = 0x24e8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 826 start_va = 0x24f0000 end_va = 0x2700fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 827 start_va = 0x2710000 end_va = 0x2821fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 828 start_va = 0x2830000 end_va = 0x2a43fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 829 start_va = 0x2a50000 end_va = 0x2b5efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a50000" filename = "" Region: id = 830 start_va = 0x1e70000 end_va = 0x1eaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 831 start_va = 0x7ffa14a40000 end_va = 0x7ffa14b99fff monitored = 0 entry_point = 0x7ffa14a838e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 832 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 833 start_va = 0x2b60000 end_va = 0x2c1bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002b60000" filename = "" Region: id = 834 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 835 start_va = 0x7ffa10610000 end_va = 0x7ffa10631fff monitored = 0 entry_point = 0x7ffa10611a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 836 start_va = 0x7ffa11410000 end_va = 0x7ffa11422fff monitored = 0 entry_point = 0x7ffa11412760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 837 start_va = 0x7ffa12ba0000 end_va = 0x7ffa12bf5fff monitored = 0 entry_point = 0x7ffa12bb0bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 838 start_va = 0x60000 end_va = 0x66fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 839 start_va = 0x70000 end_va = 0x70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 840 start_va = 0x80000 end_va = 0x80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 841 start_va = 0x1d0000 end_va = 0x1d4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\System32\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\user32.dll.mui") Region: id = 842 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "conhostv2.dll.mui" filename = "\\Windows\\System32\\en-US\\ConhostV2.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\conhostv2.dll.mui") Region: id = 843 start_va = 0x1f0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 844 start_va = 0x7ffa080f0000 end_va = 0x7ffa08363fff monitored = 0 entry_point = 0x7ffa08160400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 845 start_va = 0x1eb0000 end_va = 0x1eb0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 846 start_va = 0x1ed0000 end_va = 0x1ed1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ed0000" filename = "" Thread: id = 22 os_tid = 0x1260 Thread: id = 23 os_tid = 0x125c Thread: id = 24 os_tid = 0x1258 Thread: id = 25 os_tid = 0x1244 Process: id = "5" image_name = "ping.exe" filename = "c:\\windows\\syswow64\\ping.exe" page_root = "0x131b3000" os_pid = "0x1268" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x11f4" cmd_line = "PING 127.0.0.1 -n 2 " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 864 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 865 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 866 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 867 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 868 start_va = 0xa0000 end_va = 0xdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 869 start_va = 0xe0000 end_va = 0xe3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 870 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 871 start_va = 0x100000 end_va = 0x101fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 872 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 873 start_va = 0xe40000 end_va = 0xe48fff monitored = 1 entry_point = 0xe43410 region_type = mapped_file name = "ping.exe" filename = "\\Windows\\SysWOW64\\PING.EXE" (normalized: "c:\\windows\\syswow64\\ping.exe") Region: id = 874 start_va = 0xe50000 end_va = 0x4e4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000e50000" filename = "" Region: id = 875 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 876 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 877 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 878 start_va = 0x7fff0000 end_va = 0x7dfa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 879 start_va = 0x7dfa16770000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007dfa16770000" filename = "" Region: id = 880 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 881 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 882 start_va = 0x400000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 883 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 884 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 885 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 886 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 887 start_va = 0x510000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 888 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 889 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 890 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 891 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 892 start_va = 0x110000 end_va = 0x1cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 893 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 894 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 895 start_va = 0x440000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 896 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 897 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 898 start_va = 0x73f30000 end_va = 0x73f8efff monitored = 0 entry_point = 0x73f34af0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 899 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 900 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 901 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 902 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 903 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 904 start_va = 0x71510000 end_va = 0x7153efff monitored = 0 entry_point = 0x7151bb70 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 905 start_va = 0x480000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 906 start_va = 0x71410000 end_va = 0x71417fff monitored = 0 entry_point = 0x71411fc0 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 907 start_va = 0x76900000 end_va = 0x76906fff monitored = 0 entry_point = 0x76901e10 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 908 start_va = 0x4c0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 909 start_va = 0x510000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 910 start_va = 0x5b0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 911 start_va = 0x71420000 end_va = 0x7146efff monitored = 0 entry_point = 0x7142d850 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 912 start_va = 0x6f890000 end_va = 0x6f897fff monitored = 0 entry_point = 0x6f8919c0 region_type = mapped_file name = "wshqos.dll" filename = "\\Windows\\SysWOW64\\wshqos.dll" (normalized: "c:\\windows\\syswow64\\wshqos.dll") Region: id = 913 start_va = 0x6f880000 end_va = 0x6f886fff monitored = 0 entry_point = 0x6f881be0 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 914 start_va = 0x6f870000 end_va = 0x6f876fff monitored = 0 entry_point = 0x6f8724b0 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 915 start_va = 0x30000 end_va = 0x32fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ping.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\ping.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\ping.exe.mui") Region: id = 916 start_va = 0x550000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 917 start_va = 0x6b0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Thread: id = 27 os_tid = 0xee4 [0211.693] GetModuleHandleA (lpModuleName=0x0) returned 0xe40000 [0211.693] __set_app_type (_Type=0x1) [0211.693] __p__fmode () returned 0x76b44d6c [0211.693] __p__commode () returned 0x76b45b1c [0211.693] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xe43580) returned 0x0 [0211.693] __wgetmainargs (in: _Argc=0xe440c8, _Argv=0xe440cc, _Env=0xe440d0, _DoWildCard=0, _StartInfo=0xe440dc | out: _Argc=0xe440c8, _Argv=0xe440cc, _Env=0xe440d0) returned 0 [0211.694] SetThreadUILanguage (LangId=0x0) returned 0x409 [0211.700] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0211.700] __iob_func () returned 0x76b41208 [0211.700] _fileno (_File=0x76b41228) returned 1 [0211.701] _get_osfhandle (_FileHandle=1) returned 0x3c [0211.701] GetFileType (hFile=0x3c) returned 0x2 [0211.701] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf564 | out: lpMode=0xdf564) returned 1 [0211.701] WSAStartup (in: wVersionRequired=0x2, lpWSAData=0xe45500 | out: lpWSAData=0xe45500) returned 0 [0211.707] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters", ulOptions=0x0, samDesired=0x1, phkResult=0xdf57c | out: phkResult=0xdf57c*=0xc0) returned 0x0 [0211.708] RegQueryValueExW (in: hKey=0xc0, lpValueName="DefaultTTL", lpReserved=0x0, lpType=0xdf570, lpData=0xdf578, lpcbData=0xdf574*=0x4 | out: lpType=0xdf570*=0x0, lpData=0xdf578*=0x0, lpcbData=0xdf574*=0x4) returned 0x2 [0211.708] RegCloseKey (hKey=0xc0) returned 0x0 [0211.708] GetAddrInfoW (in: pNodeName="127.0.0.1", pServiceName=0x0, pHints=0xdf540*(ai_flags=4, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xdf564 | out: ppResult=0xdf564*=0x5b6470*(ai_flags=4, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5b34d0*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) returned 0 [0211.826] memcpy (in: _Dst=0xe45480, _Src=0x5b34d0, _Size=0x10 | out: _Dst=0xe45480) returned 0xe45480 [0211.826] FreeAddrInfoW (pAddrInfo=0x5b6470*(ai_flags=4, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x5b34d0*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), ai_next=0x0)) [0211.827] IcmpCreateFile () returned 0x5b66b8 [0214.645] LocalAlloc (uFlags=0x0, uBytes=0x20) returned 0x5c50e0 [0214.645] LocalAlloc (uFlags=0x0, uBytes=0x1ff8) returned 0x5c5108 [0214.646] GetNameInfoW (in: pSockaddr=0xe45480*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), SockaddrLength=0x10, pNodeBuffer=0xdf670, NodeBufferSize=0x41, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="127.0.0.1", pServiceBuffer=0x0) returned 0 [0215.167] __iob_func () returned 0x76b41208 [0215.168] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x274b, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="钨\\＼\r⟟äረ皴❋") returned 0x14 [0215.188] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.188] _fileno (_File=0x76b41228) returned 1 [0215.188] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.189] GetFileType (hFile=0x3c) returned 0x2 [0215.189] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.190] _fileno (_File=0x76b41228) returned 1 [0215.190] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.190] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.190] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 20 [0215.199] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.199] _fileno (_File=0x76b41228) returned 1 [0215.199] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.199] LocalFree (hMem=0x5c94a8) returned 0x0 [0215.199] __iob_func () returned 0x76b41208 [0215.199] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x275a, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="钨\\＼\r⡴äረ皴❚") returned 0x18 [0215.199] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.200] _fileno (_File=0x76b41228) returned 1 [0215.200] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.200] GetFileType (hFile=0x3c) returned 0x2 [0215.200] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.200] _fileno (_File=0x76b41228) returned 1 [0215.200] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.200] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.200] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 24 [0215.211] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.211] _fileno (_File=0x76b41228) returned 1 [0215.211] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.211] LocalFree (hMem=0x5c94a8) returned 0x0 [0215.211] SetConsoleCtrlHandler (HandlerRoutine=0xe41c70, Add=1) returned 1 [0215.211] IcmpSendEcho2Ex (in: IcmpHandle=0x5b66b8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x5c50e0, RequestSize=0x20, RequestOptions=0xdf5e8, ReplyBuffer=0x5c5108, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x5c5108) returned 0x1 [0215.218] InetNtopW (in: Family=2, pAddr=0xdf5b8, pStringBuf=0xdf6fc, StringBufSize=0x16 | out: pStringBuf="127.0.0.1") returned="127.0.0.1" [0215.218] __iob_func () returned 0x76b41208 [0215.218] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="钨\\＼\r⦛äረ皴✣") returned 0x16 [0215.218] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.218] _fileno (_File=0x76b41228) returned 1 [0215.218] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.218] GetFileType (hFile=0x3c) returned 0x2 [0215.218] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.219] _fileno (_File=0x76b41228) returned 1 [0215.219] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.219] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.219] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 22 [0215.227] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.227] _fileno (_File=0x76b41228) returned 1 [0215.227] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.227] LocalFree (hMem=0x5c94a8) returned 0x0 [0215.227] __iob_func () returned 0x76b41208 [0215.227] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="ꥸ\\＼\r⧅äረ皴✼") returned 0x9 [0215.227] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.227] _fileno (_File=0x76b41228) returned 1 [0215.227] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.227] GetFileType (hFile=0x3c) returned 0x2 [0215.227] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.227] _fileno (_File=0x76b41228) returned 1 [0215.227] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.227] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.227] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0215.231] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.231] _fileno (_File=0x76b41228) returned 1 [0215.231] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.231] LocalFree (hMem=0x5ca978) returned 0x0 [0215.231] __iob_func () returned 0x76b41208 [0215.232] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2726, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="ꥸ\\＼\r⩅äረ皴✦") returned 0x9 [0215.232] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.232] _fileno (_File=0x76b41228) returned 1 [0215.232] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.232] GetFileType (hFile=0x3c) returned 0x2 [0215.232] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.232] _fileno (_File=0x76b41228) returned 1 [0215.232] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.232] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.232] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0215.236] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.236] _fileno (_File=0x76b41228) returned 1 [0215.236] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.236] LocalFree (hMem=0x5ca978) returned 0x0 [0215.236] __iob_func () returned 0x76b41208 [0215.236] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="ꥸ\\＼\r⪟äረ皴✨") returned 0x9 [0215.236] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.236] _fileno (_File=0x76b41228) returned 1 [0215.236] _get_osfhandle (_FileHandle=1) returned 0x3c [0215.236] GetFileType (hFile=0x3c) returned 0x2 [0215.236] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0215.240] _fileno (_File=0x76b41228) returned 1 [0215.240] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0215.241] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0215.241] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0215.247] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0215.247] _fileno (_File=0x76b41228) returned 1 [0215.247] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0215.247] LocalFree (hMem=0x5ca978) returned 0x0 [0215.247] Sleep (dwMilliseconds=0x3e7) [0216.256] IcmpSendEcho2Ex (in: IcmpHandle=0x5b66b8, Event=0x0, ApcRoutine=0x0, ApcContext=0x0, SourceAddress=0x0, DestinationAddress=0x100007f, RequestData=0x5c50e0, RequestSize=0x20, RequestOptions=0xdf5e8, ReplyBuffer=0x5c5108, ReplySize=0x1ff8, Timeout=0xfa0 | out: ReplyBuffer=0x5c5108) returned 0x1 [0216.259] InetNtopW (in: Family=2, pAddr=0xdf5b8, pStringBuf=0xdf6fc, StringBufSize=0x16 | out: pStringBuf="127.0.0.1") returned="127.0.0.1" [0216.259] __iob_func () returned 0x76b41208 [0216.259] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2723, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="钨\\＼\r⦛äረ皴✣") returned 0x16 [0216.260] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.260] _fileno (_File=0x76b41228) returned 1 [0216.260] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.260] GetFileType (hFile=0x3c) returned 0x2 [0216.260] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0216.261] _fileno (_File=0x76b41228) returned 1 [0216.261] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.261] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.261] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 22 [0216.273] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.273] _fileno (_File=0x76b41228) returned 1 [0216.273] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.273] LocalFree (hMem=0x5c94a8) returned 0x0 [0216.273] __iob_func () returned 0x76b41208 [0216.273] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x273c, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="ꧠ\\＼\r⧅äረ皴✼") returned 0x9 [0216.273] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.273] _fileno (_File=0x76b41228) returned 1 [0216.273] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.273] GetFileType (hFile=0x3c) returned 0x2 [0216.273] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0216.274] _fileno (_File=0x76b41228) returned 1 [0216.274] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.274] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.274] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0216.278] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.278] _fileno (_File=0x76b41228) returned 1 [0216.278] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.278] LocalFree (hMem=0x5ca9e0) returned 0x0 [0216.279] __iob_func () returned 0x76b41208 [0216.279] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2727, dwLanguageId=0x0, lpBuffer=0xdf574, nSize=0x0, Arguments=0xdf570 | out: lpBuffer="ꧠ\\＼\r⩿äረ皴✧") returned 0x9 [0216.279] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.279] _fileno (_File=0x76b41228) returned 1 [0216.279] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.279] GetFileType (hFile=0x3c) returned 0x2 [0216.279] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf540 | out: lpMode=0xdf540) returned 1 [0216.279] _fileno (_File=0x76b41228) returned 1 [0216.279] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.279] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf4a0, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.279] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0216.283] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.283] _fileno (_File=0x76b41228) returned 1 [0216.283] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.283] LocalFree (hMem=0x5ca9e0) returned 0x0 [0216.283] __iob_func () returned 0x76b41208 [0216.283] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2728, dwLanguageId=0x0, lpBuffer=0xdf570, nSize=0x0, Arguments=0xdf56c | out: lpBuffer="ꧠ\\＼\r⪟äረ皴✨") returned 0x9 [0216.283] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.283] _fileno (_File=0x76b41228) returned 1 [0216.283] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.283] GetFileType (hFile=0x3c) returned 0x2 [0216.283] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf53c | out: lpMode=0xdf53c) returned 1 [0216.287] _fileno (_File=0x76b41228) returned 1 [0216.287] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.287] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf49c, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.287] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 9 [0216.291] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.291] _fileno (_File=0x76b41228) returned 1 [0216.291] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.291] LocalFree (hMem=0x5ca9e0) returned 0x0 [0216.291] GetNameInfoW (in: pSockaddr=0xe45480*(sa_family=2, sin_port=0x0, sin_addr="127.0.0.1"), SockaddrLength=0x10, pNodeBuffer=0xdf4f8, NodeBufferSize=0x41, pServiceBuffer=0x0, ServiceBufferSize=0x0, Flags=2 | out: pNodeBuffer="127.0.0.1", pServiceBuffer=0x0) returned 0 [0216.291] __iob_func () returned 0x76b41208 [0216.291] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x274f, dwLanguageId=0x0, lpBuffer=0xdf4cc, nSize=0x0, Arguments=0xdf4c8 | out: lpBuffer="ꧠ\\\rᰛäረ皴❏") returned 0x5c [0216.291] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.291] _fileno (_File=0x76b41228) returned 1 [0216.291] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.291] GetFileType (hFile=0x3c) returned 0x2 [0216.291] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf498 | out: lpMode=0xdf498) returned 1 [0216.291] _fileno (_File=0x76b41228) returned 1 [0216.291] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.291] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf3f8, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.291] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 92 [0216.328] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.328] _fileno (_File=0x76b41228) returned 1 [0216.328] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.328] LocalFree (hMem=0x5ca9e0) returned 0x0 [0216.328] __iob_func () returned 0x76b41208 [0216.328] FormatMessageW (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x2753, dwLanguageId=0x0, lpBuffer=0xdf4d8, nSize=0x0, Arguments=0xdf4d4 | out: lpBuffer="ꧠ\\\r᱒äረ皴❓") returned 0x61 [0216.328] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.328] _fileno (_File=0x76b41228) returned 1 [0216.328] _get_osfhandle (_FileHandle=1) returned 0x3c [0216.328] GetFileType (hFile=0x3c) returned 0x2 [0216.328] GetConsoleMode (in: hConsoleHandle=0x3c, lpMode=0xdf4a4 | out: lpMode=0xdf4a4) returned 1 [0216.328] _fileno (_File=0x76b41228) returned 1 [0216.329] _setmode (_FileHandle=1, _Mode=131072) returned 16384 [0216.329] GetEnvironmentVariableW (in: lpName="OutputEncoding", lpBuffer=0xdf404, nSize=0x50 | out: lpBuffer="") returned 0x0 [0216.329] fwprintf (in: _Stream=0x76b41228, _Format="%ls" | out: _Stream=0x76b41228) returned 97 [0216.372] fflush (in: _File=0x76b41228 | out: _File=0x76b41228) returned 0 [0216.372] _fileno (_File=0x76b41228) returned 1 [0216.372] _setmode (_FileHandle=1, _Mode=16384) returned 65536 [0216.372] LocalFree (hMem=0x5ca9e0) returned 0x0 [0216.372] IcmpCloseHandle (IcmpHandle=0x5b66b8) returned 1 [0216.373] LocalFree (hMem=0x5c50e0) returned 0x0 [0216.373] LocalFree (hMem=0x5c5108) returned 0x0 [0216.373] WSACleanup () returned 0 [0216.376] exit (_Code=0) Thread: id = 28 os_tid = 0x444 Thread: id = 29 os_tid = 0xd48 Thread: id = 30 os_tid = 0x11ec Process: id = "6" image_name = "remcos.exe" filename = "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe" page_root = "0x6acdf000" os_pid = "0x11e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x11f4" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fa87" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 920 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 921 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 922 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 923 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 924 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 925 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 926 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 927 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 928 start_va = 0x400000 end_va = 0x4ebfff monitored = 1 entry_point = 0x4e7e6e region_type = mapped_file name = "remcos.exe" filename = "\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe") Region: id = 929 start_va = 0x771d0000 end_va = 0x7734afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 930 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 931 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 932 start_va = 0x7fff0000 end_va = 0x7ffa1676ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 933 start_va = 0x7ffa16770000 end_va = 0x7ffa16930fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 934 start_va = 0x7ffa16931000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffa16931000" filename = "" Region: id = 935 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 936 start_va = 0x4f0000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 937 start_va = 0x640d0000 end_va = 0x6411ffff monitored = 0 entry_point = 0x640e8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 938 start_va = 0x64050000 end_va = 0x640c9fff monitored = 0 entry_point = 0x64063290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 939 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 940 start_va = 0x64120000 end_va = 0x64127fff monitored = 0 entry_point = 0x641217c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 941 start_va = 0x580000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 942 start_va = 0x6f840000 end_va = 0x6f898fff monitored = 1 entry_point = 0x6f850780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 943 start_va = 0x76720000 end_va = 0x767fffff monitored = 0 entry_point = 0x76733980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 944 start_va = 0x76910000 end_va = 0x76a8dfff monitored = 0 entry_point = 0x769c1b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 945 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 946 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 947 start_va = 0x580000 end_va = 0x63dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 948 start_va = 0x760000 end_va = 0x85ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000760000" filename = "" Region: id = 949 start_va = 0x860000 end_va = 0x9cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 950 start_va = 0x73e50000 end_va = 0x73ee1fff monitored = 0 entry_point = 0x73e90380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 951 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 952 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 953 start_va = 0x76600000 end_va = 0x7667afff monitored = 0 entry_point = 0x7661e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 954 start_va = 0x76a90000 end_va = 0x76b4dfff monitored = 0 entry_point = 0x76ac5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 955 start_va = 0x4f0000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 956 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 957 start_va = 0x640000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 958 start_va = 0x76cb0000 end_va = 0x76cf3fff monitored = 0 entry_point = 0x76cc9d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 959 start_va = 0x76c00000 end_va = 0x76cacfff monitored = 0 entry_point = 0x76c14f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 960 start_va = 0x73f00000 end_va = 0x73f1dfff monitored = 0 entry_point = 0x73f0b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 961 start_va = 0x73ef0000 end_va = 0x73ef9fff monitored = 0 entry_point = 0x73ef2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 962 start_va = 0x76840000 end_va = 0x76897fff monitored = 0 entry_point = 0x768825c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 963 start_va = 0x860000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 964 start_va = 0x9c0000 end_va = 0x9cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 965 start_va = 0x6f7c0000 end_va = 0x6f83cfff monitored = 1 entry_point = 0x6f7d0db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 966 start_va = 0x76d00000 end_va = 0x76d44fff monitored = 0 entry_point = 0x76d1de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 967 start_va = 0x762b0000 end_va = 0x7646cfff monitored = 0 entry_point = 0x76392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 968 start_va = 0x74ab0000 end_va = 0x74bfefff monitored = 0 entry_point = 0x74b66820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 969 start_va = 0x743d0000 end_va = 0x74516fff monitored = 0 entry_point = 0x743e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 970 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 971 start_va = 0x9d0000 end_va = 0xb57fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 972 start_va = 0x741b0000 end_va = 0x741dafff monitored = 0 entry_point = 0x741b5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 973 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 974 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 975 start_va = 0xb60000 end_va = 0xce0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b60000" filename = "" Region: id = 976 start_va = 0xcf0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 977 start_va = 0x20f0000 end_va = 0x21d7fff monitored = 1 entry_point = 0x21d7e6e region_type = mapped_file name = "remcos.exe" filename = "\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe") Region: id = 978 start_va = 0x76d50000 end_va = 0x76d5bfff monitored = 0 entry_point = 0x76d53930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 979 start_va = 0x6f7b0000 end_va = 0x6f7b7fff monitored = 0 entry_point = 0x6f7b17b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 980 start_va = 0x6f0c0000 end_va = 0x6f7a0fff monitored = 1 entry_point = 0x6f0ecd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 981 start_va = 0x6efc0000 end_va = 0x6f0b4fff monitored = 0 entry_point = 0x6f014160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 982 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 983 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 984 start_va = 0x530000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000530000" filename = "" Region: id = 985 start_va = 0x540000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 986 start_va = 0x550000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 987 start_va = 0x560000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 988 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 989 start_va = 0x750000 end_va = 0x750fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 990 start_va = 0x860000 end_va = 0x860fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 991 start_va = 0x920000 end_va = 0x92ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000920000" filename = "" Region: id = 992 start_va = 0x20f0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 993 start_va = 0x20f0000 end_va = 0x21effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 994 start_va = 0x22d0000 end_va = 0x22dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 995 start_va = 0x870000 end_va = 0x8affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000870000" filename = "" Region: id = 996 start_va = 0x22e0000 end_va = 0x23dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022e0000" filename = "" Region: id = 997 start_va = 0x8b0000 end_va = 0x8bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 998 start_va = 0x23e0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 999 start_va = 0x20f0000 end_va = 0x218ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020f0000" filename = "" Region: id = 1000 start_va = 0x21e0000 end_va = 0x21effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021e0000" filename = "" Region: id = 1001 start_va = 0x8b0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008b0000" filename = "" Region: id = 1002 start_va = 0x43e0000 end_va = 0x44dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043e0000" filename = "" Region: id = 1003 start_va = 0x44e0000 end_va = 0x4816fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1004 start_va = 0x6dd00000 end_va = 0x6efb1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 1005 start_va = 0x74dc0000 end_va = 0x74eaafff monitored = 0 entry_point = 0x74dfd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1006 start_va = 0x21f0000 end_va = 0x2280fff monitored = 0 entry_point = 0x2228cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1007 start_va = 0x72cb0000 end_va = 0x72d24fff monitored = 0 entry_point = 0x72ce9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1008 start_va = 0x4820000 end_va = 0x494ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 1009 start_va = 0x8f0000 end_va = 0x8fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 1010 start_va = 0x900000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 1011 start_va = 0x6dc80000 end_va = 0x6dcfffff monitored = 1 entry_point = 0x6dc81180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 1012 start_va = 0x76680000 end_va = 0x76711fff monitored = 0 entry_point = 0x766b8cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1013 start_va = 0x910000 end_va = 0x91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Thread: id = 31 os_tid = 0x1198 [0217.718] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0217.771] RoInitialize () returned 0x1 [0217.772] RoUninitialize () returned 0x0 Thread: id = 32 os_tid = 0x128c Thread: id = 33 os_tid = 0x11e4 Thread: id = 34 os_tid = 0x11f0 [0217.844] CoGetContextToken (in: pToken=0x44dfc74 | out: pToken=0x44dfc74) returned 0x800401f0 [0217.844] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0217.844] RoInitialize () returned 0x1 [0217.844] RoUninitialize () returned 0x0 Process: id = "7" image_name = "remcos.exe" filename = "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe" page_root = "0x37ee1000" os_pid = "0xbc0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x678" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe\" " cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eab4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1134 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1135 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1136 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1137 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 1138 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 1139 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1140 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1141 start_va = 0x1c0000 end_va = 0x1c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 1142 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1143 start_va = 0x400000 end_va = 0x4ebfff monitored = 1 entry_point = 0x4e7e6e region_type = mapped_file name = "remcos.exe" filename = "\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe") Region: id = 1144 start_va = 0x77120000 end_va = 0x7729afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1145 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 1146 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1147 start_va = 0x7fff0000 end_va = 0x7ffe36b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1148 start_va = 0x7ffe36b10000 end_va = 0x7ffe36cd0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1149 start_va = 0x7ffe36cd1000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffe36cd1000" filename = "" Region: id = 1287 start_va = 0x4f0000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 1288 start_va = 0x50da0000 end_va = 0x50deffff monitored = 0 entry_point = 0x50db8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1289 start_va = 0x50df0000 end_va = 0x50e69fff monitored = 0 entry_point = 0x50e03290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1290 start_va = 0x75da0000 end_va = 0x75e7ffff monitored = 0 entry_point = 0x75db3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1291 start_va = 0x50d90000 end_va = 0x50d97fff monitored = 0 entry_point = 0x50d917c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1292 start_va = 0x620000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 1293 start_va = 0x73de0000 end_va = 0x73e38fff monitored = 1 entry_point = 0x73df0780 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 1294 start_va = 0x75da0000 end_va = 0x75e7ffff monitored = 0 entry_point = 0x75db3980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1295 start_va = 0x75680000 end_va = 0x757fdfff monitored = 0 entry_point = 0x75731b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1296 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1297 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 1298 start_va = 0x4f0000 end_va = 0x5adfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1299 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 1300 start_va = 0x7d0000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 1301 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1302 start_va = 0x73fd0000 end_va = 0x7404afff monitored = 0 entry_point = 0x73fee970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1303 start_va = 0x76170000 end_va = 0x7622dfff monitored = 0 entry_point = 0x761a5630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1304 start_va = 0x5b0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 1305 start_va = 0x7d0000 end_va = 0x8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007d0000" filename = "" Region: id = 1306 start_va = 0x9a0000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009a0000" filename = "" Region: id = 1307 start_va = 0x75b80000 end_va = 0x75bc3fff monitored = 0 entry_point = 0x75b99d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1308 start_va = 0x75800000 end_va = 0x758acfff monitored = 0 entry_point = 0x75814f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1309 start_va = 0x73e50000 end_va = 0x73e6dfff monitored = 0 entry_point = 0x73e5b640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1310 start_va = 0x73e40000 end_va = 0x73e49fff monitored = 0 entry_point = 0x73e42a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1311 start_va = 0x758b0000 end_va = 0x75907fff monitored = 0 entry_point = 0x758f25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 1312 start_va = 0x620000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 1313 start_va = 0x6d0000 end_va = 0x7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 1314 start_va = 0x73d60000 end_va = 0x73ddcfff monitored = 1 entry_point = 0x73d70db0 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 1315 start_va = 0x76100000 end_va = 0x76144fff monitored = 0 entry_point = 0x7611de90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1316 start_va = 0x75be0000 end_va = 0x75d9cfff monitored = 0 entry_point = 0x75cc2a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 1317 start_va = 0x73e70000 end_va = 0x73fbefff monitored = 0 entry_point = 0x73f26820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1318 start_va = 0x76230000 end_va = 0x76376fff monitored = 0 entry_point = 0x76241cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1319 start_va = 0x1d0000 end_va = 0x1f9fff monitored = 0 entry_point = 0x1d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1320 start_va = 0x9b0000 end_va = 0xb37fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009b0000" filename = "" Region: id = 1321 start_va = 0x75f80000 end_va = 0x75faafff monitored = 0 entry_point = 0x75f85680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1322 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1323 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1324 start_va = 0xb40000 end_va = 0xcc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b40000" filename = "" Region: id = 1325 start_va = 0xcd0000 end_va = 0x20cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 1326 start_va = 0x20d0000 end_va = 0x21b7fff monitored = 1 entry_point = 0x21b7e6e region_type = mapped_file name = "remcos.exe" filename = "\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe") Region: id = 1327 start_va = 0x75910000 end_va = 0x7591bfff monitored = 0 entry_point = 0x75913930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 1328 start_va = 0x73d50000 end_va = 0x73d57fff monitored = 0 entry_point = 0x73d517b0 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1329 start_va = 0x20d0000 end_va = 0x27b0fff monitored = 1 entry_point = 0x20fcd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 1330 start_va = 0x73660000 end_va = 0x73d40fff monitored = 1 entry_point = 0x7368cd70 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 1331 start_va = 0x73560000 end_va = 0x73654fff monitored = 0 entry_point = 0x735b4160 region_type = mapped_file name = "msvcr120_clr0400.dll" filename = "\\Windows\\SysWOW64\\msvcr120_clr0400.dll" (normalized: "c:\\windows\\syswow64\\msvcr120_clr0400.dll") Region: id = 1332 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 1333 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 1334 start_va = 0x5f0000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1335 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1336 start_va = 0x620000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 1337 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1338 start_va = 0x630000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 1339 start_va = 0x640000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 1340 start_va = 0x650000 end_va = 0x650fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 1341 start_va = 0x660000 end_va = 0x660fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 1342 start_va = 0x8d0000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1343 start_va = 0x20d0000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 1344 start_va = 0x8d0000 end_va = 0x90ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008d0000" filename = "" Region: id = 1345 start_va = 0x970000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 1346 start_va = 0x20d0000 end_va = 0x21cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 1347 start_va = 0x2290000 end_va = 0x229ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 1348 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 1349 start_va = 0x22a0000 end_va = 0x429ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 1350 start_va = 0x21d0000 end_va = 0x226ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021d0000" filename = "" Region: id = 1351 start_va = 0x910000 end_va = 0x94ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000910000" filename = "" Region: id = 1352 start_va = 0x42a0000 end_va = 0x439ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 1353 start_va = 0x43a0000 end_va = 0x46d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1354 start_va = 0x722a0000 end_va = 0x73551fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\7582400666d289c016013ad0f6e0e3e6\\mscorlib.ni.dll") Region: id = 1355 start_va = 0x75e80000 end_va = 0x75f6afff monitored = 0 entry_point = 0x75ebd650 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1356 start_va = 0x46e0000 end_va = 0x4770fff monitored = 0 entry_point = 0x4718cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1357 start_va = 0x72220000 end_va = 0x72294fff monitored = 0 entry_point = 0x72259a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1358 start_va = 0x46e0000 end_va = 0x48affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046e0000" filename = "" Region: id = 1359 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 1360 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 1361 start_va = 0x721a0000 end_va = 0x7221ffff monitored = 1 entry_point = 0x721a1180 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 1362 start_va = 0x76060000 end_va = 0x760f1fff monitored = 0 entry_point = 0x76098cf0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1363 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 1364 start_va = 0x717d0000 end_va = 0x7219bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\1be7a15b1f33bf22e4f53aaf45518c77\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\1be7a15b1f33bf22e4f53aaf45518c77\\system.ni.dll") Region: id = 1365 start_va = 0x710a0000 end_va = 0x717c0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\eb4cca4f06a15158c3f7e2c56516729b\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\eb4cca4f06a15158c3f7e2c56516729b\\system.core.ni.dll") Region: id = 1366 start_va = 0x70f10000 end_va = 0x7109efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\1d52bd4ac5e0a6422058a5d62c9f6d9d\\system.drawing.ni.dll") Region: id = 1367 start_va = 0x702a0000 end_va = 0x70f06fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\fb06ad4bc55b9c3ca68a3f9259d826cd\\system.windows.forms.ni.dll") Region: id = 1368 start_va = 0x6b0000 end_va = 0x6b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 1369 start_va = 0x6b0000 end_va = 0x6b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 1370 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 1371 start_va = 0x950000 end_va = 0x95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 1372 start_va = 0x46e0000 end_va = 0x476efff monitored = 0 entry_point = 0x46edd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 1373 start_va = 0x48a0000 end_va = 0x48affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048a0000" filename = "" Region: id = 1374 start_va = 0x70200000 end_va = 0x70291fff monitored = 0 entry_point = 0x7020dd60 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.10586.0_none_811bc0006c44242b\\comctl32.dll") Region: id = 1375 start_va = 0x46e0000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000046e0000" filename = "" Region: id = 1376 start_va = 0x950000 end_va = 0x950fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 1377 start_va = 0x46e0000 end_va = 0x479bfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000046e0000" filename = "" Region: id = 1378 start_va = 0x4810000 end_va = 0x481ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004810000" filename = "" Region: id = 1379 start_va = 0x950000 end_va = 0x953fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 1380 start_va = 0x960000 end_va = 0x963fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 1381 start_va = 0x48b0000 end_va = 0x4abafff monitored = 0 entry_point = 0x495b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 1382 start_va = 0x6fff0000 end_va = 0x701fefff monitored = 0 entry_point = 0x7009b0a0 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528\\comctl32.dll") Region: id = 1383 start_va = 0x980000 end_va = 0x980fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1384 start_va = 0x990000 end_va = 0x991fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000990000" filename = "" Region: id = 1385 start_va = 0x48b0000 end_va = 0x493ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 1386 start_va = 0x6ffd0000 end_va = 0x6ffecfff monitored = 0 entry_point = 0x6ffd3b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1387 start_va = 0x980000 end_va = 0x98ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 1388 start_va = 0x2270000 end_va = 0x227ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1389 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1390 start_va = 0x47a0000 end_va = 0x47affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047a0000" filename = "" Region: id = 1391 start_va = 0x47b0000 end_va = 0x47bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047b0000" filename = "" Region: id = 1392 start_va = 0x47c0000 end_va = 0x47cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047c0000" filename = "" Region: id = 1393 start_va = 0x47d0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047d0000" filename = "" Region: id = 1394 start_va = 0x47e0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1395 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 1396 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 1397 start_va = 0x4820000 end_va = 0x482ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004820000" filename = "" Region: id = 1398 start_va = 0x4830000 end_va = 0x483ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004830000" filename = "" Region: id = 1399 start_va = 0x4840000 end_va = 0x484ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004840000" filename = "" Region: id = 1400 start_va = 0x4850000 end_va = 0x485ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004850000" filename = "" Region: id = 1401 start_va = 0x4860000 end_va = 0x486ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 1402 start_va = 0x4870000 end_va = 0x487ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004870000" filename = "" Region: id = 1403 start_va = 0x4880000 end_va = 0x488ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004880000" filename = "" Region: id = 1404 start_va = 0x4890000 end_va = 0x489ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004890000" filename = "" Region: id = 1405 start_va = 0x48b0000 end_va = 0x48bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048b0000" filename = "" Region: id = 1406 start_va = 0x4930000 end_va = 0x493ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004930000" filename = "" Region: id = 1407 start_va = 0x48c0000 end_va = 0x48cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048c0000" filename = "" Region: id = 1408 start_va = 0x48d0000 end_va = 0x48dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048d0000" filename = "" Region: id = 1409 start_va = 0x6fe60000 end_va = 0x6ffcafff monitored = 0 entry_point = 0x6fece360 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_538a540779726150\\gdiplus.dll") Region: id = 1410 start_va = 0x2270000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1411 start_va = 0x47a0000 end_va = 0x47dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047a0000" filename = "" Region: id = 1412 start_va = 0x4940000 end_va = 0x4a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004940000" filename = "" Region: id = 1413 start_va = 0x6fc60000 end_va = 0x6fe50fff monitored = 0 entry_point = 0x6fd43cd0 region_type = mapped_file name = "dwrite.dll" filename = "\\Windows\\SysWOW64\\DWrite.dll" (normalized: "c:\\windows\\syswow64\\dwrite.dll") Region: id = 1414 start_va = 0x759d0000 end_va = 0x75aeefff monitored = 0 entry_point = 0x75a15980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1415 start_va = 0x4820000 end_va = 0x4868fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-system.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-System.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-system.dat") Region: id = 1416 start_va = 0x980000 end_va = 0x983fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 1417 start_va = 0x4a40000 end_va = 0x5a3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "~fontcache-fontface.dat" filename = "\\Windows\\ServiceProfiles\\LocalService\\AppData\\Local\\FontCache\\~FontCache-FontFace.dat" (normalized: "c:\\windows\\serviceprofiles\\localservice\\appdata\\local\\fontcache\\~fontcache-fontface.dat") Region: id = 1418 start_va = 0x2270000 end_va = 0x2273fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 1419 start_va = 0x2280000 end_va = 0x228ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002280000" filename = "" Region: id = 1420 start_va = 0x5a40000 end_va = 0x5b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a40000" filename = "" Region: id = 1421 start_va = 0x5b40000 end_va = 0x5c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b40000" filename = "" Region: id = 1422 start_va = 0x5c40000 end_va = 0x6131fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005c40000" filename = "" Region: id = 1423 start_va = 0x6140000 end_va = 0x717ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1424 start_va = 0x47e0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1425 start_va = 0x47f0000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047f0000" filename = "" Region: id = 1426 start_va = 0x4800000 end_va = 0x480ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 1427 start_va = 0x48b0000 end_va = 0x4911fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 1428 start_va = 0x47e0000 end_va = 0x47effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000047e0000" filename = "" Region: id = 1429 start_va = 0x7180000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007180000" filename = "" Region: id = 1430 start_va = 0x6fae0000 end_va = 0x6fc52fff monitored = 0 entry_point = 0x6fb8d220 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Thread: id = 36 os_tid = 0xbc4 [0297.321] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0297.738] RoInitialize () returned 0x1 [0297.739] RoUninitialize () returned 0x0 [0299.702] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x19de48 | out: phkResult=0x19de48*=0x0) returned 0x2 [0299.709] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x19eec0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0299.743] IsAppThemed () returned 0x1 [0299.767] CoTaskMemAlloc (cb=0xf0) returned 0x724f20 [0299.775] CreateActCtxA (pActCtx=0x19f404) returned 0x725114 [0299.908] CoTaskMemFree (pv=0x724f20) [0299.935] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc14f [0299.935] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc150 [0300.352] GetSystemMetrics (nIndex=75) returned 1 [0300.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0300.380] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x70200000 [0300.534] AdjustWindowRectEx (in: lpRect=0x19f36c, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x19f36c) returned 1 [0300.538] GetCurrentProcess () returned 0xffffffff [0300.538] GetCurrentThread () returned 0xfffffffe [0300.538] GetCurrentProcess () returned 0xffffffff [0300.538] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x19f284, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x19f284*=0x25c) returned 1 [0300.542] GetCurrentThreadId () returned 0xbc4 [0300.567] GetCurrentActCtx (in: lphActCtx=0x19f1e4 | out: lphActCtx=0x19f1e4*=0x0) returned 1 [0300.579] ActivateActCtx (in: hActCtx=0x725114, lpCookie=0x19f1f4 | out: hActCtx=0x725114, lpCookie=0x19f1f4) returned 1 [0300.579] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0300.599] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x6fff0000 [0300.896] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76230000 [0300.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x19f0a8, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWJpµûO\x97(úfshö\x19", lpUsedDefaultChar=0x0) returned 14 [0300.897] GetProcAddress (hModule=0x76230000, lpProcName="DefWindowProcW") returned 0x771aaee0 [0300.898] GetStockObject (i=5) returned 0x1900015 [0300.902] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0300.906] CoTaskMemAlloc (cb=0x5c) returned 0x725cb0 [0300.906] RegisterClassW (lpWndClass=0x19f098) returned 0xc0db [0300.907] CoTaskMemFree (pv=0x725cb0) [0300.907] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0300.907] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.1ca0192_r10_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffd, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x201d6 [0300.909] SetWindowLongW (hWnd=0x201d6, nIndex=-4, dwNewLong=1998237408) returned 76744126 [0300.910] GetWindowLongW (hWnd=0x201d6, nIndex=-4) returned 1998237408 [0300.911] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x19e8fc | out: phkResult=0x19e8fc*=0x278) returned 0x0 [0300.912] RegQueryValueExW (in: hKey=0x278, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x19e91c, lpData=0x0, lpcbData=0x19e918*=0x0 | out: lpType=0x19e91c*=0x0, lpData=0x0, lpcbData=0x19e918*=0x0) returned 0x2 [0300.912] RegQueryValueExW (in: hKey=0x278, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x19e91c, lpData=0x0, lpcbData=0x19e918*=0x0 | out: lpType=0x19e91c*=0x0, lpData=0x0, lpcbData=0x19e918*=0x0) returned 0x2 [0300.912] RegCloseKey (hKey=0x278) returned 0x0 [0300.916] SetWindowLongW (hWnd=0x201d6, nIndex=-4, dwNewLong=76744166) returned 1998237408 [0300.916] GetWindowLongW (hWnd=0x201d6, nIndex=-4) returned 76744166 [0300.916] GetWindowLongW (hWnd=0x201d6, nIndex=-16) returned 113311744 [0300.926] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc12e [0300.926] CallWindowProcW (lpPrevWndFunc=0x771aaee0, hWnd=0x201d6, Msg=0x24, wParam=0x0, lParam=0x19ec14) returned 0x0 [0300.926] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc0dc [0300.926] CallWindowProcW (lpPrevWndFunc=0x771aaee0, hWnd=0x201d6, Msg=0x81, wParam=0x0, lParam=0x19ec08) returned 0x1 [0300.927] CallWindowProcW (lpPrevWndFunc=0x771aaee0, hWnd=0x201d6, Msg=0x83, wParam=0x0, lParam=0x19ebf4) returned 0x0 [0300.984] CallWindowProcW (lpPrevWndFunc=0x771aaee0, hWnd=0x201d6, Msg=0x1, wParam=0x0, lParam=0x19ec08) returned 0x0 [0300.988] GetClientRect (in: hWnd=0x201d6, lpRect=0x19e934 | out: lpRect=0x19e934) returned 1 [0300.989] GetWindowRect (in: hWnd=0x201d6, lpRect=0x19e934 | out: lpRect=0x19e934) returned 1 [0300.991] GetParent (hWnd=0x201d6) returned 0x0 [0300.991] DeactivateActCtx (dwFlags=0x0, ulCookie=0x17fa0001) returned 1 [0301.291] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc151 [0301.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.292] AdjustWindowRectEx (in: lpRect=0x19ecd0, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ecd0) returned 1 [0301.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.301] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0301.349] EtwEventRegister (in: ProviderId=0x22b22d0, EnableCallback=0x493060e, CallbackContext=0x0, RegHandle=0x22b22ac | out: RegHandle=0x22b22ac) returned 0x0 [0301.353] EtwEventSetInformation (RegHandle=0x6e0058, InformationClass=0x1f, EventInformation=0x2, InformationLength=0x22b2240) returned 0x0 [0301.385] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.385] AdjustWindowRectEx (in: lpRect=0x19eca8, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eca8) returned 1 [0301.399] OleInitialize (pvReserved=0x0) returned 0x0 [0301.413] RegisterClipboardFormatW (lpszFormat="WindowsForms12_subclassCheck") returned 0xc152 [0301.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.416] AdjustWindowRectEx (in: lpRect=0x19ecb0, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecb0) returned 1 [0301.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.422] AdjustWindowRectEx (in: lpRect=0x19ecbc, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ecbc) returned 1 [0301.433] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0301.433] AdjustWindowRectEx (in: lpRect=0x19eccc, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eccc) returned 1 [0301.447] GetSystemDefaultLCID () returned 0x409 [0301.448] GetStockObject (i=17) returned 0x10a0047 [0301.450] GetObjectW (in: h=0x10a0047, c=92, pv=0x19ea18 | out: pv=0x19ea18) returned 92 [0301.451] GetDC (hWnd=0x0) returned 0xa0100d0 [0301.582] GdiplusStartup (in: token=0x626eb0, input=0x19dfd0, output=0x19e020 | out: token=0x626eb0, output=0x19e020) returned 0x0 [0301.602] CoTaskMemAlloc (cb=0x5c) returned 0x725d80 [0301.607] GdipCreateFontFromLogfontW (hdc=0xa0100d0, logfont=0x725d80, font=0x19eae0) returned 0x0 [0303.345] CoTaskMemFree (pv=0x725d80) [0303.346] CoTaskMemAlloc (cb=0x5c) returned 0x7259d8 [0303.352] CoTaskMemFree (pv=0x7259d8) [0303.352] CoTaskMemAlloc (cb=0x5c) returned 0x725a40 [0303.352] CoTaskMemFree (pv=0x725a40) [0303.353] GdipGetFontUnit (font=0x2281f08, unit=0x19eaac) returned 0x0 [0303.353] GdipGetFontSize (font=0x2281f08, size=0x19eab0) returned 0x0 [0303.353] GdipGetFontStyle (font=0x2281f08, style=0x19eaa8) returned 0x0 [0303.353] GdipGetFamily (font=0x2281f08, family=0x19eaa4) returned 0x0 [0303.354] GdipGetFontSize (font=0x2281f08, size=0x22bd704) returned 0x0 [0303.354] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0303.354] GetDC (hWnd=0x0) returned 0xa0100d0 [0303.355] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x19eac8) returned 0x0 [0303.399] GdipGetDpiY (graphics=0x5b4f268, dpi=0x22bd80c) returned 0x0 [0303.399] GdipGetFontHeight (font=0x2281f08, graphics=0x5b4f268, height=0x19eac0) returned 0x0 [0303.400] GdipGetEmHeight (family=0x5b451f8, style=0, EmHeight=0x19eac8) returned 0x0 [0303.400] GdipGetLineSpacing (family=0x5b451f8, style=0, LineSpacing=0x19eac8) returned 0x0 [0303.400] GdipDeleteGraphics (graphics=0x5b4f268) returned 0x0 [0303.405] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0303.405] GdipCreateFont (fontFamily=0x5b451f8, emSize=0x41040000, style=0, unit=0x3, font=0x22bd7cc) returned 0x0 [0303.405] GdipGetFontSize (font=0x228efc0, size=0x22bd7d0) returned 0x0 [0303.406] GdipDeleteFont (font=0x2281f08) returned 0x0 [0303.406] GetDC (hWnd=0x0) returned 0xa0100d0 [0303.406] GdipCreateFromHDC (hdc=0xa0100d0, graphics=0x19eb14) returned 0x0 [0303.406] GdipGetFontHeight (font=0x228efc0, graphics=0x5b4f268, height=0x19eb0c) returned 0x0 [0303.406] GdipDeleteGraphics (graphics=0x5b4f268) returned 0x0 [0303.406] ReleaseDC (hWnd=0x0, hDC=0xa0100d0) returned 1 [0303.430] GdipGetFamilyName (in: family=0x5b451f8, name=0x19ea20, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0303.432] CreateCompatibleDC (hdc=0x0) returned 0x1a01068f [0303.433] GetCurrentObject (hdc=0x1a01068f, type=0x1) returned 0x1b00017 [0303.433] GetCurrentObject (hdc=0x1a01068f, type=0x2) returned 0x1900010 [0303.433] GetCurrentObject (hdc=0x1a01068f, type=0x7) returned 0x185000f [0303.433] GetCurrentObject (hdc=0x1a01068f, type=0x6) returned 0x18a0048 [0303.435] SaveDC (hdc=0x1a01068f) returned 1 [0303.435] GetDeviceCaps (hdc=0x1a01068f, index=90) returned 96 [0303.436] CoTaskMemAlloc (cb=0x5c) returned 0x725970 [0303.436] CreateFontIndirectW (lplf=0x725970) returned 0x420a05ca [0303.437] CoTaskMemFree (pv=0x725970) [0303.437] GetObjectW (in: h=0x420a05ca, c=92, pv=0x19e9e4 | out: pv=0x19e9e4) returned 92 [0303.438] GetCurrentObject (hdc=0x1a01068f, type=0x6) returned 0x18a0048 [0303.438] GetObjectW (in: h=0x18a0048, c=92, pv=0x19e944 | out: pv=0x19e944) returned 92 [0303.438] SelectObject (hdc=0x1a01068f, h=0x420a05ca) returned 0x18a0048 [0303.438] GetMapMode (hdc=0x1a01068f) returned 1 [0303.439] GetTextMetricsW (in: hdc=0x1a01068f, lptm=0x19ea0c | out: lptm=0x19ea0c) returned 1 [0303.440] DrawTextExW (in: hdc=0x1a01068f, lpchText="j^", cchText=2, lprc=0x19eb18, format=0x420, lpdtp=0x22bdde4 | out: lpchText="j^", lprc=0x19eb18) returned 13 [0303.571] GetSystemMetrics (nIndex=5) returned 1 [0303.571] GetSystemMetrics (nIndex=6) returned 1 [0303.572] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0303.573] DrawTextExW (in: hdc=0x1a01068f, lpchText="j^", cchText=2, lprc=0x19eb10, format=0x420, lpdtp=0x22bdf1c | out: lpchText="j^", lprc=0x19eb10) returned 13 [0303.574] GetSystemMetrics (nIndex=5) returned 1 [0303.574] GetSystemMetrics (nIndex=6) returned 1 [0303.574] AdjustWindowRectEx (in: lpRect=0x19ecd4, dwStyle=0x56210242, bMenu=0, dwExStyle=0x200 | out: lpRect=0x19ecd4) returned 1 [0303.915] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0303.915] AdjustWindowRectEx (in: lpRect=0x19ec9c, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec9c) returned 1 [0303.951] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0303.951] AdjustWindowRectEx (in: lpRect=0x19ec88, dwStyle=0x56010000, bMenu=0, dwExStyle=0x10000 | out: lpRect=0x19ec88) returned 1 [0304.075] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.076] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0304.081] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.081] AdjustWindowRectEx (in: lpRect=0x19eb34, dwStyle=0x56010000, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb34) returned 1 [0304.084] RegisterClipboardFormatW (lpszFormat="WindowsForms12_TabBaseReLayout") returned 0xc151 [0304.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.085] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x56010800, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0304.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.085] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0304.111] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.112] AdjustWindowRectEx (in: lpRect=0x19eb1c, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb1c) returned 1 [0304.120] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.120] AdjustWindowRectEx (in: lpRect=0x19eb30, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19eb30) returned 1 [0304.620] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x19eaf8) returned 0x0 [0304.621] GdipCreateFont (fontFamily=0x5b451f8, emSize=0x41040000, style=1, unit=0x3, font=0x22bf59c) returned 0x0 [0304.621] GdipGetFontSize (font=0x2281f08, size=0x22bf5a0) returned 0x0 [0304.680] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.680] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0304.761] GetProcessWindowStation () returned 0xd0 [0304.765] GetUserObjectInformationA (in: hObj=0xd0, nIndex=1, pvInfo=0x22bfcf0, nLength=0xc, lpnLengthNeeded=0x19e964 | out: pvInfo=0x22bfcf0, lpnLengthNeeded=0x19e964) returned 1 [0304.768] SetConsoleCtrlHandler (HandlerRoutine=0x4930636, Add=1) returned 1 [0304.768] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0304.769] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0304.770] GetClassInfoW (in: hInstance=0x400000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWndClass=0x22bfd54 | out: lpWndClass=0x22bfd54) returned 0 [0304.772] CoTaskMemAlloc (cb=0x58) returned 0x71d1e0 [0304.772] RegisterClassW (lpWndClass=0x19e8b4) returned 0xc154 [0304.772] CoTaskMemFree (pv=0x71d1e0) [0304.773] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.1ca0192.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x40046 [0304.774] NtdllDefWindowProc_W (hWnd=0x40046, Msg=0x81, wParam=0x0, lParam=0x19e3f0) returned 0x1 [0304.777] NtdllDefWindowProc_W (hWnd=0x40046, Msg=0x83, wParam=0x0, lParam=0x19e3dc) returned 0x0 [0304.777] NtdllDefWindowProc_W (hWnd=0x40046, Msg=0x1, wParam=0x0, lParam=0x19e3f0) returned 0x0 [0304.778] NtdllDefWindowProc_W (hWnd=0x40046, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0304.778] NtdllDefWindowProc_W (hWnd=0x40046, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0304.781] GetSysColor (nIndex=10) returned 0xb4b4b4 [0304.781] GetSysColor (nIndex=2) returned 0xd1b499 [0304.781] GetSysColor (nIndex=9) returned 0x0 [0304.781] GetSysColor (nIndex=12) returned 0xababab [0304.781] GetSysColor (nIndex=15) returned 0xf0f0f0 [0304.781] GetSysColor (nIndex=20) returned 0xffffff [0304.781] GetSysColor (nIndex=16) returned 0xa0a0a0 [0304.781] GetSysColor (nIndex=15) returned 0xf0f0f0 [0304.781] GetSysColor (nIndex=16) returned 0xa0a0a0 [0304.781] GetSysColor (nIndex=21) returned 0x696969 [0304.781] GetSysColor (nIndex=22) returned 0xe3e3e3 [0304.781] GetSysColor (nIndex=20) returned 0xffffff [0304.782] GetSysColor (nIndex=18) returned 0x0 [0304.782] GetSysColor (nIndex=1) returned 0x0 [0304.782] GetSysColor (nIndex=27) returned 0xead1b9 [0304.782] GetSysColor (nIndex=28) returned 0xf2e4d7 [0304.782] GetSysColor (nIndex=17) returned 0x6d6d6d [0304.782] GetSysColor (nIndex=13) returned 0xff9933 [0304.782] GetSysColor (nIndex=14) returned 0xffffff [0304.782] GetSysColor (nIndex=26) returned 0xcc6600 [0304.782] GetSysColor (nIndex=11) returned 0xfcf7f4 [0304.782] GetSysColor (nIndex=3) returned 0xdbcdbf [0304.782] GetSysColor (nIndex=19) returned 0x0 [0304.782] GetSysColor (nIndex=24) returned 0xe1ffff [0304.782] GetSysColor (nIndex=23) returned 0x0 [0304.782] GetSysColor (nIndex=4) returned 0xf0f0f0 [0304.782] GetSysColor (nIndex=30) returned 0xf0f0f0 [0304.782] GetSysColor (nIndex=29) returned 0xff9933 [0304.782] GetSysColor (nIndex=7) returned 0x0 [0304.782] GetSysColor (nIndex=0) returned 0xc8c8c8 [0304.782] GetSysColor (nIndex=5) returned 0xffffff [0304.782] GetSysColor (nIndex=6) returned 0x646464 [0304.782] GetSysColor (nIndex=8) returned 0x0 [0304.788] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x70200000 [0304.788] AdjustWindowRectEx (in: lpRect=0x19ea88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x19ea88) returned 1 [0304.836] GetFullPathNameW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe.config", nBufferLength=0x105, lpBuffer=0x19e3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe.config", lpFilePart=0x0) returned 0x2e [0304.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x19e880) returned 1 [0304.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\RDhJ0CNFevzX\\remcos\\remcos.exe.config" (normalized: "c:\\users\\rdhj0cnfevzx\\remcos\\remcos.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x19e8fc | out: lpFileInformation=0x19e8fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0304.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x19e87c) returned 1 [0305.346] GdipLoadImageFromStream (stream=0x47e0030, image=0x19e580) Thread: id = 37 os_tid = 0xbcc Thread: id = 38 os_tid = 0xbd0 Thread: id = 39 os_tid = 0xbd4 [0297.739] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0297.739] RoInitialize () returned 0x1 [0297.739] RoUninitialize () returned 0x0 Thread: id = 40 os_tid = 0xbe0